last executing test programs: 1m3.868076512s ago: executing program 3 (id=1058): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000d80), &(0x7f0000000dc0)=r1}, 0x20) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 1m3.761773462s ago: executing program 3 (id=1059): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006261746164760000", @ANYRES32], 0x3c}}, 0x0) 1m3.589540683s ago: executing program 3 (id=1061): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r3, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m2.663923546s ago: executing program 3 (id=1073): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r0, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x22440, 0x0) r3 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2eeb6789d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) fallocate(r3, 0x20, 0x0, 0x7000000) 1m2.373783046s ago: executing program 3 (id=1081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xb4, &(0x7f0000000b00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a04007e3a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 1m1.903129378s ago: executing program 3 (id=1085): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) setreuid(0xee01, 0xee01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) (async) close(r1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) setreuid(0xee01, 0xee01) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) (async) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) (async) 1m1.902789478s ago: executing program 32 (id=1085): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) setreuid(0xee01, 0xee01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) (async) close(r1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) setreuid(0xee01, 0xee01) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) (async) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) (async) 37.942417857s ago: executing program 4 (id=1500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010003008500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x10c288, 0x40, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x248200, 0x61) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=@newtaction={0x50, 0x30, 0x1, 0x3, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x20040004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008001d00", @ANYRES32=r7, @ANYBLOB="080001"], 0x24}}, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x14, 0xa, 'kmem_cache_free\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '+{'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4044084) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r10], 0x2c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r8, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000740)) ppoll(&(0x7f0000000680)=[{r2, 0x1001}, {r3, 0x9c2254bca3659a23}, {r11, 0x1010}], 0x3, &(0x7f00000006c0), &(0x7f0000000700)={[0x8]}, 0x8) 37.845973987s ago: executing program 4 (id=1501): utimes(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 37.827296797s ago: executing program 4 (id=1502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xb4, &(0x7f0000000b00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a04007e3a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 37.806903407s ago: executing program 4 (id=1503): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r0, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x22440, 0x0) r3 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2eeb6789d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) fallocate(r3, 0x20, 0x0, 0x7000000) 37.611505418s ago: executing program 4 (id=1507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900", @ANYRES32], 0x4c}}, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'vxcan1\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000300)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)="d1f6", 0x2}, {&(0x7f0000000380)="33f44312f7183c3c3636701226136fe8d859694cc833bf990ea3c891db14eed0fc6d7898c20185e30204d1859cc4d888296ae89a043dfbf5ab4196f23b2d53d5d2357b52d253cab66712d8d1f131ea9e86d62e0e434556b6f6969236f010abcb5e629cda1721554bdfd52122a6fbe135d8747a68aa4cecd4d6a90e24f0c3809c43d03722e0d906eface3fe45ce6b8cb3db1a37dd21f6d4571dfabebe56908111c636ad7d7e082897", 0xa8}], 0x2}}, {{&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x4, {0xa, 0x4e20, 0x7623, @dev={0xfe, 0x80, '\x00', 0x21}, 0x2de5}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000580)}, {&(0x7f00000005c0)="73e5a3964788737296d86b494aa6825b714b86505e2801eb15604e5579fcb05374baf3333d9a9264e86fbb7990be59abd6904e53", 0x34}, {&(0x7f0000000600)="7a48b08144db7f83dcae53366df27543351f612fdbb2b12cc3fba2205ea0c63005e5422bf2504dfa9f716b5246aa6eeb8f3537399dc109048a5737225bb3b1789c9a8cfeb5c68aa61d5e28d7db23884d649c0be94aa91538286a821812ba8d0c569b79464c1af06496b649bb1a46bb3f1506e926acc7707b30bafc1e599c3de6f22b38213da9d99f6abff30331d66f4dc97c5e74dfdf7008b524ca12ba021c3d77395688c656ba16e66b868b6dbd72a9f2330266f18ef12dabbbf4e31321e4db2f58fae2d7235694f94ba0fe120c2f7b5584f68fa68e35b67d018e82dee99665121b236db2fe2fa936538e83c7e1be532e", 0xf1}], 0x3, &(0x7f0000000740)=[{0xd0, 0x118, 0x3, "247c26eef7ff5ab158b1a119f2277aae99725cdd1bcbcf909c247029fd3e434e4262e7076ef21633446d722b7c70232f973f14ae18366e05476636dba7a1c359d0815b780e90a2ea893dc42465dbebec8fc5676c97fa774e898b2c01612ca961bf4d26edc675d1e4ad53341d16c3ae04f6bb602c6eafc19eec432f4c1d5b94ec38ed29b38dc054bb0ab5d1e7b192b08f8d4d91be8a9abd18c1fbf5b69fc924547d6a2eff54d2ee488abcf48afb7321def2dfbd137d27c0e837941cd5"}, {0xc0, 0x117, 0xfce, "e80203d8efa2d178745d411f308f54a25fbc90a592916ac93eeb707ee91b48ac1c2a936967d47a8854a185530f3ab199bdcf7c79fc1b198d615172ca10fc229034b3feb2f0e2ec359fa5c025b329da239ce5317c13a3d31b1b71d04ff3d29e34d19755cc9486cbc1b4f9bf72b83dbcb59fdfbeb1ccce4b31835575fc6eb06bb59bdaf0cfdade5dec346aca338820614435145573b8dd8cde0a0e18eedbd6f6d1653a8037cf1e1ea4f46c871da12883"}], 0x190}}, {{&(0x7f0000000900)=@l2tp6={0xa, 0x0, 0x7, @private0, 0x0, 0x1}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000980)="090a0c46620729e81ebd3f6147", 0xd}, {&(0x7f00000009c0)="1d8e7aecada1e2073ae89e7b0380b32776a20d2dafeb497b3759c942b04dcd4a659132af44f2a1e41ecdbbe40e49e0a2fe21318cdfb76ba095625cda68f40d1fb093d66901b793bb49e45ec98b516240f5a62469f0b7ff8df80e", 0x5a}], 0x2, &(0x7f0000002b40)=[{0x1010, 0x10b, 0x10, "d8bb9eee503cefa8e2c512c6c865f7a0a2fdd67f6e1ce8852f8e1fd34e71a0675ff6810854b1d326d7ab7d1d31d4d01d2c25b76d66ecf36d4178ae8d9f5f727b1b93e1cabb33eb7a1cfc9703d9122362ca8d397813e54e067ded6776fe3ae72ae3bd6c721b428f38bf7b1d61818cfbdb7933d46cf0839cca4761a4fbb549aab9d9c6664775d0685c3b62bdd684333f31f18f150b9b84b972e4f5f8d5286e967f18348dead3ebe0bb4a37dcabfac7cfceb0ba832956b5d03e3a5112246a4b75eae61b682ef47c1a67c1251ee7311c5471df2176efc31ac85390d2c1192c492a2a2f1f759b63e9c3be7ab82be76be6920f1bd2a6544845ec3b68c7035ccf75130a1fce029d88e45540be919a466cf726a470768a4ed6523fc89784978a3b25a616d0315179df2bad8d18c1f9e81139e11f517a3e2e247f453d8eac250672d359232c67d6512b35686c6a5c923ceef0d13d8b18b572ff6f319d6afee9cda27ed34915f3685c15f816cb1921c08392700a371db65ba144b2975bcd4647de157a4b6e94b7ef8a0cd0414d9716acd67e0abea7278a311be250c137361abfaa0beefe73b912f05940afd92c2bc282d7df3687845bef2b5f500d6c188a685681a0674eec6fd83d949aa58c0eb39ec646200beecc4be52a02bba816b9cbc727f6af547d419c60803684d023d260d634c9421567e7699067347abd0651396766ccc973217aae97d6270770bc8e489676eea54bac6dd4617e4f6bd34ae7736ed58ce85016f3605585d32f795061fa23634ef6dbba0973ab9a4586ffdb416482c2b17bcc83c67d1a0690906574eb61f89cdd06ffcb673c935b9ed1548b705324ea54bc8343aaf92a0606aeee1713637cc5b2329a1e7546eb73d679fe7e465a38f40ff432d76a2d9fbeaf5217d96f064b6478b3e69778934b245576003d82c645a34c36f185da3a0955ed4fcdcadd34ce1e99bd2e50c801f38b043e8fb5561a93388012c7616a42c86146a1df462b93a7cad70d9c43c81f44452e18376fd46f579a7c90cbc4c793b12da0d22305521b899eab2aef856ed0b26b1cbb3d4307c759ab5c38d895801cf67b3a205a795089151361949841d13432c02ddcd8aef7e05abae13a1a3593883c9072cb853a0b0c915607a83dc2f515d74549edf7cde033bb3c90972005ea29e846fe2e49bd56fa8f692e970edc9e99246f4ed67ca0dcb264546c531a0aea353e30e48327954901ed6b564ce227b4218379dc59edb7af98fa0700d7d9b1efa797655301268b970753210549d55128e46ccde32f9754671b2c52d64c0c09c4df6a9d4f8bdf6ca8df5881913c082e11f2f07b545d816b35dc1d9bc018907765bc6950a0fc555acf78db16cbf01dfe7f209d69a6f9393b1372db86df52580ad77f0ecf52fe598407ea1c2e19864e73ec52c4cd10f0935b3b6ddb34aa9928623f80c10baccb956a6fc949308b93bf5df06f4855cb488c7303b9e096b3c9e384b1aa71c75bd269e66295a7a1dbec28e78078b33f4b1be23f06d33488055b257e5f55950ec91a10ca2db668847fa5fe086f7b901dc1bb359bf7bd605c32a2b9888b356f4c76bf920be9732853f9b7ff88de4cb48e9cb7cd0f08b8d67953a762d6880aa656a956aa4eb1d3fb49fedb92e2259b42ddeb52dd68f019ca049dd2cc9ccf43eafc5d48a383b65fb80958d6177346573b096fa3164fbfccc9ad3e1480b2273cf9f729437594cfb2a1d0cd5b3706bd51303fc99e7b9bb4076cea0afdc8872b1edf4dbcbdd2a8425ed65439c6e9d09d23a36445523cdc4b4c8d68640a0c29adf5a7b21cddbb718f0a8b75f1d8eaf164320cc54a3b81ec840202ca4352f4299fb8d18ff7aa8eb807ab83b8a34f0caba4f6efa0df92423d56b92f2331a7b0f07a32a653116f20345b9071e0b2f5e1944f11c1b1c9075d18928662c5bc573b7e2565f6cb3d1b3486250cd0c2f0cbe38abdbdf69c294f6e89eb442e0a8d14ed93111bdc265922f2d91c990ede22906a57eb5f4ff043a1238a826c0f8ce01fe17d0c0ee1400b341033628083f89cabaf6b35f3b339d2dae880351ab4245c73e001a985881f8c97385f50ac3720f9203c35d4abb6d65017fa242dcabaa1a7a60d27ae55b68341f02a12a308297134e04ff16c97ecc27c54123ac46eb0aca046d0aeb008c0f3ef24bee4bca4ce1ea56c391e1c9e70fc109d49f04dada54c8d82504faecd82acc29f9651646019cdbb6050744a3d22778830e6a22ae231630afc59e42bb3c5419e3917492872e849aa801a9d433fffb643a5cb5ca236c41c7adb582115111d6e7d5e71cde2dcb7ed597bb52bed6dbbc214c98f384005a3838bd44f95342f84516f9235d01f92e509f6b6fc6d0cc45a28423b61f9ac5022143a480ec9ad816d190a546b5041ebf18f32df2850f99c2ba2fc41d007f1c3dcb69a55333aa1a43f2af965e5d1f35e6daedb5cfbbe4d5d1324d75aa6401827268bc75bf6c43f7b015f2cfa65abf82813b87d3a8932c2f032a1d61f581b2c6d0cc644017d1e3556944a0a20d7c89a7c770982b7b91605eb112f9605747eb185520d33251f615a1595993f853219a2ee7d72a8c4880ea1de0d4c4b3d3a4a58d04b24cb83e87c93298ade345bd8280000376b29f4ccf707cf170a94da166296b5db4c53b6a9c893eaf21b94ff165b662dabb6f464ccbc5421d767a9ff4af6cfe4a6fa3f4ea554e4bffdb26da38196e3c4bd46d3987ff48b24cf64e3b1d08b8a4fb517b0a7a6779fb2186c986270bc891e30d4091bdd5edb6f333720676dfdd7a4b0aee76d5e4db6f06868be31c8f513c185cd817ee0f0f89841687967efd1162168fbc3c9ef0dda2a846d46ca33c2da2606481b31b3e2248f6b45014f85e81807b5f4d75fb89540a4313ed6e653ba9baf66a971f46db212e8906624f2a00de24ea0d47c62b9639c8d0b9dc6cf65c52ae8a54b2d6f5af40c11ebe5b039aa5fe35c902519b5eb366357624f3c764fde5281427f041a7554147feb073246959c96b1acd7b1f9a27cffc8c2062f52bfd20764d480b98cd4c66603e602b9deef63080b7a393845b47a89d7ce99064050ae56e8b2625b90c2f091063685e35345ab791527c7422c7caba750666d9efafaf8fe72986098cb44e9b69f685c1163bf12f24e3aabaf613df26ff8ddb19592354fd98f910a2a9c994cbb72b27c324e6908fab64411a1d11315207de9b0fbae370e63fc2b5fb1bf36fbd13553c6a9a7c3e012fc3b40912afb606391a8759a6ca0c7d40a97e8d3ffb0b1326b462d7fa6ed447d786501ffa52e0f57521289cc0ac4946b50fd7c30782107c1b0b2e3f86c107dec51746da724349a6f0e7117e016e4a288f7150e60a3e7ad2796f8386e94927b4c5f4886818238aaaba8c9f528090e30180ebb2f8f6b10a76810f7590ca3d07058597108a6d8ed2fdbfc9d2587ecf79252867e22fec153555997231ad6418aa97ea20d7de5430d55191ce46ae1bb7c46acb08151bc0f24847bbe5bfa48b45d90aedabeeb164293d8d4a9bafc5b27bf26409e052f0f7c1e9114475f87b0e0890433808ad158cff07d0bb825201fb4e44dccb7fd17a921c59f3aefe1cd61cc3ac25d1913dc065836d6ade9a1eb2919644dfe43d1445c6e88d6cf96c8c9dd076a776b85b87e55324d66a19ad4055f489b01050346e67fdf9626a798ba8bf0bbdbdab6d44cc0452085fc32451df9ad2b2feaa4f29a8f9e5a07582adb53726765fffdaa3eebec6e1939285159d4cf1ec14f2d2bb208ba7aee344b923b0feee8c816f17eb9e2389148cfad3573aebe287268fb59fea59f7700ccfa40c7e14e5f324bdaeee2ac98d7e9f8b7acbbe66090261fdd2bc02112985b9821d4042417b1775812f85888324b5e8c234c3dc58b4d078764f5825b7778eb08fadbbbab74da4a8ac832bbd83e75c3f7a768e3e066c7018ee0ede6e2e5621abf8284413e087464605e63f47f404426cd6cf0a05d7fc85cc43934f579aca74b42ed751646b24fe92c569c39ee81a69961f8ceac475e5c12564406fd8fe21aef7e08d954160753c95095b84a14e8b793f5b6a39049b63a28ca3fd6e133fe7f7c1b5731850cc6a0700b42e7df332bb999bb6aead350eedf072cd3074126bfec1eca6b94988654750c06cda690b3085fa9fe8b9da5c4dcf9ac5d82427b3513b0b34f905de756a62b38f0554ccd6b4cc4ac9b3c08b1dfc26544d4d4d203f10d3bbf971f4da5f454f422a26c3d7347a394d10543ca9efa4c20c0a77121b388179e5b06f4344497d12f1d78dfbe678a0150661ae4f679e13360d2dcdc4eb0ddd6ffc919503e8cfdb7a751aa0d82fa63c8296f70d99e69ac1fc4f0ab0c0ee5453c4f68ab482a4c9aa53425ed7313f3e190ee3b2317963013a1da0e0f6cf5a169fefdc42b753f2d33f83ee5178ac491cee7b20b6c8ac1fe7435bb38171d4db562be0a7d322fa5855eab8274eb2759eabd3956b552c941d37136e004be0a85b8248f9a426f8a01b39c2ef5497e9858bfbf7bf139856c05689ee59c100e0cd0ed7733e7f6d0a5245730b597d58714568e3c7b3336af81d67be004d25a239448e65c0aa7cc05c5175b24462765417e12bdf05f2674e7e978227413164450ce1e462dc292c81c987eda8de21536b2262b03eb1a5f6d093c67e203c0449819d1dd630702011c605babd8c84065acadcbbffb48b5c0f780c50c25ec8edec72fd5cea40cfb23c29145dec2805d971d02a3659617919adb8cf886f0d7e8adbb8ae2f56e6b5a7bf735fed341a5eeec65d64128cedfdec2f56c93592093faf9cdc60570a6763102728df1cbff07e89a1b967a11cdf5a7e5d7e923cf0305260747ad1f1dd396658499a3c8e08786c11f0c5b5a44743acb29fb3b3e374911f8414c8e8595e8a2da6a70425ec01c6ff2aeeca6c656e5d52fc7ddac74366d0e6bde61155ef58a8cbbf74e8de107e3428175de9c0a747b1216a36337ef98684a034d543949c0397ddd7df0e07b82ff76ea1f1d11f75fd24e8d6b9054b93e43b6878f72b9f4a260169ccdaffd6724be892ef934ed669e49b0ccaf9c59680d8a9a2e8539817fcfb00884755717ce6b0079e1b081336c491547a1cc29055be4d80ea01e3f8e2356edadb6eda1cfc03c1dc20706259b494a806fbbc096db2c78b47405c0c84225f205a4dfa7db45ab2056d73b4ca4da4800d46ea0a0724b2c5a781fcbd84528a55f57094510901f146f6aa83a4cf4bac013ff6385a0a7b139f9f32860d02f7951fcad72388f54717b6c6b424fde59d7521664cf54e5d7fa045d35522b2ac509f47cb9a3dfacfa0c52f9941890dfca896e48b3c4e3714a18cfb47819238633e922c3990bac5913ee38a23596404dcbec920880b56f16025ce5e420e512fb2d29e1e4d60536833b3678116ff94e5d17860f83dedb49d27d30d4e304c25c891cc8364dfb535898b46270c431d1c293c6b8943cbf102ef95d4190f0e0139025014f52b277d7da69e9c2843671bb24d7d065b92741070d23f6dd37a340de069f1ff779ac518371d821f1870541f5d9b26d9401203bbb64d628a151d00ce4b6037c7aa8ed0dd0926231b72aeedbd5b7e9dbe88e3c77e8a4209c88a604475256f5d6d7b02f7e59df7cd6a6847a9ee114c5a771a11fdc8c352dfce8ca9b00663c1da45e48f98d95d1c773c9c603641dec47c1401bc1726188b7961ddc55ffbb20d78deaa641df19487d1412f8563a39392fe28d2d97fe6434a794522582b32ed88cdb51827aab5a1fdf59611d02541294ffa1f480c7ba06cd1330af6ce6"}, {0xb0, 0x0, 0x5, "109ad398605e38b72686373a26273db25f11f7bbcfa3fad80f351e17cc0f79cdba9c8d1fd9d8c39067cb33ad36f8ae240105436abea200c8ecf94b9690c4081a3dddd5bc215d01f62d6ed73a8d8596c25d1e330e318afe12a06f7a1333ec63b229bf30bceef70c514aed953736e8c3be34ae9dbb688d9b02fd7cf4f677ff3f7bea2ed545f05dc5c4c64e587c911f21319e3a1a7558031f38efa3"}, {0x20, 0x84, 0x2, "72a70820733bb3e0f7ed5e1d672e3544"}, {0x78, 0x117, 0x6, "a073cab77118d6aa8c46fe390714914efda6a565baf02e4d0ceb7f9b0a69a9348adb0a36f4881910be91c5030c31642e67e6490040f7da5dbe52547f3d5a099671396a99b3c71f82a901ffb0b9a339e1bd305ef30b1db12f13b0d1490d6b2349ebd6be0b6a0aaa"}, {0x28, 0x11, 0x6, "f98229b3907cbebde47579c661d618dd852a37887ea036b3"}], 0x1180}}, {{&(0x7f0000000ac0)=@can={0x1d, r4}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)="9115b6b6e770a14f30e3620341ccc72923c257b88efd7ee7ed65da129686889b3b950e18867eecc40dbe2253c45c31268083f752cc22270105a2cdee78740acc73b410123b67e008602ec9550f7209ed9e6329925cb1c4781405293e2f5aa0da6cedfa9067fb3d8eff14da19d21bfea3185b6ed80da17dafd499552fddec427d7cff84e29097b2c8aacd9461b1da4b5466673f63f070e3abbef70120b18fad27f57b1bc7b3c1a161237041c7ff9a2557e39af35049e4fbd8a9bc1f87478de0239d49a7712030a9864dea0b79f0f951e0e93af2", 0xd3}, {&(0x7f0000000b40)="d08afa5d47dc5e3b86d9c454a2080df199c111f70979685556df978bf74ab92e0d1dd3499beac9d79a3b5881ca2010b125ad668df0c41e1c407632a30c71858b6a7a5e65027ad0514594e3c050769266c10f4eb89888498f34ad9c40d8", 0x5d}, {&(0x7f0000000d00)="7eb5b1060ab9e489644c645e58b3732a241d2e737a077bfe0acd2991e81e44c666f3a8d0a9dd89fc", 0x28}], 0x3, &(0x7f0000003cc0)=[{0xb0, 0x110, 0x4, "6175181e5e0f1a8bb6f9f597408c7b08d191d15a798d4631b4c86b66417622f1d2c0fd0d731cb61afa3a93b7ebb74e6f72697e3ef218229a4fd69879041ffaaae1189feeca8f23b05fda53e5df8553667337673b98229b0b0b27f47141d7e2c33419958b86c80203979f6e3c9505e9f4742224832cea1f2e7bcd0f1b6150fe6a78408ca36d22c49599e36bb0ec1591356482fec6904a313ebe69"}, {0xe8, 0x112, 0x9, "40c4d67fb09a5ce8670716343e0e171c8ed29ae9ade8ec7e2f6a3f160d74e0f25124a684c87ff95e626cb9d7d3c9571a0ddced77ec5d6cd685d14b43ec0eaba1696a2ad6b86c6e0a3fd19be3e047cf8ee61696d60bd3eba95026fa7f6e1722e3003aab7b9d1430e7feb459f31e321234e6b9a4feaecfcd2dc3f8dafd8598fed7f06c6be343116946cbc980282cc956611b9c171a81a47fe4736cdd5541b5f6019b108d094939da3bb87a5ab889b4185b17e1e4f3606d388f350a54f4917319aca4a445db2c12a1205c1207864de4942f52"}, {0x1010, 0x84, 0x2b7a, "ecb0bbd959511e1c08eeb498e83e8c485b84ccd35c575934ffa756aa2b3d8288a3651481cb3c0b4bcb04ce331440bdad187bc612c08a298a553948f15027f20d74ec19ccf8308a472705082e93b81681d28c12359d8e42e74fb5420445cf1e8286272aaf3712d6264471c029cd0d0c1e5dc617d1b7c77c8a8b4ab6033fef52cd5bf96074fcd885a33defe409bbcfe5a989a50f896414255ec01cab5099cc98093bb29b6aab0867b45692105c3856390c28fb0d9adf5d4a8c675098f311104b0e1cc70e45e7c45e2d7bbb2f833bea27364abfb1d38fa4aaaef2591789754440ad0df2576d60fc31fe0ae9af989b25453c8513e61a68ccfed29e2dcf2fbea0471f28e63eee36d20cb3248d60900d2e7a5ab765b5dbd4033237bbf6b943bc999d669c40645226c3cb909b3a4078453749a97d14a7ec648e7025e0568a963518d85d1b5510ccfbb5ff4caed96533117fa2bf1d904e69ca62a9cbd4cb722bf32852f9ed827828c7d2f2c5e615458c35848e87be5e3647333b50fad1d93b59755af5de5f229c9782522364f29260ea414d076e5b2d944a22e5c504d2a72efb172fb0d8faad4b9352e30d84c12dd683246224b21617a0125608753e3a28de53494701da769325e4524bcc54cc38ec7bd359dfdaf4325ee450bbaf077ea1b5aef2530c0b36856b2d71a4d592aca6b30ba8a8567493c796561c30c95fc202c4ac1e34231c2cf17ec95d7936459e68aef75b88f7a83ac4fe586fda51f026916bb6d2c2257bf5c8f3bf250dde6ef0355171cc70b1f87d7d2557b293fc5ac6a68f340ab950f64e21598218762f9181f35e10e41aac07af513c7365465b4fba27c3f95d949e8e70d96aa7bae97eb2b988645a697f71ad7eba55d57f2007f26c3cbf71cab70c31ecd3e001833e861cff9f0c509a32080d5925355d22abdd799d3a84b111345b7c5a74f98c7bac2cec09dad6c1b42db182650ce3e92294cb5c3a03311b5342e5aada41c7d8252d2fb9affb52ab6156665ea18e65ddaccfd6579f823c2b6b25263bd355a75abdd65eecf662ab707ed8fc95b0460ed041970395ae58f74cd740b191272f31415f83e420f1d25ffd0357404c183a8c5d27a8069e95375cc007a7961470480ae61ccd08cdac5614a6a0faf96f3aa69b8363d0bbd0c807bfc7b50c1ebfead5eb8554e4920743753f2a5950f5d509343bc24e1749cebf50221cb12b39d4eeed40734572f980dd1ab8d027d7ef55f425b53eabec203aa872cb20f406e50deee20c7c994bb1a32cadb505a813618a4593bf4590f464677289364268728f23636af1301222f88b52036d9531b4f3790da8ddc4ef247701b87c05caea07269e05de35aabb155ab1728090679fe1caa3091088fa1475280093eb54c7065634c5813d26e730d033c8ea006c7e7873948168689fca3f82da3094245ec2a02eb0f743fcd961b34f1cc4c284db1caffcf3c7a8c841884ad4c11f49d026a8440431b7df3e1edea9f4fdd2d681b23019e7818b47ce2d5aa1ccd5866e610407f9ad0530f4a6d30d27386268767b12676f0b81b286812b08b61e43540908225d5e7d6d21c787fe993c855ce7376d477ea4a9d47499ec46af4d9763201148d18a934d53e41de7e4da4b895b116ffae49891a6ff638b133abe1095a5774abbe1c0bef909b0ab9f15d8bbc086e55ad09a1a5c147a3f759fdd57776e71b2b315fdca2acf436352775097ad6ed631891dd76f495bb5a4585bb3b4cbc307c6ee32f15a1fac13b777ea110c399b92279fa03beffa0e648eeab69a48930d49d1026fb27eb2d3f0eef662f51a776c6fe40b6be612ef51b1150326e5fcf67fac56c7f4a02f5e94a7cd0970a166b57a8e711a9b7c87ffaa63d345441bcbae7f4c9c5413ac1e563f2255e0ee29eb30ffb8cce91ad283dff643b676037615a42ace11c06ec7eaa8209ca8e1b8c38a8b9b3f3527690525b49fca855b53e526424223f21e942d4f253bbd44bca3d3627d56640f7626ef71848cbd8d8bb96a48aa075923182ec199a5b065ea3977998ea3a29ce9ed89e63b10b4cf12e5e76264f0058e45367ded4c4595e9682db51323c970ef4fcc6be625a21925378907b6fb84cea87fa3553dcb752f69a38765d74cff7c663474a437996d8136594a362fa1019e0205b1d6e3a3618a31c7f8dce7ad6a8b999cd57004e332a64cfd97d326e53fef6d28601135d01a16f0b7f338d0a11150311ed6575b3f102938b0dd926bb5dcdd7a215c6f6382de336fe4106b2b4b9be247369dc1912592eac18bbd80b9696e0b304df147dd72b28fed86b250652a64c0ef90969c8a77e69be8457123400e5f4dba88064d11492ae656a9c37a328e1a3f14fa73d1c44736a6c70413eafe742e53dcd3717a2de91f8abdb1345fc792800d6fd09e2b9630a52763ec6c647f4fade7f7a6f110e744b97dd59699e4819ee94dedc6b37efc92f51a098355736560ba2c9001979df57972f5fe431f6de20184dfdf187a88eecf717593f4b6c124e7e2a5f3b1f05564f6927731e1f8600feb6187835cd64bf03fb7dccaa767d5335e1cdc3d4cb1d23b2fb375099f74e76bd3531520f74537807f2bcfbb4912a7ed9c6418172051c7b27aeb23e0af9bef9ea5506e051ac2975e5d9043c25a9aabb4be58e5b34aa54f4044f982d9b8eeb39a30d5ddf03cb8d75acdc464a5f1ac984d5baa1017b68536cbe90b8d68f2b51289f588edbed42382d511f38eb99ceddf46e00d67dc690d20f01b8659fba8f33cd62f74e720c5ed43fe0ddf624034b5ab746cbd4f1e303e66153f5142d044a42fef0beaec1c1f0ff6369be3830331e97e0ac3e00d3f0b5ae0cd22ceb25ec62729d6e3b61f3c0627860f7a062f8389fd8ab68c09de02f7473b229480d660cc6c5050c78a7f8ee13ad69075aa618917c85bc5fff0f0ccbadac39736d5a145f75d7af9fdce0b2b0ab798f7dd49d8ad92a72ae3f0a1fc95c44d8303f6af957242aee9f4ed18cb4d8bc4896120fc217c2be5ca91a0435273b6f0a53ac0e8c20aba3681591f4af28189baaa3272ea467f718b1498d91f4306504eeea874e3b41b992a7d395eacdb2eed0ee076dc12433e468421c866d3020f1b438604b3446373ca08192be1c2559e792b9f46820648e5b928aca5443ba534110dcab6b09ccce8f3841ad5d82cacdfb5cdc9ddfcda3a884167e43d4e58a474236c21406082392cc6ac1b0d2503f507b3dd1f2804c895b771b1259d053693f2ad8155702e04c4e1b7e9c41d369979afa122dd6cc7bbe3c3cc31eba0fdae822580f1211a49f380f823fb4af9ae4cddb67f38d6558d50df249a6ac3dbb32a5f0dc3a8ad126ad2471ccd00892c68cf81150f4c3c53746c43892904d2d1d6920c7c3de0297ff4972d03758bf5b5f327c7af4902e1e4f29cb26a729069e076fb873e335cf6d9e5e8f3e5f459f7e8ecef403b4b88ce6dd4439ffe2d4018199e77c3fb80b5c05b61fff3f2da3523c618d5d81dd1b2a1e495f707bd0e76bcd884c776a044c86be33f04e000d36cc2dd7b222be1ede967977a1442be948bd1757fe8436365ec98b2e889432c3e53f1dac53b177998a5423234ef3cd61aa6f2fc1a8ce05f14d4cd3aae5dc43daaae885512ec5758e0f07f624f9044f896635d30da85b8a9ed07381dbe0a8b2767fc21f68ae9cba1357627bdfeccf6b2e2a2060edabb8ce9106006f8243fafa64cc440a692d36666344ab727199a56d11957b6163546d2785c4b6ed0d34bcc10f57954995c5521edb713719e2a562045ccd150f4a6e3f481890d9918ba94e1a9c7ed8967ae812792f5cb54d323be96868d1f3ce78ae8840488ce8bc51d69b6e2ac1734053169c44fc00917e057837c1ed8a4c6c3096b498f0e76ed61cc5801c1f390cfdb227648ff5beefbdecd8584518ce8049bfcbf287c2fdb91db7b2f2fdce811c430225b173171456274c52bc889b05f1b58aec84b32bc1eaaf677976207de33d1d4be702a5a8ab41a5040f7437e655754cd90b7216865aba72fff1c79377cb038355d87656e76b6e434f7f992cc8f4c3a704f2f5eee0e56b7884038f8bd5ffdaf2b11d0c33fc630890ac1b9f72158726145dd25c513e78abae62bdd7b0ebade74edafaff5749b3ab8368bb60e9942e1195148df7ba1ded92eba91aa4e444016caff41839a74b96063276899b97c148ac93d910e8fea3aa2debea66ada6387164ca5b70bfe9351c521003160f3dfe67ee90b983ee60130e9880b788586f2aacd5ab9ebd01a9391ef5be0fe7fc374515d7045d7aab47c5c51c8e1c6c16b79ab84d1f18b3cfa7404fe49651f1a2d5d1c002a63a8e65797e732a1c374b81ea2bfd425342d86e51ce55e023fed7e54717d9b0c559b35106e22f597595521f716eb2834d0efbb990f51cd43214442da0dc34e26b81ea1eacb5a0f69cdbe3b25d1208127ffac67a8f6935189eb787c0e136351facab8f22fd813946a376886f7a1cfe0c77432347ea60467ed097770d51171180e4f736859e37bd357764117de769563d7a43b1381b01806972c87885d30e64624a5bbcd6dabd5c05887671840054054315b10f774c435f2caf759fc3cf4bb3e2c82ec8a845adfc095f44cfe70e8593a184561b92b9e15a188b36199ca52c3fbc2019de051a4a02b071674df288b62dac41fc7fe3daa48b024eba05d47f899e86c5cda0f41834290c367cfd5fdda7451065ccd6c3517a0fe13f947f1d7f64786972f9f7616f493d2bfcf98ef3f48014d772fcbe4356c5d1ed365ded97284fff0c4318f1838c9ebe3a9be51731ec31f877f481336d35b10bc842ef986c5d6303cd9d5c8f79a65143e470082db84ed473526b83ae34cba8c2ee5ab2fab045df924ad582b549de451ab96ec26f0a852c2aa4e6cd6d9d6cf9a60074f70d4e46dc3cfd327d499029007cf8ed7658045bc2e967236767e0d34db5eca1a415e399877a29a0f81d60b5b4eefd8f6d4d40bf7d2302bdc31e1fe209597f621ab5a97b2ca728c6025dc5b0a77435c195eb0dd0b688efb048537550b05035270b02d5b3d152b17562d56e9774c266fcb567bc1cf0fe58d2367d8a392486491f5c7c2b4e3585e5d9e9ab36e6601290a8b7ecde381c4a23f8300ba09a7e3eeb2bd4e5b6391a571934eda7f6091bd26009a2649531d08d0e14f6d898d3dc73449c8d97fd13ac44aeb272f6acdba8eb280f9e6172984aa5670065cae137fc3177d347fd74c0189538ac2ee4b526faf23873acc27c2f0852df49d14c563eeb194cdda2e01fe6ba1e9626c0dc1a430df032dc68a96a504eeeacf7f8e7d8f96e190bb06547393a90e28602a28a55621c8459633a0380009793f16cc43ff7c0fc23bf95066aae67c0fe17f9f458ac57af3ec0e38388ad12d16a117c774a68d73110e70e3a1bbe0c4518d33b6d2f2e32acb5d8bb988f0339c914786274da11a1f69171dc8c8926f7c0d3b6779aeec338252de59ddf338ab0d1e71a4be58c651830789dc6c24491fa77c87a3dd63515faad2eb05269d77e6c56b6a905a4d172aa842e211a0f86e42ec06742cbb5eaf0dcfcd8b9b189ed659468ccaa6b89464826eb9a1abc7ebbd0e700a4286107c72a2a65183e71623bf1f4d4e008356a623b8af8d838966133fabc1e0495e83b64c8e4ed25b531e4e4cc41df3203276a2e01db5ed6431264c4f6cd641c7bf987628e2a4d428913de1d861dade34e19b0d7460e34faef1c5dfa596f92e27984121e0e4cebb592820410efca9265d4d56781c5a60dbfb3b7e0c1df794fde9c9eb60773695439fe5d563e7770f5a"}, {0x88, 0x115, 0x9, "cc17c289ab3e2c5607fe59fd690e420df29dd38a42ac3918985bad0cc81a49ff04388beb7580aad1c99bb3d1c9c764a33a1c01548835778b2814b85d64ad255bb554f9b4fcf083c1bdb1378f77cfb2ae681bb93d51d193989493024156345f8063da53bab2a4e969416b02ca8397c42c2a94ce3fd2124ac5"}, {0x88, 0x1, 0x0, "8750c5bfe14f5dd607b475d68e1eafb0665db391c198cc0d438956831b242d9e1f878867de4761e0709bab686d5d183e75d4172db2ce1b4689a7a6bb525c10152ed9ea2e68f7cfe760e30f07d6e8bdeca1951b2722c4ac0684cf9663883457213f7a9e9289ca5a171d4d3a6309c1c614b222"}, {0x108, 0x10e, 0xe9, "908637baefeb4f8b00ef0420c9190517cc02ea54f99a077a68bfa50893749c845099232bd85e23202800b42881388e09b801179771466f2827e2d8374745f6fdc5a615682e5d1af7e329c239dfe4a58795464477ab0e5fcc56f88eec7a76fb8b354b8d380c4680c68594348d3c749c8560d82348a8c208bd86d20c73305173b475bc59b62729d82b30ed719a2bdead584cbc30503c9d7500b0f658e72e161ef2536327be7cf77b1b1357e11f33c204f76514530e96dcc663de554d133448d64ce6de5ab3c34b8de930f929a3687fd0347b28ebb1be9df29f0f7193903dfbfd9862766486a67bf995d3a1f1b6a783a3e55c6dbec4ff6d3b"}, {0x98, 0x102, 0x5, "63ae3d65df804b93e23fb73c8812aad16ebb1956fd60af6e509df5e5a9be9b11fa2983961a7aeb482319cd28d482992d76f77082517a7d8103fbf0a78e56869db5ebe083d1bda5be6b82be0cab2c6e0c206ad812633d41b66dc03a06f6a72e33d3739a7fa9675c36653b9bdf184a85cde184a6d167f48d8e9fde349274ff88fae182f5114376da87"}, {0x1010, 0x114, 0x1, "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"}, {0xb8, 0x0, 0x0, "eb22a34cec88ce176eeb8d8a7c9f21149ad486b2c184367041e53199add05297e701d65180951666dfad4765e7c781c5e2da7e83d043b7c3f9e924fec4e42244c1f02f0e262184f6e6d5613057edbd0b109aa37cd22597d801b2a0c1e7a193d4db74154913a5df8d836f51bd0dd475b3da11a5b931ee0f498b892b938e5abe92e3f475389e3813197ebbfdefd0f4e4b1f51d3c0f5d1479b403fd1cbed40daa242108"}], 0x2520}}], 0x4, 0x8085) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000080b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYRES16=r5], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 37.05118945s ago: executing program 4 (id=1511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010003008500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x10c288, 0x40, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x248200, 0x61) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=@newtaction={0x50, 0x30, 0x1, 0x3, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x20040004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008001d00", @ANYRES32=r7, @ANYBLOB="080001"], 0x24}}, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x14, 0xa, 'kmem_cache_free\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '+{'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4044084) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r10], 0x2c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r8, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000740)) ppoll(&(0x7f0000000680)=[{r2, 0x1001}, {r3, 0x9c2254bca3659a23}, {r11, 0x1010}], 0x3, &(0x7f00000006c0), &(0x7f0000000700)={[0x8]}, 0x8) 37.02038044s ago: executing program 33 (id=1511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010003008500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x10c288, 0x40, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x248200, 0x61) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=@newtaction={0x50, 0x30, 0x1, 0x3, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x20040004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008001d00", @ANYRES32=r7, @ANYBLOB="080001"], 0x24}}, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x14, 0xa, 'kmem_cache_free\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '+{'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4044084) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r10], 0x2c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r8, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000740)) ppoll(&(0x7f0000000680)=[{r2, 0x1001}, {r3, 0x9c2254bca3659a23}, {r11, 0x1010}], 0x3, &(0x7f00000006c0), &(0x7f0000000700)={[0x8]}, 0x8) 32.811255174s ago: executing program 5 (id=1546): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, 0x0, 0x0}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') (fail_nth: 5) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r7}, 0x18) openat(r6, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r8, 0xffffffffffffffff, 0x0) 32.783680023s ago: executing program 5 (id=1547): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 32.665901724s ago: executing program 5 (id=1550): utimes(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 32.574806034s ago: executing program 5 (id=1552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000000680)=""/253, 0xfd}, {&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000180)=""/48, 0x30}], 0x6, &(0x7f0000000800)=""/179, 0xb3}, 0x101}], 0x2, 0x62, 0x0) 32.531333884s ago: executing program 5 (id=1554): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1600ff070000000004", @ANYRES32=0x1, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYBLOB], 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000540)='./file0\x00', 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00420152c4c7ef7f633ea8000000004d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c370fd65509ff9c85cbd090000008b9412ffa005000000000000273d94d3d75d2327ae06fb74cea53cd8f2abbcf843f247be745ac8e75c32b9460623409a4af21c2568c62dbe7e78359bf47bdb82bbdd40be4a7e5d3396b0212ad24405886f22285c70296a4bb673226b70c4d0e6b98b7a9c2644d4cd55cb77b6abbec07137f6f9d178abb6b3c3bd2c932f52ff1f308e49e9ea435e999a11765291492bfbe10b148bbfddd6f7d6ca1469e4b3646ffc"], 0x9, 0xa36, &(0x7f0000001580)="$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") (fail_nth: 6) 32.296370356s ago: executing program 5 (id=1558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000080000000000000000000000f8fcffff00000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000fa0000000000000000006c1efbc1fa2e0300469d3d0249bd9312b1c58d0b544c7b53aa1ddcd95f317d5dd7dbd406c31619031dc4bc3eee514d0d5cc8e2660f778db6e7504938ae00"/85, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='mm_page_free\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000021000183afffe80000000fe5c00000000000000000000bbff02000000000000000000000000000186009078000002ff00"/78], 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) acct(0xfffffffffffffffe) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa441, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x7, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) utimes(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) 32.226206996s ago: executing program 34 (id=1558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000080000000000000000000000f8fcffff00000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000fa0000000000000000006c1efbc1fa2e0300469d3d0249bd9312b1c58d0b544c7b53aa1ddcd95f317d5dd7dbd406c31619031dc4bc3eee514d0d5cc8e2660f778db6e7504938ae00"/85, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='mm_page_free\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000021000183afffe80000000fe5c00000000000000000000bbff02000000000000000000000000000186009078000002ff00"/78], 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) acct(0xfffffffffffffffe) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa441, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x7, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) utimes(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) 20.574197442s ago: executing program 7 (id=1701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x6}, 0x4ec0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(r1, 0x1, 0x0, 0x1, 0x0, 0x1000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="efffffff02000000ff0f0000f0d37e6d3ed976e5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c0002800500"], 0x44}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xda90) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000340)=0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x103301) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301020007006000000002000020d3"]) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="009a750000000000000000000020000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="180000000100"/28], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10, 0x0, 0x8000000000000000}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) 19.705501116s ago: executing program 7 (id=1716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) (async, rerun: 32) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0x8) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000340)=0x1e) 19.146576577s ago: executing program 7 (id=1721): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x1d9) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) (fail_nth: 2) 18.2367282s ago: executing program 7 (id=1726): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r1, 0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x199100a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = getpid() setreuid(0xee00, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5], 0x1}, 0x58) 18.09660963s ago: executing program 7 (id=1729): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000d80), &(0x7f0000000dc0)=r1}, 0x20) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 17.763340521s ago: executing program 7 (id=1733): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2, 0xfbfffffffffffffc, {0x0, 0x0, 0x1}, 0xff}, 0x18, &(0x7f0000000180)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x200000ee) 17.763235151s ago: executing program 35 (id=1733): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2, 0xfbfffffffffffffc, {0x0, 0x0, 0x1}, 0xff}, 0x18, &(0x7f0000000180)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x200000ee) 15.22640228s ago: executing program 1 (id=1759): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x92c, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='erofs_readpages\x00', r1, 0x0, 0x1}, 0x18) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xfff2) 15.15306568s ago: executing program 1 (id=1760): socket$kcm(0xa, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/image_size', 0x82200, 0xd4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r4, r4, 0x0, 0x7a680000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0xfffffff3}, @mss, @mss={0x2, 0x8}, @window, @timestamp, @timestamp, @mss={0x2, 0x9}, @timestamp], 0x401) memfd_secret(0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = gettid() r8 = epoll_create1(0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000200)={0xa000000a}) finit_module(r9, 0x0, 0x0) tkill(r7, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000400)='mm_migrate_pages_start\x00', r10, 0x0, 0x3}, 0x18) 14.033702294s ago: executing program 1 (id=1772): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x400000000080803, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='io_uring_create\x00', r4, 0x0, 0x24f8}, 0x18) syz_io_uring_setup(0x4076, &(0x7f0000000240)={0x0, 0xc6fa, 0x10100, 0x1, 0x4}, &(0x7f0000000380), &(0x7f0000000200)) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x38}, 0x0) 13.458708076s ago: executing program 1 (id=1784): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0xb, 0xe, 0x3, 0x9, 0x0, 0x6, 0x16016, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x5, 0xac6}, 0x400, 0xa7, 0x8001, 0x2, 0x9, 0xb, 0x2, 0x0, 0x3ff, 0x0, 0x4}, 0x0, 0xd, r1, 0x13) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000280)=0x5) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) setfsuid(0xee00) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x7f, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setreuid(0xee01, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000f4000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffa402000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0xf00}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0xb, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x6, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000380)={[{@noload}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@sysvgroups}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000f40)="$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") creat(&(0x7f0000000280)='./bus\x00', 0x2) 13.186824247s ago: executing program 1 (id=1786): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x1, 0x0, 0x5, 0x405, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xa, 0x148, 0x178, 0x10, 0x280, 0x2a8, 0x2a8, 0x280, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x0, 0x3, 0x10}, 0x0, 0x110, 0x178, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@limit={{0x48}, {0x6, 0x7fffffff, 0x5}}, @common=@inet=@hashlimit1={{0x58}, {'\x00', {0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x78, 0x20}, {0x6}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x5, 0x4, 0x9, 'snmp\x00', 'syz0\x00', {0x3}}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x2}, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x378) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xfc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000200)=[r5, r1, r2, r0, r1, r2, r5], 0x7) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2}, 0x7}], 0x2, 0x2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r6, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r7}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r4, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x16, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000340)='GPL\x00', 0x123, 0xc2, &(0x7f00000004c0)=""/194, 0x41100, 0x21, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r4, r8, r4, r4, r1, r4], 0x0, 0x10, 0x1, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@nolazytime}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@bsdgroups}, {@errors_remount}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 12.26097698s ago: executing program 1 (id=1796): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x202) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x6, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x40000) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) 12.11977059s ago: executing program 36 (id=1796): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x202) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x6, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x40000) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) 3.354913739s ago: executing program 8 (id=1882): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000af0000000000001f00ce397ce2ff"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_open_dev$loop(0x0, 0x1000, 0x400) quotactl$Q_GETINFO(0xffffffff80000502, 0x0, 0x0, 0x0) 3.294903229s ago: executing program 8 (id=1885): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r3, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.432744212s ago: executing program 8 (id=1894): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r3, &(0x7f0000001240), 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.319295192s ago: executing program 0 (id=1898): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x80000, 0x0, {0x60, 0x0, 0x0, 0x0, {0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) 2.259255052s ago: executing program 0 (id=1899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000080), 0x1, 0x769, &(0x7f0000000fc0)="$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") syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010003020000de2505a1a440000102030109027100020109400b0906000000020d000005240600010524005c000d0b0f0106000000d90004000806241a0500101524120400a317a88b045e4f01a607c0ffcb7e392a0901000071c6d58afcd4028fb6d543bd6081020d00000904010102020d00004027e67d8f380c33ed1909058202000268030709050302000406040100"/155], &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) 1.897685373s ago: executing program 2 (id=1901): utimes(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1.842948094s ago: executing program 2 (id=1902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x6}, 0x4ec0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(r1, 0x1, 0x0, 0x1, 0x0, 0x1000000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0xda90) r7 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000340)=0x4) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x103301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301020007006000000002000020d3"]) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="009a750000000000000000000020000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="180000000100"/28], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0x8000000000000000}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) 1.842550393s ago: executing program 9 (id=1903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x6}, 0x4ec0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(r1, 0x1, 0x0, 0x1, 0x0, 0x1000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="efffffff02000000ff0f0000f0d37e6d3ed976e5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xda90) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000340)=0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x103301) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301020007006000000002000020d3"]) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="009a750000000000000000000020000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="180000000100"/28], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10, 0x0, 0x8000000000000000}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) 1.750405043s ago: executing program 6 (id=1906): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r3, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.705591484s ago: executing program 0 (id=1907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x6}, 0x4ec0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(r1, 0x1, 0x0, 0x1, 0x0, 0x1000000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0xda90) r7 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000340)=0x4) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x103301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301020007006000000002000020d3"]) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="009a750000000000000000000020000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="180000000100"/28], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0x8000000000000000}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) 1.516983145s ago: executing program 8 (id=1908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000500)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000001540)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)='a', 0x1}], 0x1}}], 0x1, 0x600c050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYBLOB="ff00010005"], 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f000007b8af8ff00000300000000000000000007020000e8ffffffb7030000000a0000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) write$selinux_access(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f683a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0xffffffffffffff50, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getresgid(&(0x7f0000003c40), &(0x7f0000003c80), &(0x7f0000003cc0)) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000001880), 0x8c2, r7}, 0x38) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r8, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) close_range(r8, r8, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x1000, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.508943864s ago: executing program 8 (id=1909): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0xa) io_setup(0xbf5, &(0x7f0000000600)) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r5 = gettid() syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYRESOCT=r5], 0x1, 0x67e, &(0x7f0000001600)="$eJzs3V1v29Ydx/Ef5SfFHYJiG4IgSJOTZAUcLFMouXFgZMCqUZTNTRIFUh5sYECRNXYRRE63JAMW3xS+2BPQvYHd9WK72IsYsOu9iu1uA4rtbsBuWPCQsiVbD1btJG3y/QStKPLPc/4kFf7BSDwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQ49Vct+yoEbQ2Ns1oXi0Km2OWZ63N6WY2cXNiv5KT/qdiURezWRe/fbj4Qvq/67qcvbusYvpS1N5bF96+963ZQm/9MQl9GZq2wafP9x7d73a3n5wgdkZTN/8qqXCCoDW/FcRh0Kyu+SaIQ7O6suLeXq/Hph40/Hgr7vhN40V+oRNGZsm7acqrq8vGL22FG621WrXh92be/V7FdVfMjxayAy2pFHvrQaMRtNZsTLo4jblrPv1pFuBXm8bsPOxuL09KMg0qnySoMimo4lYq5XKlUl65s3rnruvOHpvhphz3gI5FnPmHFl8zZ3fyBk6pkNb/fzpSQ0W1tKFNmaF/PNUUKVRzxPJcr/6/e9sf229//e9V+YvSD/LFl2Tr/5Xs3ZVR9X9ELkbGrjBsiTNi/nR/5vJWnuq59vRI99VVV9t6cgZtG5mrp23h12eSxz+SzOiINflqKVCsUIGaqto5Jp9jtKoVrcjVB1pXXbGM6grUkK9YW4rVkW8/UZ4i+aqqo1CRjJbk6aaMylrVqpZl5KukLYXaUEtrqqmq/yVJsqOHdr8vj9kK9YLKIwIW+oMqY1oaVf9/9kn2Oc3rv0v9f1Nln4OF/Cw2Lgb4Ckjy6/8pXX0x2QAAAAAAgBfBsf/67tjv7t+RlKgeNHz3VacFAAAAAADOkKNkQZflyP6kTe/I4fofAAAAAIDXjWPvsXMkLdof9TuHd0Kd5B8BZl5CigAAAAAA4JTsnf9X5qXEDlpxVc5U1/8AAAAAAOBr4Hd9Y+zP9sbYTXpf6xckxe0F56//WVA05+y3N7/j7FbTJdXdPObYLwA69UvO+XygXvsyL8m+8/zLTt5bPgjmwbiDn+9MGuvfiY4kMD/T38CIBJy055XZ/J0+1bVslWv5OPMP9gqyS7JeFutBwy95YeNeWdXq+ULH3+z88vHDX0nRwXbuPOxulz78uPvA5rKfztrfTRv9ZCCdwvCdcZjLMzvegr3nYtgWn1O91+XvW81Fx/br9rZ/RtXdQn9H4w7AYZ+/0fXsmF1fzGIX9w5G3E+3v5huf7lkD9nA1kdzzmEW5aNbPuxAjMiiaLO4kcXcWLqRvfTyS9spOMXvzkiV0vFjMJBFpT+LyfvC+e+xfTEui3xfLKdZ/C1taEQWy9NlceyIAMCrsnNYhewg5sfqbq889E5qX6ruTK7u7w9W92d/TBK7wow0m383MbaXotIz+pJj69C87Il19tKQM7qb15WiRpzR3VNUt7Svvxw+AylP+1gW/0+S5F7Z9vuHI1X1s3SFz0b2GzcqM+kuvP1s9+d2APzUR9sfbT+uVJZX3Pdc905Fc3Yz8pcZHc2U32wCAE7wjJ2JEc57upZFXHvw73ezqYGK982DnxSU9KE+VlcPdKv3CIGrw1td7PsZwq3sqlV9V63mwtv3zklHY8u6NfKqztbSvtjKQeyceqsMVurD2OUXfBQAAHi5rk+ow8Prf3Gg/t/SUhaxdGnodfdgLT/6hOBRseXJyb9/1nsDAIA3gx997ix2futEUdD+oLy6Wq521n0Thd6PTRTU1nwTtDp+5K1XW2u+aUdhJ/TChmlHWghqfmzijXY7jDqmHkamHcbBpn3yu8kf/R77zWqrE3hxu+FXY994YatTnZGpBbFn2hs/bATxuh/ZleO27wX1wKt2grBl4nAj8vySMbHv9wUGNb/VCepBOtky7ShoVqMt85OwsdH0Tc2PvShod8KsQduX1zFBqx5GTdtsScnUDzoEAOB19PT53qP73e72kzET+5ock0/MD2mQ75sBAPiKOSzXU6xUfIEJAQAAAAAAAAAAAAAAAAAAAACAY05y/99UE3PDbhaUDub84vyRtf6kYe04OuvEppkoTLtW75aIvUd/HxN87mBOb/f3x+y/tA381zekt+wcZXNmz76vc3ZvvLwD9/2dbI+OjEkXDl20cHAsZs/+r0M68fjPIxYlSZKMX31hcB/Oj9vAwYlZSU/mT3EIBk4TjJsBvIa+CAAA//9z/kFZ") r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r6, 0x0) 1.030345326s ago: executing program 2 (id=1910): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001fee000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)='%ps \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = fsmount(r2, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r5, &(0x7f00000003c0)='./file0\x00') statx(r5, &(0x7f0000001d80)='./file0/../file0\x00', 0x4000, 0x0, 0x0) 998.701206ms ago: executing program 2 (id=1911): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20004d03"], 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000280), 0x45}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dc55) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="c5", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) 972.187546ms ago: executing program 9 (id=1912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) 931.605247ms ago: executing program 2 (id=1913): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r3, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 916.969777ms ago: executing program 9 (id=1914): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x601, &(0x7f0000000ac0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)=0x2) write$ppp(r2, &(0x7f0000000380)="03f4", 0x2) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) 846.793947ms ago: executing program 6 (id=1915): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) poll(&(0x7f0000000000), 0x37, 0x5859) (fail_nth: 3) 815.955247ms ago: executing program 0 (id=1916): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000d80), &(0x7f0000000dc0)=r1}, 0x20) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 475.325338ms ago: executing program 0 (id=1917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="080000000100000008"], 0xffa1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) tkill(0x0, 0x7) sendmmsg$unix(r7, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @empty}, 0x1c) splice(r6, 0x0, r10, 0x0, 0x400000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0xdffffffd, 0x4, {0x0, 0x0, 0x0, r11, {0x700}, {0x0, 0xfff3}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x2000000) 475.116108ms ago: executing program 6 (id=1918): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 337.013639ms ago: executing program 6 (id=1919): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000500)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000001540)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)='a', 0x1}], 0x1}}], 0x1, 0x600c050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYBLOB="ff00010005"], 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f000007b8af8ff00000300000000000000000007020000e8ffffffb7030000000a0000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) write$selinux_access(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f683a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0xffffffffffffff50, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getresgid(&(0x7f0000003c40), &(0x7f0000003c80), &(0x7f0000003cc0)) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000001880), 0x8c2, r7}, 0x38) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r8, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) close_range(r8, r8, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x1000, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 277.599449ms ago: executing program 0 (id=1920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x6}, 0x4ec0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(r1, 0x1, 0x0, 0x1, 0x0, 0x1000000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0xda90) r7 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000340)=0x4) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x103301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301020007006000000002000020d3"]) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="009a750000000000000000000020000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="180000000100"/28], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0x8000000000000000}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) 268.061888ms ago: executing program 9 (id=1921): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000070000000199c80009c009d8080aa19ec2f00e000000010000006fb3174287906387526886d5d9f0d44b9b30d3fca6002737bd9261b41929659294d7d924e752e8ea9a8457fdb1cef014378724145d3ab0fc28312790a682b4785a5b67a792fbea009b2c436cc45ccfd509b10d74471be566ff5152d3339da50101947ee017fad133", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) unshare(0x20040600) pselect6(0x40, &(0x7f0000000100)={0x8, 0xd503, 0x6, 0x4, 0x5, 0x1000, 0x7, 0x2}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={0x0, &(0x7f0000000900)=""/4, 0x0, 0x4, 0x0, 0x400, 0x0, @void, @value}, 0x28) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x80000d51, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2ad, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r6}, 0x10) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) rmdir(&(0x7f0000000140)='./file0/bus\x00') fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000300)='objagg_obj_get\x00', r3, 0x0, 0x9}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) select(0x0, 0x0, &(0x7f0000000280)={0x2, 0x80000001, 0x8001, 0x6, 0x100000000, 0x5b, 0x2, 0xfffffffffffff355}, &(0x7f0000000300)={0x5, 0x8, 0x1, 0x100000001, 0x3, 0x4, 0x100000000, 0xcc}, &(0x7f0000000340)={0x0, 0xea60}) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000008000000073797a300000000058000000030a01040000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f74515f626174616476000900010073797a300000000004000880140000001000010000000000000000000000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$binfmt_script(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106000000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350602000fff07201706000020191800160600000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 243.568059ms ago: executing program 8 (id=1922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x6}, 0x4ec0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(r1, 0x1, 0x0, 0x1, 0x0, 0x1000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="efffffff02000000ff0f0000f0d37e6d3ed976e5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xda90) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000340)=0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x103301) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301020007006000000002000020d3"]) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="009a750000000000000000000020000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="180000000100"/28], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10, 0x0, 0x8000000000000000}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) 234.211489ms ago: executing program 6 (id=1923): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x240) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000200)={{0x1, 0x0, 0x8, 0x0, 0x1000022}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xff34, 0x0) listxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getcwd(0x0, 0x0) write$P9_RMKDIR(r1, &(0x7f00000001c0)={0x14, 0x49, 0x2, {0x0, 0x4, 0x6}}, 0x14) socket$l2tp6(0xa, 0x2, 0x73) 17.50374ms ago: executing program 9 (id=1924): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) 17.18603ms ago: executing program 6 (id=1925): mkdir(0x0, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x18) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000300)={0x113e, 0x0, 0x0, 0x10000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) 14.38223ms ago: executing program 2 (id=1926): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r3, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 9 (id=1927): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f00000200000000000000", @ANYRES32, @ANYBLOB="00002300000000000220000000000017000000009ee0bd4acde8bd9f0f48f90c7da9aabd0a8bf1f1efb87fa9d962ea0c291fda09e50acb716119ef2880bf42808e143d4f4fbaf8fe7cf0ddbdd3b9e32a52cfd2100bdd3f80065eb9de9f0d4922b5bed3502126ed60eeecd42b93e6ad88d12e111d024916048e4423ebe1d707dcf570920af6b4fdead284e1e6b0f5970e4b8df96bbd42ba1d8db9c5d61483ca5443d13fd504", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800eaeb90a0b20000000000408ecf510300000000181100006ac9a57ae2777b95581e5419648b4d8e766b225be5c69dc8a25216", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x58, 0x2c, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xc, 0x4}, {0x4, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xfa, 0xf}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x10, 0x4c}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}, @TCA_CHAIN={0x8, 0xb, 0xf}]}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb7}, @exit], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r9, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socketpair(0xb, 0xaabdcfc16a8e9feb, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8912, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r11 = dup(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0xfffffffe, 0x5f, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsetxattr$security_selinux(r3, &(0x7f0000000180), &(0x7f0000000240)='system_u:object_r:etc_runtime_t:s0\x00', 0x23, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) unshare(0x60400) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) kernel console output (not intermixed with test programs): [ 129.811107][ T8662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.817041][ T8662] RIP: 0033:0x7f69d6d5fed9 [ 129.821482][ T8662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.841128][ T8662] RSP: 002b:00007f69d53d7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.849582][ T8662] RAX: ffffffffffffffda RBX: 00007f69d6f25fa0 RCX: 00007f69d6d5fed9 [ 129.857555][ T8662] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 129.865563][ T8662] RBP: 00007f69d53d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.873535][ T8662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.881686][ T8662] R13: 0000000000000000 R14: 00007f69d6f25fa0 R15: 00007ffff6366248 [ 129.889674][ T8662] [ 129.901529][ T8641] netlink: 'syz.6.1590': attribute type 1 has an invalid length. [ 129.930244][ T8228] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.943745][ T8516] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 129.957180][ T8516] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 129.966687][ T8516] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 129.982138][ T8516] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 130.030287][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.054842][ T8675] loop6: detected capacity change from 0 to 2048 [ 130.056708][ T8516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.092663][ T8516] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.105460][ T8675] EXT4-fs (loop6): failed to initialize system zone (-117) [ 130.114342][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.119356][ T8675] EXT4-fs (loop6): mount failed [ 130.121426][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.136176][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.143247][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.163433][ T8516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.173940][ T8516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.226493][ T8684] bond16: entered promiscuous mode [ 130.231705][ T8684] bond16: entered allmulticast mode [ 130.237328][ T8684] 8021q: adding VLAN 0 to HW filter on device bond16 [ 130.278080][ T8516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.312953][ T8707] sctp: [Deprecated]: syz.2.1599 (pid 8707) Use of int in max_burst socket option. [ 130.312953][ T8707] Use struct sctp_assoc_value instead [ 130.359103][ T8707] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 130.366511][ T8707] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 130.399225][ T8716] syz.0.1603 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 130.532175][ T8516] veth0_vlan: entered promiscuous mode [ 130.543811][ T8516] veth1_vlan: entered promiscuous mode [ 130.561932][ T8516] veth0_macvtap: entered promiscuous mode [ 130.569221][ T8516] veth1_macvtap: entered promiscuous mode [ 130.596072][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.606667][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.616580][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.627063][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.636969][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.647504][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.657366][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.667869][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.683781][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.692006][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.702488][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.712359][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.722953][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.732867][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.743339][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.753186][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.763669][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.784179][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.803587][ T8516] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.812354][ T8516] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.821092][ T8516] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.829846][ T8516] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.958961][ T8769] FAULT_INJECTION: forcing a failure. [ 130.958961][ T8769] name failslab, interval 1, probability 0, space 0, times 0 [ 130.971716][ T8769] CPU: 1 UID: 0 PID: 8769 Comm: syz.6.1609 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 130.982410][ T8769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.992483][ T8769] Call Trace: [ 130.995770][ T8769] [ 130.998716][ T8769] dump_stack_lvl+0xf2/0x150 [ 131.003342][ T8769] dump_stack+0x15/0x1a [ 131.007603][ T8769] should_fail_ex+0x223/0x230 [ 131.012455][ T8769] should_failslab+0x8f/0xb0 [ 131.017066][ T8769] kmem_cache_alloc_noprof+0x52/0x320 [ 131.022472][ T8769] ? skb_clone+0x154/0x1f0 [ 131.026932][ T8769] skb_clone+0x154/0x1f0 [ 131.031185][ T8769] __netlink_deliver_tap+0x2bd/0x4f0 [ 131.036485][ T8769] netlink_unicast+0x64a/0x670 [ 131.041259][ T8769] netlink_sendmsg+0x5cc/0x6e0 [ 131.046040][ T8769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.051354][ T8769] __sock_sendmsg+0x140/0x180 [ 131.056045][ T8769] ____sys_sendmsg+0x312/0x410 [ 131.060865][ T8769] __sys_sendmsg+0x19d/0x230 [ 131.065486][ T8769] ? native_tss_update_io_bitmap+0x17b/0x200 [ 131.071474][ T8769] __x64_sys_sendmsg+0x46/0x50 [ 131.076349][ T8769] x64_sys_call+0x2734/0x2dc0 [ 131.081047][ T8769] do_syscall_64+0xc9/0x1c0 [ 131.085579][ T8769] ? clear_bhb_loop+0x55/0xb0 [ 131.090401][ T8769] ? clear_bhb_loop+0x55/0xb0 [ 131.095173][ T8769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.101091][ T8769] RIP: 0033:0x7f37fd03fed9 [ 131.105509][ T8769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.125282][ T8769] RSP: 002b:00007f37fb6b7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.133723][ T8769] RAX: ffffffffffffffda RBX: 00007f37fd205fa0 RCX: 00007f37fd03fed9 [ 131.141704][ T8769] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000008 [ 131.149692][ T8769] RBP: 00007f37fb6b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 131.157699][ T8769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.165735][ T8769] R13: 0000000000000000 R14: 00007f37fd205fa0 R15: 00007fff03824588 [ 131.173796][ T8769] [ 131.234431][ T8782] loop7: detected capacity change from 0 to 128 [ 131.256024][ T8782] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 131.277053][ T8782] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.317700][ T8794] netem: unknown loss type 0 [ 131.322358][ T8794] netem: change failed [ 131.342505][ T8782] ext2 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.379897][ T8794] loop1: detected capacity change from 0 to 512 [ 131.396599][ T8794] ext4: Unknown parameter 'uid' [ 131.595767][ T8813] loop2: detected capacity change from 0 to 128 [ 131.618204][ T8813] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.686930][ T8813] ext4 filesystem being mounted at /285/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.059543][ T8849] __nla_validate_parse: 10 callbacks suppressed [ 132.059576][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 132.086274][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 132.098053][ T8516] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.112223][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1622'. [ 132.140524][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1622'. [ 132.176362][ T8852] loop6: detected capacity change from 0 to 2048 [ 132.181770][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1624'. [ 132.199570][ T8852] EXT4-fs (loop6): failed to initialize system zone (-117) [ 132.206941][ T8852] EXT4-fs (loop6): mount failed [ 132.245162][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1625'. [ 132.310645][ T8868] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1626'. [ 132.350207][ T8872] loop7: detected capacity change from 0 to 164 [ 132.360291][ T8872] bio_check_eod: 15999 callbacks suppressed [ 132.360309][ T8872] syz.7.1627: attempt to access beyond end of device [ 132.360309][ T8872] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 132.380613][ T8872] syz.7.1627: attempt to access beyond end of device [ 132.380613][ T8872] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 132.395113][ T8872] syz.7.1627: attempt to access beyond end of device [ 132.395113][ T8872] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 132.410088][ T8872] syz.7.1627: attempt to access beyond end of device [ 132.410088][ T8872] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 132.423705][ T8872] syz.7.1627: attempt to access beyond end of device [ 132.423705][ T8872] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 132.427089][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.437690][ T8872] syz.7.1627: attempt to access beyond end of device [ 132.437690][ T8872] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 132.462097][ T8872] syz.7.1627: attempt to access beyond end of device [ 132.462097][ T8872] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 132.477430][ T8872] syz.7.1627: attempt to access beyond end of device [ 132.477430][ T8872] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 132.502797][ T8872] syz.7.1627: attempt to access beyond end of device [ 132.502797][ T8872] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 132.516628][ T8872] syz.7.1627: attempt to access beyond end of device [ 132.516628][ T8872] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 132.532915][ T8879] loop2: detected capacity change from 0 to 512 [ 132.541940][ T8879] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.565355][ T8877] loop1: detected capacity change from 0 to 164 [ 132.577843][ T8879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.591382][ T8879] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.612283][ T8879] FAULT_INJECTION: forcing a failure. [ 132.612283][ T8879] name failslab, interval 1, probability 0, space 0, times 0 [ 132.625021][ T8879] CPU: 0 UID: 0 PID: 8879 Comm: syz.2.1630 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 132.635726][ T8879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.645856][ T8879] Call Trace: [ 132.649227][ T8879] [ 132.652225][ T8879] dump_stack_lvl+0xf2/0x150 [ 132.656892][ T8879] dump_stack+0x15/0x1a [ 132.661096][ T8879] should_fail_ex+0x223/0x230 [ 132.665806][ T8879] should_failslab+0x8f/0xb0 [ 132.670504][ T8879] kmem_cache_alloc_noprof+0x52/0x320 [ 132.675920][ T8879] ? audit_log_start+0x34c/0x6b0 [ 132.680904][ T8879] audit_log_start+0x34c/0x6b0 [ 132.685762][ T8879] audit_seccomp+0x4b/0x130 [ 132.690342][ T8879] __seccomp_filter+0x6fa/0x1180 [ 132.695362][ T8879] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 132.701044][ T8879] ? vfs_write+0x596/0x920 [ 132.705679][ T8879] ? __schedule+0x6fa/0x930 [ 132.710251][ T8879] __secure_computing+0x9f/0x1c0 [ 132.715293][ T8879] syscall_trace_enter+0xd1/0x1f0 [ 132.720384][ T8879] do_syscall_64+0xaa/0x1c0 [ 132.725001][ T8879] ? clear_bhb_loop+0x55/0xb0 [ 132.729761][ T8879] ? clear_bhb_loop+0x55/0xb0 [ 132.734460][ T8879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.740392][ T8879] RIP: 0033:0x7f393888fed9 [ 132.744837][ T8879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.764539][ T8879] RSP: 002b:00007f3936f07058 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb [ 132.773023][ T8879] RAX: ffffffffffffffda RBX: 00007f3938a55fa0 RCX: 00007f393888fed9 [ 132.781070][ T8879] RDX: 0000000000000000 RSI: ffffffff80000300 RDI: 0000000000000004 [ 132.789120][ T8879] RBP: 00007f3936f070a0 R08: 0000000000000000 R09: 0000000000000000 [ 132.797255][ T8879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.805242][ T8879] R13: 0000000000000000 R14: 00007f3938a55fa0 R15: 00007ffe4416e958 [ 132.813264][ T8879] [ 132.816515][ T8879] audit_log_lost: 275 callbacks suppressed [ 132.816548][ T8879] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 132.830038][ T8879] audit: out of memory in audit_log_start [ 132.896338][ T29] audit: type=1326 audit(1733552854.191:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8878 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f393888e8ec code=0x7ffc0000 [ 132.919882][ T29] audit: type=1326 audit(1733552854.191:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8878 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f393888e98f code=0x7ffc0000 [ 132.943149][ T29] audit: type=1326 audit(1733552854.191:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8878 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f393888eb3a code=0x7ffc0000 [ 132.966586][ T29] audit: type=1326 audit(1733552854.191:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8878 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 132.990088][ T29] audit: type=1326 audit(1733552854.191:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8878 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 133.124660][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1633'. [ 133.135756][ T29] audit: type=1326 audit(1733552854.381:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.1.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6d5fed9 code=0x7ffc0000 [ 133.159285][ T29] audit: type=1326 audit(1733552854.381:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.1.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69d6d5fed9 code=0x7ffc0000 [ 133.182702][ T29] audit: type=1326 audit(1733552854.381:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.1.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6d5fed9 code=0x7ffc0000 [ 133.234178][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.286378][ T8896] can: request_module (can-proto-0) failed. [ 133.308395][ T8900] FAULT_INJECTION: forcing a failure. [ 133.308395][ T8900] name failslab, interval 1, probability 0, space 0, times 0 [ 133.321156][ T8900] CPU: 1 UID: 0 PID: 8900 Comm: syz.7.1634 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 133.331913][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.341991][ T8900] Call Trace: [ 133.345326][ T8900] [ 133.348270][ T8900] dump_stack_lvl+0xf2/0x150 [ 133.352897][ T8900] dump_stack+0x15/0x1a [ 133.357096][ T8900] should_fail_ex+0x223/0x230 [ 133.361446][ T8901] netlink: 'syz.2.1632': attribute type 39 has an invalid length. [ 133.361778][ T8900] should_failslab+0x8f/0xb0 [ 133.374232][ T8900] kmem_cache_alloc_noprof+0x52/0x320 [ 133.379632][ T8900] ? skb_clone+0x154/0x1f0 [ 133.384094][ T8900] skb_clone+0x154/0x1f0 [ 133.388371][ T8900] pfkey_sendmsg+0x2de/0x970 [ 133.393118][ T8900] ? selinux_socket_sendmsg+0x185/0x1c0 [ 133.398787][ T8900] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 133.403931][ T8900] __sock_sendmsg+0x140/0x180 [ 133.408643][ T8900] ____sys_sendmsg+0x312/0x410 [ 133.413431][ T8900] __sys_sendmmsg+0x227/0x4b0 [ 133.418213][ T8900] __x64_sys_sendmmsg+0x57/0x70 [ 133.423131][ T8900] x64_sys_call+0x29aa/0x2dc0 [ 133.427832][ T8900] do_syscall_64+0xc9/0x1c0 [ 133.432361][ T8900] ? clear_bhb_loop+0x55/0xb0 [ 133.437064][ T8900] ? clear_bhb_loop+0x55/0xb0 [ 133.441827][ T8900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.447799][ T8900] RIP: 0033:0x7f47775dfed9 [ 133.452237][ T8900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.471879][ T8900] RSP: 002b:00007f4775c57058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 133.480326][ T8900] RAX: ffffffffffffffda RBX: 00007f47777a5fa0 RCX: 00007f47775dfed9 [ 133.488401][ T8900] RDX: 00000000000003ef RSI: 0000000020000180 RDI: 0000000000000005 [ 133.496443][ T8900] RBP: 00007f4775c570a0 R08: 0000000000000000 R09: 0000000000000000 [ 133.504535][ T8900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.512535][ T8900] R13: 0000000000000000 R14: 00007f47777a5fa0 R15: 00007fff85c59f48 [ 133.520635][ T8900] [ 133.648604][ T8912] loop2: detected capacity change from 0 to 512 [ 133.659214][ T8912] EXT4-fs error (device loop2): ext4_get_journal_inode:5809: comm syz.2.1637: inode #196608: comm syz.2.1637: iget: illegal inode # [ 133.674091][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1636'. [ 133.686599][ T8912] EXT4-fs (loop2): Remounting filesystem read-only [ 133.693265][ T8912] EXT4-fs (loop2): no journal found [ 133.698543][ T8912] EXT4-fs (loop2): can't get journal size [ 133.717827][ T8912] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 133.727927][ T8912] EXT4-fs (loop2): failed to initialize system zone (-22) [ 133.741147][ T8912] EXT4-fs (loop2): mount failed [ 133.879483][ T8917] loop1: detected capacity change from 0 to 8192 [ 133.891198][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1641'. [ 133.907842][ T8928] bond1: entered promiscuous mode [ 133.912989][ T8928] bond1: entered allmulticast mode [ 133.918650][ T8928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.959867][ T8934] FAULT_INJECTION: forcing a failure. [ 133.959867][ T8934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.973065][ T8934] CPU: 1 UID: 0 PID: 8934 Comm: syz.2.1643 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 133.983768][ T8934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.993841][ T8934] Call Trace: [ 133.997136][ T8934] [ 134.000155][ T8934] dump_stack_lvl+0xf2/0x150 [ 134.004775][ T8934] dump_stack+0x15/0x1a [ 134.009050][ T8934] should_fail_ex+0x223/0x230 [ 134.013801][ T8934] should_fail+0xb/0x10 [ 134.018054][ T8934] should_fail_usercopy+0x1a/0x20 [ 134.023106][ T8934] _copy_from_user+0x1e/0xb0 [ 134.027743][ T8934] __sys_bpf+0x14e/0x7a0 [ 134.032201][ T8934] __x64_sys_bpf+0x43/0x50 [ 134.036674][ T8934] x64_sys_call+0x2914/0x2dc0 [ 134.041375][ T8934] do_syscall_64+0xc9/0x1c0 [ 134.045952][ T8934] ? clear_bhb_loop+0x55/0xb0 [ 134.050684][ T8934] ? clear_bhb_loop+0x55/0xb0 [ 134.055383][ T8934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.061310][ T8934] RIP: 0033:0x7f393888fed9 [ 134.065781][ T8934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.079058][ T8936] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.085479][ T8934] RSP: 002b:00007f3936f07058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.085505][ T8934] RAX: ffffffffffffffda RBX: 00007f3938a55fa0 RCX: 00007f393888fed9 [ 134.092827][ T8936] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 134.101178][ T8934] RDX: 0000000000000050 RSI: 0000000020000180 RDI: 000000000000000a [ 134.127238][ T8934] RBP: 00007f3936f070a0 R08: 0000000000000000 R09: 0000000000000000 [ 134.135230][ T8934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.143221][ T8934] R13: 0000000000000000 R14: 00007f3938a55fa0 R15: 00007ffe4416e958 [ 134.151424][ T8934] [ 134.222069][ T8941] loop2: detected capacity change from 0 to 1024 [ 134.238146][ T8941] EXT4-fs: Ignoring removed nobh option [ 134.243798][ T8941] EXT4-fs: Ignoring removed orlov option [ 134.283610][ T8941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.316296][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.367139][ T8948] loop2: detected capacity change from 0 to 2048 [ 134.380489][ T8948] EXT4-fs (loop2): failed to initialize system zone (-117) [ 134.391162][ T8948] EXT4-fs (loop2): mount failed [ 134.497721][ T8956] loop1: detected capacity change from 0 to 8192 [ 134.540509][ T8956] loop1: p1 p2 p3 [ 134.544382][ T8956] loop1: p1 size 3523149824 extends beyond EOD, truncated [ 134.552875][ T8956] loop1: p2 size 117440512 extends beyond EOD, truncated [ 134.562210][ T8956] loop1: p3 start 4294901760 is beyond EOD, truncated [ 134.586914][ T6841] udevd[6841]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 134.666292][ T8964] loop1: detected capacity change from 0 to 512 [ 134.676391][ T8964] EXT4-fs error (device loop1): ext4_get_journal_inode:5809: comm syz.1.1652: inode #196608: comm syz.1.1652: iget: illegal inode # [ 134.695163][ T8964] EXT4-fs (loop1): Remounting filesystem read-only [ 134.701904][ T8964] EXT4-fs (loop1): no journal found [ 134.707213][ T8964] EXT4-fs (loop1): can't get journal size [ 134.718670][ T8964] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 134.747073][ T8964] EXT4-fs (loop1): failed to initialize system zone (-22) [ 134.757895][ T8964] EXT4-fs (loop1): mount failed [ 134.798794][ T8970] sctp: [Deprecated]: syz.7.1654 (pid 8970) Use of int in max_burst socket option. [ 134.798794][ T8970] Use struct sctp_assoc_value instead [ 134.835916][ T8974] bond19: entered promiscuous mode [ 134.837070][ T8973] loop1: detected capacity change from 0 to 2048 [ 134.841126][ T8974] bond19: entered allmulticast mode [ 134.841322][ T8974] 8021q: adding VLAN 0 to HW filter on device bond19 [ 134.875137][ T8973] EXT4-fs (loop1): failed to initialize system zone (-117) [ 134.882671][ T8973] EXT4-fs (loop1): mount failed [ 134.915423][ T8978] sctp: [Deprecated]: syz.0.1665 (pid 8978) Use of int in max_burst socket option. [ 134.915423][ T8978] Use struct sctp_assoc_value instead [ 134.959082][ T8978] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.966511][ T8978] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 135.481758][ T8986] loop6: detected capacity change from 0 to 8192 [ 135.605617][ T8996] loop1: detected capacity change from 0 to 1024 [ 135.616276][ T8996] EXT4-fs: Ignoring removed nobh option [ 135.621964][ T8996] EXT4-fs: Ignoring removed orlov option [ 135.649995][ T8996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.676557][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.710673][ T9006] loop1: detected capacity change from 0 to 512 [ 135.725242][ T9006] EXT4-fs error (device loop1): ext4_get_journal_inode:5809: comm syz.1.1666: inode #196608: comm syz.1.1666: iget: illegal inode # [ 135.740237][ T9006] EXT4-fs (loop1): Remounting filesystem read-only [ 135.746787][ T9006] EXT4-fs (loop1): no journal found [ 135.752286][ T9006] EXT4-fs (loop1): can't get journal size [ 135.762831][ T9006] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 135.777245][ T9008] bond20: entered promiscuous mode [ 135.782483][ T9008] bond20: entered allmulticast mode [ 135.788392][ T9006] EXT4-fs (loop1): failed to initialize system zone (-22) [ 135.858825][ T9008] 8021q: adding VLAN 0 to HW filter on device bond20 [ 135.866819][ T9015] sctp: [Deprecated]: syz.0.1668 (pid 9015) Use of int in max_burst socket option. [ 135.866819][ T9015] Use struct sctp_assoc_value instead [ 135.879579][ T9006] EXT4-fs (loop1): mount failed [ 135.913091][ T9008] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 135.921258][ T9008] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 135.959990][ T9020] bond8: entered promiscuous mode [ 135.965131][ T9020] bond8: entered allmulticast mode [ 135.970674][ T9020] 8021q: adding VLAN 0 to HW filter on device bond8 [ 136.032630][ T9023] sctp: [Deprecated]: syz.1.1670 (pid 9023) Use of int in max_burst socket option. [ 136.032630][ T9023] Use struct sctp_assoc_value instead [ 136.047772][ T9023] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 136.055115][ T9023] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 136.564506][ T9039] loop6: detected capacity change from 0 to 8192 [ 136.609401][ T9048] loop7: detected capacity change from 0 to 1024 [ 136.620641][ T9048] EXT4-fs: Ignoring removed orlov option [ 136.655661][ T9048] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.672521][ T9053] sctp: [Deprecated]: syz.0.1674 (pid 9053) Use of int in max_burst socket option. [ 136.672521][ T9053] Use struct sctp_assoc_value instead [ 136.730922][ T9057] bond2: entered promiscuous mode [ 136.736020][ T9057] bond2: entered allmulticast mode [ 136.741839][ T9057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.803508][ T9064] sctp: [Deprecated]: syz.6.1678 (pid 9064) Use of int in max_burst socket option. [ 136.803508][ T9064] Use struct sctp_assoc_value instead [ 136.804147][ T9063] loop2: detected capacity change from 0 to 512 [ 136.825599][ T9063] EXT4-fs error (device loop2): ext4_get_journal_inode:5809: comm syz.2.1680: inode #196608: comm syz.2.1680: iget: illegal inode # [ 136.840522][ T9063] EXT4-fs (loop2): Remounting filesystem read-only [ 136.847056][ T9063] EXT4-fs (loop2): no journal found [ 136.852316][ T9063] EXT4-fs (loop2): can't get journal size [ 136.858910][ T9064] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 136.865304][ T9063] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 136.866368][ T9064] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 136.877808][ T9063] EXT4-fs (loop2): failed to initialize system zone (-22) [ 136.895813][ T9063] EXT4-fs (loop2): mount failed [ 137.060547][ T9077] bond17: entered promiscuous mode [ 137.066036][ T9077] bond17: entered allmulticast mode [ 137.071750][ T9077] 8021q: adding VLAN 0 to HW filter on device bond17 [ 137.133514][ T9081] sctp: [Deprecated]: syz.2.1685 (pid 9081) Use of int in max_burst socket option. [ 137.133514][ T9081] Use struct sctp_assoc_value instead [ 137.148767][ T9081] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 137.156108][ T9081] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 137.168163][ T9081] __nla_validate_parse: 15 callbacks suppressed [ 137.168180][ T9081] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1685'. [ 137.467765][ T8516] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.509346][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1687'. [ 137.592840][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1690'. [ 137.618206][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1690'. [ 137.622682][ T9095] bond2: entered promiscuous mode [ 137.632339][ T9095] bond2: entered allmulticast mode [ 137.637632][ T9095] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.703603][ T9100] sctp: [Deprecated]: syz.7.1691 (pid 9100) Use of int in max_burst socket option. [ 137.703603][ T9100] Use struct sctp_assoc_value instead [ 137.718743][ T9100] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 137.726060][ T9100] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 137.738109][ T9100] netlink: 332 bytes leftover after parsing attributes in process `syz.7.1691'. [ 137.920356][ T9107] loop2: detected capacity change from 0 to 164 [ 137.931600][ T9107] bio_check_eod: 23676 callbacks suppressed [ 137.931617][ T9107] syz.2.1693: attempt to access beyond end of device [ 137.931617][ T9107] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 137.940706][ T9108] bond9: entered promiscuous mode [ 137.955715][ T9107] syz.2.1693: attempt to access beyond end of device [ 137.955715][ T9107] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 137.956674][ T9108] bond9: entered allmulticast mode [ 137.975865][ T9108] 8021q: adding VLAN 0 to HW filter on device bond9 [ 137.979994][ T9107] syz.2.1693: attempt to access beyond end of device [ 137.979994][ T9107] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 137.999844][ T9107] syz.2.1693: attempt to access beyond end of device [ 137.999844][ T9107] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 138.013530][ T9107] syz.2.1693: attempt to access beyond end of device [ 138.013530][ T9107] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 138.016846][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 138.016869][ T29] audit: type=1326 audit(1733552859.331:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 138.027214][ T9107] syz.2.1693: attempt to access beyond end of device [ 138.027214][ T9107] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 138.039356][ T29] audit: type=1326 audit(1733552859.351:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 138.062470][ T9107] syz.2.1693: attempt to access beyond end of device [ 138.062470][ T9107] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 138.069997][ T29] audit: type=1326 audit(1733552859.351:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 138.070025][ T29] audit: type=1326 audit(1733552859.351:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 138.093583][ T9107] syz.2.1693: attempt to access beyond end of device [ 138.093583][ T9107] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 138.106794][ T29] audit: type=1326 audit(1733552859.351:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 138.131045][ T9112] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.153607][ T29] audit: type=1326 audit(1733552859.351:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 138.166988][ T9112] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 138.190349][ T29] audit: type=1326 audit(1733552859.351:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 138.205665][ T9112] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1703'. [ 138.220987][ T29] audit: type=1326 audit(1733552859.351:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 138.232430][ T9107] syz.2.1693: attempt to access beyond end of device [ 138.232430][ T9107] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 138.254296][ T29] audit: type=1326 audit(1733552859.351:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 138.254330][ T29] audit: type=1326 audit(1733552859.351:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 138.347342][ T9107] syz.2.1693: attempt to access beyond end of device [ 138.347342][ T9107] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 138.476919][ T9125] loop7: detected capacity change from 0 to 512 [ 138.484157][ T9125] EXT4-fs error (device loop7): ext4_get_journal_inode:5809: comm syz.7.1695: inode #196608: comm syz.7.1695: iget: illegal inode # [ 138.526082][ T9125] EXT4-fs (loop7): Remounting filesystem read-only [ 138.532732][ T9125] EXT4-fs (loop7): no journal found [ 138.538011][ T9125] EXT4-fs (loop7): can't get journal size [ 138.569610][ T9125] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 138.599171][ T9125] EXT4-fs (loop7): failed to initialize system zone (-22) [ 138.613331][ T9125] EXT4-fs (loop7): mount failed [ 138.787870][ T9146] loop6: detected capacity change from 0 to 764 [ 138.802124][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1701'. [ 138.816224][ T9146] Symlink component flag not implemented [ 138.831422][ T9146] Symlink component flag not implemented (101) [ 138.860611][ T9150] bond3: entered promiscuous mode [ 138.865712][ T9150] bond3: entered allmulticast mode [ 138.871683][ T9150] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.906280][ T9150] sctp: [Deprecated]: syz.7.1701 (pid 9150) Use of int in max_burst socket option. [ 138.906280][ T9150] Use struct sctp_assoc_value instead [ 138.938243][ T9162] FAULT_INJECTION: forcing a failure. [ 138.938243][ T9162] name failslab, interval 1, probability 0, space 0, times 0 [ 138.951055][ T9162] CPU: 1 UID: 0 PID: 9162 Comm: syz.6.1704 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 138.961752][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 138.971940][ T9162] Call Trace: [ 138.975241][ T9162] [ 138.978177][ T9162] dump_stack_lvl+0xf2/0x150 [ 138.982823][ T9162] dump_stack+0x15/0x1a [ 138.987010][ T9162] should_fail_ex+0x223/0x230 [ 138.991770][ T9162] should_failslab+0x8f/0xb0 [ 138.996392][ T9162] kmem_cache_alloc_noprof+0x52/0x320 [ 139.001812][ T9162] ? getname_flags+0x81/0x3b0 [ 139.006511][ T9162] getname_flags+0x81/0x3b0 [ 139.011060][ T9162] user_path_at+0x26/0x120 [ 139.015508][ T9162] __se_sys_mount+0x248/0x2d0 [ 139.020224][ T9162] __x64_sys_mount+0x67/0x80 [ 139.024834][ T9162] x64_sys_call+0x2c84/0x2dc0 [ 139.029541][ T9162] do_syscall_64+0xc9/0x1c0 [ 139.034051][ T9162] ? clear_bhb_loop+0x55/0xb0 [ 139.038785][ T9162] ? clear_bhb_loop+0x55/0xb0 [ 139.043535][ T9162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.049454][ T9162] RIP: 0033:0x7f37fd03fed9 [ 139.053873][ T9162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.073677][ T9162] RSP: 002b:00007f37fb6b7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 139.082098][ T9162] RAX: ffffffffffffffda RBX: 00007f37fd205fa0 RCX: 00007f37fd03fed9 [ 139.090102][ T9162] RDX: 00000000200002c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 139.098082][ T9162] RBP: 00007f37fb6b70a0 R08: 0000000020000400 R09: 0000000000000000 [ 139.106088][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.114063][ T9162] R13: 0000000000000000 R14: 00007f37fd205fa0 R15: 00007fff03824588 [ 139.122047][ T9162] [ 139.149637][ T9150] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 139.157383][ T9150] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 139.181175][ T9150] netlink: 332 bytes leftover after parsing attributes in process `syz.7.1701'. [ 139.213068][ T9172] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1708'. [ 139.222414][ T9172] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1708'. [ 139.370987][ T9187] bond21: entered promiscuous mode [ 139.376164][ T9187] bond21: entered allmulticast mode [ 139.381685][ T9187] 8021q: adding VLAN 0 to HW filter on device bond21 [ 139.443498][ T9194] sctp: [Deprecated]: syz.0.1713 (pid 9194) Use of int in max_burst socket option. [ 139.443498][ T9194] Use struct sctp_assoc_value instead [ 139.444651][ T9193] loop6: detected capacity change from 0 to 8192 [ 139.465500][ T9194] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 139.472855][ T9194] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 139.943760][ T9227] loop1: detected capacity change from 0 to 256 [ 139.953599][ T9227] vfat: Unknown parameter 'ÿÿÿÿ' [ 140.056454][ T9237] syz.2.1720[9237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.056593][ T9237] syz.2.1720[9237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.068271][ T9237] syz.2.1720[9237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.202307][ T9251] FAULT_INJECTION: forcing a failure. [ 140.202307][ T9251] name failslab, interval 1, probability 0, space 0, times 0 [ 140.226349][ T9251] CPU: 1 UID: 0 PID: 9251 Comm: syz.7.1721 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 140.237121][ T9251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 140.247231][ T9251] Call Trace: [ 140.250580][ T9251] [ 140.253520][ T9251] dump_stack_lvl+0xf2/0x150 [ 140.258176][ T9251] dump_stack+0x15/0x1a [ 140.262501][ T9251] should_fail_ex+0x223/0x230 [ 140.267259][ T9251] should_failslab+0x8f/0xb0 [ 140.271918][ T9251] __kmalloc_cache_node_noprof+0x56/0x320 [ 140.277708][ T9251] ? __get_vm_area_node+0xfb/0x1c0 [ 140.282862][ T9251] __get_vm_area_node+0xfb/0x1c0 [ 140.287828][ T9251] __vmalloc_node_range_noprof+0x280/0xe80 [ 140.293714][ T9251] ? do_replace+0x19c/0x2d0 [ 140.298257][ T9251] ? exc_page_fault+0x32e/0x650 [ 140.303151][ T9251] ? do_replace+0x19c/0x2d0 [ 140.307687][ T9251] __vmalloc_noprof+0x5e/0x70 [ 140.312434][ T9251] ? do_replace+0x19c/0x2d0 [ 140.317080][ T9251] do_replace+0x19c/0x2d0 [ 140.321444][ T9251] do_ebt_set_ctl+0x1bd/0xb80 [ 140.326190][ T9251] ? _parse_integer+0x27/0x30 [ 140.330968][ T9251] ? kstrtoull+0x110/0x140 [ 140.335385][ T9251] ? tcp_release_cb+0xfe/0x380 [ 140.340206][ T9251] ? _raw_spin_unlock_bh+0x36/0x40 [ 140.345366][ T9251] ? release_sock+0x117/0x150 [ 140.350061][ T9251] ? sockopt_release_sock+0x42/0x50 [ 140.355271][ T9251] ? do_ip_setsockopt+0x1fcf/0x2340 [ 140.360495][ T9251] nf_setsockopt+0x195/0x1b0 [ 140.365127][ T9251] ip_setsockopt+0xea/0x100 [ 140.369649][ T9251] tcp_setsockopt+0x93/0xb0 [ 140.374171][ T9251] sock_common_setsockopt+0x64/0x80 [ 140.379444][ T9251] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 140.385445][ T9251] __sys_setsockopt+0x187/0x200 [ 140.390388][ T9251] __x64_sys_setsockopt+0x66/0x80 [ 140.395430][ T9251] x64_sys_call+0x282e/0x2dc0 [ 140.400155][ T9251] do_syscall_64+0xc9/0x1c0 [ 140.404672][ T9251] ? clear_bhb_loop+0x55/0xb0 [ 140.409421][ T9251] ? clear_bhb_loop+0x55/0xb0 [ 140.414122][ T9251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.420127][ T9251] RIP: 0033:0x7f47775dfed9 [ 140.424550][ T9251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.444222][ T9251] RSP: 002b:00007f4775c57058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 140.452665][ T9251] RAX: ffffffffffffffda RBX: 00007f47777a5fa0 RCX: 00007f47775dfed9 [ 140.460652][ T9251] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 140.468644][ T9251] RBP: 00007f4775c570a0 R08: 00000000000001e8 R09: 0000000000000000 [ 140.476626][ T9251] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000001 [ 140.484651][ T9251] R13: 0000000000000000 R14: 00007f47777a5fa0 R15: 00007fff85c59f48 [ 140.492649][ T9251] [ 140.496613][ T9251] syz.7.1721: vmalloc error: size 256, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 140.511312][ T9251] CPU: 1 UID: 0 PID: 9251 Comm: syz.7.1721 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 140.522100][ T9251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 140.532193][ T9251] Call Trace: [ 140.535569][ T9251] [ 140.538501][ T9251] dump_stack_lvl+0xf2/0x150 [ 140.543177][ T9251] dump_stack+0x15/0x1a [ 140.547460][ T9251] warn_alloc+0x145/0x1b0 [ 140.551807][ T9251] __vmalloc_node_range_noprof+0x2a5/0xe80 [ 140.557727][ T9251] ? exc_page_fault+0x32e/0x650 [ 140.562597][ T9251] ? do_replace+0x19c/0x2d0 [ 140.567171][ T9251] __vmalloc_noprof+0x5e/0x70 [ 140.571982][ T9251] ? do_replace+0x19c/0x2d0 [ 140.576604][ T9251] do_replace+0x19c/0x2d0 [ 140.581020][ T9251] do_ebt_set_ctl+0x1bd/0xb80 [ 140.585719][ T9251] ? _parse_integer+0x27/0x30 [ 140.590436][ T9251] ? kstrtoull+0x110/0x140 [ 140.594897][ T9251] ? tcp_release_cb+0xfe/0x380 [ 140.599698][ T9251] ? _raw_spin_unlock_bh+0x36/0x40 [ 140.604827][ T9251] ? release_sock+0x117/0x150 [ 140.609530][ T9251] ? sockopt_release_sock+0x42/0x50 [ 140.614737][ T9251] ? do_ip_setsockopt+0x1fcf/0x2340 [ 140.620026][ T9251] nf_setsockopt+0x195/0x1b0 [ 140.624636][ T9251] ip_setsockopt+0xea/0x100 [ 140.629177][ T9251] tcp_setsockopt+0x93/0xb0 [ 140.633770][ T9251] sock_common_setsockopt+0x64/0x80 [ 140.639038][ T9251] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 140.644968][ T9251] __sys_setsockopt+0x187/0x200 [ 140.649877][ T9251] __x64_sys_setsockopt+0x66/0x80 [ 140.654922][ T9251] x64_sys_call+0x282e/0x2dc0 [ 140.659845][ T9251] do_syscall_64+0xc9/0x1c0 [ 140.664353][ T9251] ? clear_bhb_loop+0x55/0xb0 [ 140.669041][ T9251] ? clear_bhb_loop+0x55/0xb0 [ 140.673730][ T9251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.679725][ T9251] RIP: 0033:0x7f47775dfed9 [ 140.684222][ T9251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.703896][ T9251] RSP: 002b:00007f4775c57058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 140.712360][ T9251] RAX: ffffffffffffffda RBX: 00007f47777a5fa0 RCX: 00007f47775dfed9 [ 140.720437][ T9251] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 140.728430][ T9251] RBP: 00007f4775c570a0 R08: 00000000000001e8 R09: 0000000000000000 [ 140.736410][ T9251] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000001 [ 140.744385][ T9251] R13: 0000000000000000 R14: 00007f47777a5fa0 R15: 00007fff85c59f48 [ 140.752370][ T9251] [ 140.755715][ T9251] Mem-Info: [ 140.759110][ T9251] active_anon:8782 inactive_anon:1 isolated_anon:0 [ 140.759110][ T9251] active_file:4912 inactive_file:12262 isolated_file:0 [ 140.759110][ T9251] unevictable:1 dirty:264 writeback:0 [ 140.759110][ T9251] slab_reclaimable:3076 slab_unreclaimable:16748 [ 140.759110][ T9251] mapped:31962 shmem:3397 pagetables:1154 [ 140.759110][ T9251] sec_pagetables:0 bounce:0 [ 140.759110][ T9251] kernel_misc_reclaimable:0 [ 140.759110][ T9251] free:1892146 free_pcp:3596 free_cma:0 [ 140.804062][ T9251] Node 0 active_anon:35128kB inactive_anon:4kB active_file:19648kB inactive_file:49048kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:127848kB dirty:1056kB writeback:0kB shmem:13588kB writeback_tmp:0kB kernel_stack:4240kB pagetables:4616kB sec_pagetables:0kB all_unreclaimable? no [ 140.833280][ T9251] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.862008][ T9251] lowmem_reserve[]: 0 2866 7844 0 [ 140.867223][ T9251] Node 0 DMA32 free:2950384kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953916kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 140.895705][ T9251] lowmem_reserve[]: 0 0 4978 0 [ 140.900609][ T9251] Node 0 Normal free:4602840kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:29096kB inactive_anon:4kB active_file:19648kB inactive_file:49048kB unevictable:4kB writepending:208kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:16948kB local_pcp:4276kB free_cma:0kB [ 140.930771][ T9251] lowmem_reserve[]: 0 0 0 0 [ 140.935377][ T9251] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 140.948142][ T9251] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 6*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950384kB [ 140.964569][ T9251] Node 0 Normal: 685*4kB (M) 400*8kB (M) 2*16kB (UE) 292*32kB (ME) 354*64kB (UME) 121*128kB (UME) 118*256kB (UM) 179*512kB (UM) 133*1024kB (UME) 76*2048kB (UME) 1008*4096kB (UM) = 4595924kB [ 140.983648][ T9251] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 140.993019][ T9251] 19071 total pagecache pages [ 140.997717][ T9251] 7 pages in swap cache [ 141.001924][ T9251] Free swap = 124456kB [ 141.006099][ T9251] Total swap = 124996kB [ 141.010282][ T9251] 2097051 pages RAM [ 141.014169][ T9251] 0 pages HighMem/MovableOnly [ 141.018923][ T9251] 80180 pages reserved [ 141.151903][ T9274] bond3: entered promiscuous mode [ 141.157046][ T9274] bond3: entered allmulticast mode [ 141.170666][ T9274] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.224124][ T9282] loop2: detected capacity change from 0 to 8192 [ 141.233710][ T9284] sctp: [Deprecated]: syz.6.1727 (pid 9284) Use of int in max_burst socket option. [ 141.233710][ T9284] Use struct sctp_assoc_value instead [ 141.283050][ T9284] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 141.290419][ T9284] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 141.338470][ T9295] loop1: detected capacity change from 0 to 1024 [ 141.364656][ T9295] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 141.378693][ T9295] JBD2: no valid journal superblock found [ 141.384506][ T9295] EXT4-fs (loop1): Could not load journal inode [ 141.841861][ T9313] lo speed is unknown, defaulting to 1000 [ 141.965833][ T9340] loop2: detected capacity change from 0 to 1024 [ 141.980989][ T9340] EXT4-fs: dax option not supported [ 141.996367][ T9313] chnl_net:caif_netlink_parms(): no params data found [ 142.142474][ T9349] syz.0.1738[9349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.142542][ T9349] syz.0.1738[9349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.157665][ T9349] syz.0.1738[9349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.172846][ T9313] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.191312][ T9313] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.202313][ T9351] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 142.215136][ T9350] IPVS: stopping master sync thread 9351 ... [ 142.225436][ T9313] bridge_slave_0: entered allmulticast mode [ 142.232780][ T9313] bridge_slave_0: entered promiscuous mode [ 142.271784][ T9313] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.279026][ T9313] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.296626][ T9313] bridge_slave_1: entered allmulticast mode [ 142.303624][ T9313] bridge_slave_1: entered promiscuous mode [ 142.350562][ T9313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.364518][ T9313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.395157][ T9355] vlan2: entered allmulticast mode [ 142.465953][ T9313] team0: Port device team_slave_0 added [ 142.491036][ T9313] team0: Port device team_slave_1 added [ 142.551466][ T9358] lo speed is unknown, defaulting to 1000 [ 142.552143][ T9355] syzkaller1: entered promiscuous mode [ 142.562946][ T9355] syzkaller1: entered allmulticast mode [ 142.574096][ T9364] __nla_validate_parse: 6 callbacks suppressed [ 142.574110][ T9364] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1741'. [ 142.600041][ T9313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.607011][ T9313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.633098][ T9313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.645123][ T9313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.652404][ T9313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.678630][ T9313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.865746][ T9313] hsr_slave_0: entered promiscuous mode [ 142.872367][ T9313] hsr_slave_1: entered promiscuous mode [ 142.887651][ T9313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.905409][ T9313] Cannot create hsr debugfs directory [ 142.936318][ T54] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.065815][ T54] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.116700][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'. [ 143.134662][ T54] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.157597][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 143.157613][ T29] audit: type=1326 audit(1733552864.471:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 143.166125][ T9394] bond22: entered promiscuous mode [ 143.192793][ T9394] bond22: entered allmulticast mode [ 143.195505][ T29] audit: type=1326 audit(1733552864.471:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 143.221454][ T29] audit: type=1326 audit(1733552864.471:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 143.241699][ T9394] 8021q: adding VLAN 0 to HW filter on device bond22 [ 143.244954][ T29] audit: type=1326 audit(1733552864.471:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 143.262567][ T9313] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 143.275125][ T29] audit: type=1326 audit(1733552864.471:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 143.275181][ T29] audit: type=1326 audit(1733552864.471:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 143.275208][ T29] audit: type=1326 audit(1733552864.471:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 143.352195][ T29] audit: type=1326 audit(1733552864.471:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 143.375876][ T29] audit: type=1326 audit(1733552864.471:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 143.375982][ T29] audit: type=1326 audit(1733552864.471:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f393888fed9 code=0x7ffc0000 [ 143.402013][ T54] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.402784][ T9313] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 143.405390][ T9313] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 143.451171][ T9400] sctp: [Deprecated]: syz.0.1746 (pid 9400) Use of int in max_burst socket option. [ 143.451171][ T9400] Use struct sctp_assoc_value instead [ 143.468027][ T9313] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 143.499310][ T9400] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 143.506661][ T9400] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 143.519733][ T9400] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1746'. [ 143.554014][ T9410] xt_connbytes: Forcing CT accounting to be enabled [ 143.565451][ T9410] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 143.578084][ T9313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.593115][ T54] bridge_slave_1: left allmulticast mode [ 143.598886][ T54] bridge_slave_1: left promiscuous mode [ 143.604641][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.621599][ T54] bridge_slave_0: left allmulticast mode [ 143.627368][ T54] bridge_slave_0: left promiscuous mode [ 143.633083][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.730424][ T9430] loop2: detected capacity change from 0 to 1024 [ 143.740648][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.744252][ T9430] EXT4-fs: Ignoring removed nobh option [ 143.754820][ T9430] EXT4-fs: Ignoring removed orlov option [ 143.762158][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.772563][ T54] bond0 (unregistering): Released all slaves [ 143.781330][ T54] bond1 (unregistering): Released all slaves [ 143.783689][ T9430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.790491][ T54] bond2 (unregistering): Released all slaves [ 143.806754][ T9435] sctp: [Deprecated]: syz.6.1752 (pid 9435) Use of int in max_burst socket option. [ 143.806754][ T9435] Use struct sctp_assoc_value instead [ 143.809520][ T54] bond3 (unregistering): Released all slaves [ 143.827775][ T9435] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 143.835138][ T9435] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 143.848227][ T9435] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1752'. [ 143.865399][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.887003][ T9427] bond4: entered promiscuous mode [ 143.892290][ T9427] bond4: entered allmulticast mode [ 143.916121][ T9427] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.927019][ T9440] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.952743][ T54] hsr_slave_0: left promiscuous mode [ 143.975913][ T54] hsr_slave_1: left promiscuous mode [ 144.012312][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.019999][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.066203][ T9441] loop2: detected capacity change from 0 to 8192 [ 144.079001][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.086496][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.107299][ T54] veth1_macvtap: left promiscuous mode [ 144.112918][ T54] veth0_macvtap: left promiscuous mode [ 144.113659][ T9463] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=9463 comm=syz.1.1759 [ 144.118459][ T54] veth1_vlan: left promiscuous mode [ 144.136119][ T54] veth0_vlan: left promiscuous mode [ 144.215670][ T9469] loop1: detected capacity change from 0 to 2048 [ 144.263698][ T9469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.288118][ T54] team0 (unregistering): Port device team_slave_1 removed [ 144.305864][ T54] team0 (unregistering): Port device team_slave_0 removed [ 144.336429][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'. [ 144.363637][ T9313] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.381933][ T9480] bond23: entered promiscuous mode [ 144.387093][ T9480] bond23: entered allmulticast mode [ 144.396061][ T9480] 8021q: adding VLAN 0 to HW filter on device bond23 [ 144.409583][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.416677][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.433802][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.440911][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.452722][ T9480] sctp: [Deprecated]: syz.0.1765 (pid 9480) Use of int in max_burst socket option. [ 144.452722][ T9480] Use struct sctp_assoc_value instead [ 144.470925][ T9480] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 144.502260][ T9480] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 144.524155][ T9490] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1765'. [ 144.574705][ T9313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.809291][ T9518] loop6: detected capacity change from 0 to 164 [ 144.843402][ T9518] bio_check_eod: 4418 callbacks suppressed [ 144.843419][ T9518] syz.6.1768: attempt to access beyond end of device [ 144.843419][ T9518] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 144.905239][ T9518] syz.6.1768: attempt to access beyond end of device [ 144.905239][ T9518] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 144.920939][ T9313] veth0_vlan: entered promiscuous mode [ 144.938077][ T9313] veth1_vlan: entered promiscuous mode [ 144.959403][ T9518] syz.6.1768: attempt to access beyond end of device [ 144.959403][ T9518] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 144.984175][ T9313] veth0_macvtap: entered promiscuous mode [ 144.991566][ T9518] syz.6.1768: attempt to access beyond end of device [ 144.991566][ T9518] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.007868][ T9313] veth1_macvtap: entered promiscuous mode [ 145.021115][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.031898][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.041803][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.052236][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.058566][ T9518] syz.6.1768: attempt to access beyond end of device [ 145.058566][ T9518] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.062055][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.062070][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.062096][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.106403][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.115073][ T9518] syz.6.1768: attempt to access beyond end of device [ 145.115073][ T9518] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.171090][ T9313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.195261][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.205817][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.215688][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.226158][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.236349][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.246897][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.257029][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.267583][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.287092][ T9518] syz.6.1768: attempt to access beyond end of device [ 145.287092][ T9518] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.302851][ T9518] syz.6.1768: attempt to access beyond end of device [ 145.302851][ T9518] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.317534][ T9518] syz.6.1768: attempt to access beyond end of device [ 145.317534][ T9518] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.331557][ T9518] syz.6.1768: attempt to access beyond end of device [ 145.331557][ T9518] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.352145][ T9544] loop2: detected capacity change from 0 to 512 [ 145.375327][ T9313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.389756][ T9313] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.398541][ T9313] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.400914][ T9544] EXT4-fs: Ignoring removed nobh option [ 145.407295][ T9313] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.412895][ T9544] EXT4-fs: Ignoring removed i_version option [ 145.421582][ T9313] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.444465][ T9544] EXT4-fs: Mount option(s) incompatible with ext2 [ 145.623766][ T9566] bond18: entered promiscuous mode [ 145.629145][ T9566] bond18: entered allmulticast mode [ 145.665179][ T9566] 8021q: adding VLAN 0 to HW filter on device bond18 [ 145.710422][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.722540][ T9566] sctp: [Deprecated]: syz.2.1775 (pid 9566) Use of int in max_burst socket option. [ 145.722540][ T9566] Use struct sctp_assoc_value instead [ 145.802343][ T9566] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 145.815657][ T9588] bond1: entered promiscuous mode [ 145.820754][ T9588] bond1: entered allmulticast mode [ 145.826323][ T9588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.841039][ T9566] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 145.853249][ T9566] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1775'. [ 145.871165][ T9598] loop1: detected capacity change from 0 to 512 [ 145.887476][ T9603] sctp: [Deprecated]: syz.8.1780 (pid 9603) Use of int in max_burst socket option. [ 145.887476][ T9603] Use struct sctp_assoc_value instead [ 145.902490][ T9603] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 145.909898][ T9603] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 145.923618][ T9603] netlink: 332 bytes leftover after parsing attributes in process `syz.8.1780'. [ 145.934312][ T9598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.952147][ T9598] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.143912][ T3297] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 146.159720][ T3297] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 146.173500][ T3297] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 146.231708][ T3297] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 146.347206][ T9640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1785'. [ 146.367926][ T3297] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 146.386486][ T3297] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 146.412590][ T3297] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 146.480325][ T3297] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 146.576905][ T3297] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 146.620536][ T3297] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 146.637424][ T9651] loop2: detected capacity change from 0 to 512 [ 146.670781][ T9651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.700402][ T9651] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.722711][ T9661] loop6: detected capacity change from 0 to 164 [ 146.786308][ T6801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.816024][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1790'. [ 146.979912][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.006221][ T9674] loop8: detected capacity change from 0 to 164 [ 147.070754][ T151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.126460][ T9683] FAULT_INJECTION: forcing a failure. [ 147.126460][ T9683] name failslab, interval 1, probability 0, space 0, times 0 [ 147.139260][ T9683] CPU: 0 UID: 0 PID: 9683 Comm: syz.2.1794 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 147.149956][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 147.160039][ T9683] Call Trace: [ 147.163333][ T9683] [ 147.166268][ T9683] dump_stack_lvl+0xf2/0x150 [ 147.170949][ T9683] dump_stack+0x15/0x1a [ 147.175169][ T9683] should_fail_ex+0x223/0x230 [ 147.179865][ T9683] should_failslab+0x8f/0xb0 [ 147.184500][ T9683] kmem_cache_alloc_node_noprof+0x59/0x320 [ 147.190380][ T9683] ? __alloc_skb+0x10b/0x310 [ 147.195010][ T9683] __alloc_skb+0x10b/0x310 [ 147.199556][ T9683] netlink_alloc_large_skb+0xad/0xe0 [ 147.204956][ T9683] netlink_sendmsg+0x3b4/0x6e0 [ 147.209748][ T9683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.215126][ T9683] __sock_sendmsg+0x140/0x180 [ 147.219846][ T9683] sock_write_iter+0x15e/0x1a0 [ 147.224643][ T9683] vfs_write+0x77f/0x920 [ 147.228955][ T9683] ? __pfx_sock_write_iter+0x10/0x10 [ 147.234289][ T9683] ksys_write+0xe8/0x1b0 [ 147.238754][ T9683] __x64_sys_write+0x42/0x50 [ 147.243373][ T9683] x64_sys_call+0x287e/0x2dc0 [ 147.248092][ T9683] do_syscall_64+0xc9/0x1c0 [ 147.252701][ T9683] ? clear_bhb_loop+0x55/0xb0 [ 147.257396][ T9683] ? clear_bhb_loop+0x55/0xb0 [ 147.259147][ T9688] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 147.262125][ T9683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.269584][ T9688] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 147.275303][ T9683] RIP: 0033:0x7f393888fed9 [ 147.275323][ T9683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.275357][ T9683] RSP: 002b:00007f3936f07058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 147.317800][ T9683] RAX: ffffffffffffffda RBX: 00007f3938a55fa0 RCX: 00007f393888fed9 [ 147.325794][ T9683] RDX: 0000000000000024 RSI: 0000000020000000 RDI: 0000000000000004 [ 147.333788][ T9683] RBP: 00007f3936f070a0 R08: 0000000000000000 R09: 0000000000000000 [ 147.341782][ T9683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.349785][ T9683] R13: 0000000000000000 R14: 00007f3938a55fa0 R15: 00007ffe4416e958 [ 147.357780][ T9683] [ 147.391604][ T9682] bond24: entered promiscuous mode [ 147.396832][ T9682] bond24: entered allmulticast mode [ 147.447958][ T9682] 8021q: adding VLAN 0 to HW filter on device bond24 [ 147.490651][ T151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.545183][ T151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.632659][ T151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.763916][ T151] bridge_slave_1: left allmulticast mode [ 147.769645][ T151] bridge_slave_1: left promiscuous mode [ 147.775360][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.789070][ T151] bridge_slave_0: left allmulticast mode [ 147.794754][ T151] bridge_slave_0: left promiscuous mode [ 147.801001][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.893057][ T151] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 147.925940][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.935803][ T9744] sctp: [Deprecated]: syz.6.1802 (pid 9744) Use of int in max_burst socket option. [ 147.935803][ T9744] Use struct sctp_assoc_value instead [ 147.957510][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.970376][ T151] bond0 (unregistering): Released all slaves [ 147.978909][ T9744] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 147.979234][ T151] bond1 (unregistering): Released all slaves [ 147.986208][ T9744] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 148.004163][ T9744] __nla_validate_parse: 1 callbacks suppressed [ 148.004175][ T9744] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1802'. [ 148.005625][ T151] bond2 (unregistering): Released all slaves [ 148.028455][ T151] bond3 (unregistering): Released all slaves [ 148.036715][ T151] bond4 (unregistering): Released all slaves [ 148.045383][ T151] bond5 (unregistering): Released all slaves [ 148.055559][ T151] bond6 (unregistering): Released all slaves [ 148.064345][ T151] bond7 (unregistering): Released all slaves [ 148.072724][ T151] bond8 (unregistering): Released all slaves [ 148.080819][ T9748] sctp: [Deprecated]: syz.8.1803 (pid 9748) Use of int in max_burst socket option. [ 148.080819][ T9748] Use struct sctp_assoc_value instead [ 148.082547][ T151] bond9 (unregistering): Released all slaves [ 148.102147][ T9748] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 148.109497][ T9748] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 148.110039][ T9692] lo speed is unknown, defaulting to 1000 [ 148.126469][ T9730] bond5: entered promiscuous mode [ 148.131681][ T9730] bond5: entered allmulticast mode [ 148.137118][ T9730] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.147668][ T9748] netlink: 332 bytes leftover after parsing attributes in process `syz.8.1803'. [ 148.171790][ T9746] bond2: entered promiscuous mode [ 148.176872][ T9746] bond2: entered allmulticast mode [ 148.182341][ T9746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.200060][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.207582][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.215431][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.222900][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.232876][ T151] veth0_macvtap: left promiscuous mode [ 148.238553][ T151] veth1_vlan: left promiscuous mode [ 148.243824][ T151] veth0_vlan: left promiscuous mode [ 148.318513][ T151] team0 (unregistering): Port device team_slave_1 removed [ 148.331683][ T151] team0 (unregistering): Port device team_slave_0 removed [ 148.333908][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 148.333924][ T29] audit: type=1400 audit(1733552869.651:4464): avc: denied { ioctl } for pid=9751 comm="syz.2.1804" path="socket:[24329]" dev="sockfs" ino=24329 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.440566][ T9758] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1806'. [ 148.454844][ T29] audit: type=1400 audit(1733552869.771:4465): avc: denied { mount } for pid=9757 comm="syz.2.1806" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 148.494123][ T9692] chnl_net:caif_netlink_parms(): no params data found [ 148.520816][ T29] audit: type=1400 audit(1733552869.841:4466): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 148.686413][ T9777] bond25: entered promiscuous mode [ 148.691652][ T9777] bond25: entered allmulticast mode [ 148.707759][ T9777] 8021q: adding VLAN 0 to HW filter on device bond25 [ 148.777072][ T9777] sctp: [Deprecated]: syz.0.1809 (pid 9777) Use of int in max_burst socket option. [ 148.777072][ T9777] Use struct sctp_assoc_value instead [ 148.829140][ T9790] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 148.836541][ T9790] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 148.850027][ T9790] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1809'. [ 148.869576][ T9788] loop6: detected capacity change from 0 to 164 [ 148.910120][ T9791] loop2: detected capacity change from 0 to 2048 [ 148.967202][ T9791] Alternate GPT is invalid, using primary GPT. [ 148.973832][ T9791] loop2: p2 p3 p7 [ 149.030739][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 149.044462][ T6842] udevd[6842]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 149.064844][ T6841] udevd[6841]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 149.191868][ T9692] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.199069][ T9692] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.244748][ T9692] bridge_slave_0: entered allmulticast mode [ 149.251928][ T9797] loop8: detected capacity change from 0 to 164 [ 149.259384][ T9692] bridge_slave_0: entered promiscuous mode [ 149.280505][ T9692] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.287649][ T9692] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.316111][ T9692] bridge_slave_1: entered allmulticast mode [ 149.328390][ T29] audit: type=1326 audit(1733552870.641:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9796 comm="syz.8.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef63eafed9 code=0x7ffc0000 [ 149.351986][ T29] audit: type=1326 audit(1733552870.641:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9796 comm="syz.8.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef63eafed9 code=0x7ffc0000 [ 149.378153][ T9692] bridge_slave_1: entered promiscuous mode [ 149.417600][ T29] audit: type=1326 audit(1733552870.691:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9796 comm="syz.8.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef63eafed9 code=0x7ffc0000 [ 149.441404][ T29] audit: type=1326 audit(1733552870.691:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9796 comm="syz.8.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef63eafed9 code=0x7ffc0000 [ 149.528554][ T29] audit: type=1326 audit(1733552870.761:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9796 comm="syz.8.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef63eafed9 code=0x7ffc0000 [ 149.533119][ T9692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.552003][ T29] audit: type=1326 audit(1733552870.761:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9796 comm="syz.8.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef63eafed9 code=0x7ffc0000 [ 149.584631][ T29] audit: type=1326 audit(1733552870.761:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9796 comm="syz.8.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef63eafed9 code=0x7ffc0000 [ 149.624902][ T9692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.729513][ T9692] team0: Port device team_slave_0 added [ 149.753988][ T9692] team0: Port device team_slave_1 added [ 149.798757][ T9692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.805920][ T9692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.818212][ T9820] loop2: detected capacity change from 0 to 8192 [ 149.832077][ T9692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.851751][ T9797] bio_check_eod: 27697 callbacks suppressed [ 149.851768][ T9797] syz.8.1812: attempt to access beyond end of device [ 149.851768][ T9797] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 149.874674][ T9692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.881674][ T9692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.907832][ T9692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.921868][ T9797] syz.8.1812: attempt to access beyond end of device [ 149.921868][ T9797] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 149.947253][ T9797] syz.8.1812: attempt to access beyond end of device [ 149.947253][ T9797] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 149.965064][ T9797] syz.8.1812: attempt to access beyond end of device [ 149.965064][ T9797] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 149.979157][ T9797] syz.8.1812: attempt to access beyond end of device [ 149.979157][ T9797] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 149.993370][ T9797] syz.8.1812: attempt to access beyond end of device [ 149.993370][ T9797] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 150.008597][ T9797] syz.8.1812: attempt to access beyond end of device [ 150.008597][ T9797] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 150.009271][ T9692] hsr_slave_0: entered promiscuous mode [ 150.023016][ T9797] syz.8.1812: attempt to access beyond end of device [ 150.023016][ T9797] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 150.041461][ T9692] hsr_slave_1: entered promiscuous mode [ 150.041539][ T9797] syz.8.1812: attempt to access beyond end of device [ 150.041539][ T9797] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 150.060523][ T9692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.068205][ T9797] syz.8.1812: attempt to access beyond end of device [ 150.068205][ T9797] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 150.072719][ T9692] Cannot create hsr debugfs directory [ 150.097664][ T9828] bond6: entered promiscuous mode [ 150.102756][ T9828] bond6: entered allmulticast mode [ 150.110917][ T9828] 8021q: adding VLAN 0 to HW filter on device bond6 [ 150.120217][ T9833] sctp: [Deprecated]: syz.6.1819 (pid 9833) Use of int in max_burst socket option. [ 150.120217][ T9833] Use struct sctp_assoc_value instead [ 150.160433][ T9828] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 150.168534][ T9828] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 150.205817][ T9828] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1819'. [ 150.274133][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1820'. [ 150.291935][ T9692] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 150.314804][ T9692] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 150.333813][ T9692] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 150.353757][ T9692] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 150.423408][ T9692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.450246][ T9692] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.462855][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.469947][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.483084][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.490247][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.514160][ T9853] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.520970][ T9855] loop2: detected capacity change from 0 to 128 [ 150.523051][ T9853] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.538027][ T9853] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.547083][ T9853] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.554813][ T9855] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.558060][ T9853] geneve2: entered promiscuous mode [ 150.569077][ T9855] ext4 filesystem being mounted at /332/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 150.573185][ T9853] geneve2: entered allmulticast mode [ 150.612262][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1822'. [ 150.622585][ T9855] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.1822: bg 0: bad block bitmap checksum [ 150.676379][ T9859] bond26: entered promiscuous mode [ 150.681689][ T9859] bond26: entered allmulticast mode [ 150.689696][ T9859] 8021q: adding VLAN 0 to HW filter on device bond26 [ 150.697108][ T9855] atomic_op ffff88811840ad28 conn xmit_atomic 0000000000000000 [ 150.741936][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.759782][ T9859] sctp: [Deprecated]: syz.0.1823 (pid 9859) Use of int in max_burst socket option. [ 150.759782][ T9859] Use struct sctp_assoc_value instead [ 150.829221][ T9859] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 150.845471][ T9859] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 150.857065][ T9692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.873318][ T9878] FAULT_INJECTION: forcing a failure. [ 150.873318][ T9878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.886456][ T9878] CPU: 1 UID: 0 PID: 9878 Comm: syz.6.1826 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 150.887733][ T9859] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1823'. [ 150.897152][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 150.897171][ T9878] Call Trace: [ 150.897178][ T9878] [ 150.897187][ T9878] dump_stack_lvl+0xf2/0x150 [ 150.897230][ T9878] dump_stack+0x15/0x1a [ 150.931328][ T9878] should_fail_ex+0x223/0x230 [ 150.936213][ T9878] should_fail+0xb/0x10 [ 150.940398][ T9878] should_fail_usercopy+0x1a/0x20 [ 150.945535][ T9878] _copy_to_user+0x20/0xa0 [ 150.949985][ T9878] simple_read_from_buffer+0xa0/0x110 [ 150.955430][ T9878] proc_fail_nth_read+0xf9/0x140 [ 150.960406][ T9878] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.965986][ T9878] vfs_read+0x1a2/0x700 [ 150.970299][ T9878] ? __rcu_read_unlock+0x4e/0x70 [ 150.975280][ T9878] ? __fget_files+0x17c/0x1c0 [ 150.980067][ T9878] ksys_read+0xe8/0x1b0 [ 150.984254][ T9878] __x64_sys_read+0x42/0x50 [ 150.988848][ T9878] x64_sys_call+0x2874/0x2dc0 [ 150.993561][ T9878] do_syscall_64+0xc9/0x1c0 [ 150.998096][ T9878] ? clear_bhb_loop+0x55/0xb0 [ 151.002787][ T9878] ? clear_bhb_loop+0x55/0xb0 [ 151.007493][ T9878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.013513][ T9878] RIP: 0033:0x7f37fd03e8ec [ 151.017943][ T9878] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 151.033564][ T9692] veth0_vlan: entered promiscuous mode [ 151.037798][ T9878] RSP: 002b:00007f37fb6b7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.051734][ T9878] RAX: ffffffffffffffda RBX: 00007f37fd205fa0 RCX: 00007f37fd03e8ec [ 151.059757][ T9878] RDX: 000000000000000f RSI: 00007f37fb6b70b0 RDI: 0000000000000004 [ 151.067799][ T9878] RBP: 00007f37fb6b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 151.075797][ T9878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.082848][ T9692] veth1_vlan: entered promiscuous mode [ 151.083890][ T9878] R13: 0000000000000000 R14: 00007f37fd205fa0 R15: 00007fff03824588 [ 151.083916][ T9878] [ 151.126886][ T9692] veth0_macvtap: entered promiscuous mode [ 151.149331][ T9883] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.158154][ T9883] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.167010][ T9883] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.175747][ T9883] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.189655][ T9883] vxlan0: entered promiscuous mode [ 151.194826][ T9883] vxlan0: entered allmulticast mode [ 151.206088][ T9883] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.215184][ T9883] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.220789][ T9902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1827'. [ 151.224323][ T9883] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.241945][ T9883] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.271660][ T9692] veth1_macvtap: entered promiscuous mode [ 151.278309][ T9902] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 151.282718][ T9692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.298366][ T9692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.308318][ T9692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.318758][ T9692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.328599][ T9692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.339025][ T9692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.349001][ T9692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.359541][ T9692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.372080][ T9692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.381413][ T9907] loop6: detected capacity change from 0 to 164 [ 151.403273][ T9900] loop8: detected capacity change from 0 to 512 [ 151.407381][ T9692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.420037][ T9692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.429908][ T9692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.440347][ T9692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.447847][ T9900] ext4: Unknown parameter 'appraise' [ 151.450230][ T9692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.450250][ T9692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.450267][ T9692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.450282][ T9692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.536504][ T9692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.566070][ T9692] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.574857][ T9692] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.583656][ T9692] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.592480][ T9692] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.772755][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1832'. [ 151.867931][ T9927] loop9: detected capacity change from 0 to 8192 [ 151.884071][ T9938] loop2: detected capacity change from 0 to 256 [ 151.922315][ T9938] vfat: Unknown parameter '0x0000000000000004' [ 151.994994][ T9947] loop2: detected capacity change from 0 to 1024 [ 152.015774][ T9947] EXT4-fs: Ignoring removed nobh option [ 152.021584][ T9947] EXT4-fs: Ignoring removed orlov option [ 152.062141][ T9947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.191862][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.235751][ T9972] loop6: detected capacity change from 0 to 512 [ 152.260415][ T9972] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.1837: casefold flag without casefold feature [ 152.296898][ T9977] bond19: entered promiscuous mode [ 152.302105][ T9977] bond19: entered allmulticast mode [ 152.306700][ T9972] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.1837: couldn't read orphan inode 15 (err -117) [ 152.307881][ T9977] 8021q: adding VLAN 0 to HW filter on device bond19 [ 152.332263][ T9972] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.383476][ T9977] sctp: [Deprecated]: syz.2.1836 (pid 9977) Use of int in max_burst socket option. [ 152.383476][ T9977] Use struct sctp_assoc_value instead [ 152.447602][ T8228] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.459763][ T9977] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 152.467490][ T9977] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 152.514685][ T9993] bond7: entered promiscuous mode [ 152.519837][ T9993] bond7: entered allmulticast mode [ 152.525430][ T9993] 8021q: adding VLAN 0 to HW filter on device bond7 [ 152.601235][T10004] sctp: [Deprecated]: syz.6.1838 (pid 10004) Use of int in max_burst socket option. [ 152.601235][T10004] Use struct sctp_assoc_value instead [ 152.616358][T10004] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 152.623767][T10004] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 152.751843][T10018] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 152.839899][T10026] FAULT_INJECTION: forcing a failure. [ 152.839899][T10026] name failslab, interval 1, probability 0, space 0, times 0 [ 152.852624][T10026] CPU: 1 UID: 0 PID: 10026 Comm: syz.8.1844 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 152.863413][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 152.873542][T10026] Call Trace: [ 152.876831][T10026] [ 152.879845][T10026] dump_stack_lvl+0xf2/0x150 [ 152.884520][T10026] dump_stack+0x15/0x1a [ 152.888789][T10026] should_fail_ex+0x223/0x230 [ 152.893482][T10026] ? dev_ethtool+0x96/0x14c0 [ 152.898120][T10026] should_failslab+0x8f/0xb0 [ 152.902784][T10026] __kmalloc_cache_noprof+0x4e/0x320 [ 152.908172][T10026] dev_ethtool+0x96/0x14c0 [ 152.912624][T10026] ? strcmp+0x21/0x50 [ 152.916637][T10026] ? __rcu_read_unlock+0x4e/0x70 [ 152.921677][T10026] dev_ioctl+0x854/0xab0 [ 152.925975][T10026] sock_do_ioctl+0x11c/0x260 [ 152.930609][T10026] sock_ioctl+0x40f/0x600 [ 152.934957][T10026] ? __pfx_sock_ioctl+0x10/0x10 [ 152.939862][T10026] __se_sys_ioctl+0xc9/0x140 [ 152.944543][T10026] __x64_sys_ioctl+0x43/0x50 [ 152.949187][T10026] x64_sys_call+0x1690/0x2dc0 [ 152.953964][T10026] do_syscall_64+0xc9/0x1c0 [ 152.958568][T10026] ? clear_bhb_loop+0x55/0xb0 [ 152.963357][T10026] ? clear_bhb_loop+0x55/0xb0 [ 152.968107][T10026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.974068][T10026] RIP: 0033:0x7fef63eafed9 [ 152.978515][T10026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.998156][T10026] RSP: 002b:00007fef62527058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.006578][T10026] RAX: ffffffffffffffda RBX: 00007fef64075fa0 RCX: 00007fef63eafed9 [ 153.014616][T10026] RDX: 00000000200000c0 RSI: 0000000000008946 RDI: 0000000000000006 [ 153.022589][T10026] RBP: 00007fef625270a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.030634][T10026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.038632][T10026] R13: 0000000000000000 R14: 00007fef64075fa0 R15: 00007ffd6b6bc818 [ 153.046613][T10026] [ 153.279993][T10059] __nla_validate_parse: 3 callbacks suppressed [ 153.280056][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1850'. [ 153.505328][T10077] loop6: detected capacity change from 0 to 512 [ 153.513283][T10077] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 153.532019][T10077] EXT4-fs (loop6): 1 truncate cleaned up [ 153.538116][T10077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.553492][T10077] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.1852: corrupted in-inode xattr: overlapping e_value [ 153.567741][T10077] EXT4-fs warning (device loop6): ext4_xattr_set_entry:1772: inode #15: comm syz.6.1852: unable to update i_inline_off [ 153.580468][T10077] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.1852: corrupted in-inode xattr: overlapping e_value [ 153.597131][T10077] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.1852: corrupted in-inode xattr: overlapping e_value [ 153.672332][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 153.672348][ T29] audit: type=1326 audit(1733552874.991:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 153.705971][ T29] audit: type=1326 audit(1733552875.021:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 153.729520][ T29] audit: type=1326 audit(1733552875.021:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 153.753073][ T29] audit: type=1326 audit(1733552875.021:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 153.776614][ T29] audit: type=1326 audit(1733552875.021:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 153.800147][ T29] audit: type=1326 audit(1733552875.021:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 153.823668][ T29] audit: type=1326 audit(1733552875.021:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 153.847289][ T29] audit: type=1326 audit(1733552875.021:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 153.870865][ T29] audit: type=1326 audit(1733552875.021:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 153.894551][ T29] audit: type=1326 audit(1733552875.021:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 153.922771][ T8228] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.005854][T10131] loop6: detected capacity change from 0 to 512 [ 154.024883][T10131] EXT4-fs: dax option not supported [ 154.030912][T10137] FAULT_INJECTION: forcing a failure. [ 154.030912][T10137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.044125][T10137] CPU: 1 UID: 0 PID: 10137 Comm: syz.0.1857 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 154.050539][T10134] bond20: entered promiscuous mode [ 154.054892][T10137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 154.054910][T10137] Call Trace: [ 154.060027][T10134] bond20: entered allmulticast mode [ 154.070051][T10137] [ 154.070065][T10137] dump_stack_lvl+0xf2/0x150 [ 154.086136][T10137] dump_stack+0x15/0x1a [ 154.090339][T10137] should_fail_ex+0x223/0x230 [ 154.095088][T10137] should_fail+0xb/0x10 [ 154.099322][T10137] should_fail_usercopy+0x1a/0x20 [ 154.104360][T10137] _copy_from_user+0x1e/0xb0 [ 154.108978][T10137] copy_msghdr_from_user+0x54/0x2a0 [ 154.114261][T10137] ? __fget_files+0x17c/0x1c0 [ 154.119033][T10137] __sys_sendmsg+0x13e/0x230 [ 154.123650][T10137] __x64_sys_sendmsg+0x46/0x50 [ 154.128496][T10137] x64_sys_call+0x2734/0x2dc0 [ 154.133234][T10137] do_syscall_64+0xc9/0x1c0 [ 154.137821][T10137] ? clear_bhb_loop+0x55/0xb0 [ 154.142520][T10137] ? clear_bhb_loop+0x55/0xb0 [ 154.147255][T10137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.153224][T10137] RIP: 0033:0x7f16d4b8fed9 [ 154.157674][T10137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.177287][T10137] RSP: 002b:00007f16d3207058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.185704][T10137] RAX: ffffffffffffffda RBX: 00007f16d4d55fa0 RCX: 00007f16d4b8fed9 [ 154.193676][T10137] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 154.201698][T10137] RBP: 00007f16d32070a0 R08: 0000000000000000 R09: 0000000000000000 [ 154.209671][T10137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.217674][T10137] R13: 0000000000000000 R14: 00007f16d4d55fa0 R15: 00007fffeaf363f8 [ 154.225738][T10137] [ 154.239031][T10134] 8021q: adding VLAN 0 to HW filter on device bond20 [ 154.319057][T10134] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 154.326451][T10134] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 154.341566][T10144] loop9: detected capacity change from 0 to 2048 [ 154.347063][T10134] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1856'. [ 154.403062][T10150] loop8: detected capacity change from 0 to 8192 [ 154.419467][T10150] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.429635][T10144] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.435449][T10156] 9pnet: Could not find request transport: f [ 154.452503][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'. [ 154.502328][T10167] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.514820][T10156] wg2: entered promiscuous mode [ 154.518705][ T9692] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.519744][T10156] wg2: entered allmulticast mode [ 154.682812][T10184] SELinux: policydb table sizes (0,786431) do not match mine (8,7) [ 154.694716][T10186] loop6: detected capacity change from 0 to 164 [ 154.699187][T10184] SELinux: failed to load policy [ 154.859161][T10186] bio_check_eod: 8518 callbacks suppressed [ 154.859178][T10186] syz.6.1865: attempt to access beyond end of device [ 154.859178][T10186] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 154.907903][T10186] syz.6.1865: attempt to access beyond end of device [ 154.907903][T10186] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 154.934193][T10186] syz.6.1865: attempt to access beyond end of device [ 154.934193][T10186] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 154.962369][T10186] syz.6.1865: attempt to access beyond end of device [ 154.962369][T10186] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 154.976112][T10186] syz.6.1865: attempt to access beyond end of device [ 154.976112][T10186] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 154.995736][T10204] syzkaller0: entered promiscuous mode [ 155.001257][T10204] syzkaller0: entered allmulticast mode [ 155.004705][T10186] syz.6.1865: attempt to access beyond end of device [ 155.004705][T10186] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 155.050466][T10186] syz.6.1865: attempt to access beyond end of device [ 155.050466][T10186] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 155.068237][T10186] syz.6.1865: attempt to access beyond end of device [ 155.068237][T10186] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 155.082096][T10186] syz.6.1865: attempt to access beyond end of device [ 155.082096][T10186] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 155.098270][T10186] syz.6.1865: attempt to access beyond end of device [ 155.098270][T10186] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 155.121948][T10210] syz.9.1872[10210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.122025][T10210] syz.9.1872[10210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.133919][T10210] syz.9.1872[10210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.288127][T10221] FAULT_INJECTION: forcing a failure. [ 155.288127][T10221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.312782][T10221] CPU: 1 UID: 0 PID: 10221 Comm: syz.9.1874 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 155.323632][T10221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.333704][T10221] Call Trace: [ 155.337008][T10221] [ 155.339955][T10221] dump_stack_lvl+0xf2/0x150 [ 155.344593][T10221] dump_stack+0x15/0x1a [ 155.348841][T10221] should_fail_ex+0x223/0x230 [ 155.353592][T10221] should_fail+0xb/0x10 [ 155.357862][T10221] should_fail_usercopy+0x1a/0x20 [ 155.363000][T10221] _copy_to_user+0x20/0xa0 [ 155.367508][T10221] simple_read_from_buffer+0xa0/0x110 [ 155.372917][T10221] proc_fail_nth_read+0xf9/0x140 [ 155.377879][T10221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.383536][T10221] vfs_read+0x1a2/0x700 [ 155.387744][T10221] ? __rcu_read_unlock+0x4e/0x70 [ 155.392924][T10221] ? __fget_files+0x17c/0x1c0 [ 155.397668][T10221] ksys_read+0xe8/0x1b0 [ 155.401910][T10221] __x64_sys_read+0x42/0x50 [ 155.406459][T10221] x64_sys_call+0x2874/0x2dc0 [ 155.411167][T10221] do_syscall_64+0xc9/0x1c0 [ 155.415707][T10221] ? clear_bhb_loop+0x55/0xb0 [ 155.420425][T10221] ? clear_bhb_loop+0x55/0xb0 [ 155.425118][T10221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.431035][T10221] RIP: 0033:0x7fe8aaf1e8ec [ 155.435668][T10221] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 155.455305][T10221] RSP: 002b:00007fe8a9597050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.463750][T10221] RAX: ffffffffffffffda RBX: 00007fe8ab0e5fa0 RCX: 00007fe8aaf1e8ec [ 155.471731][T10221] RDX: 000000000000000f RSI: 00007fe8a95970b0 RDI: 0000000000000007 [ 155.479707][T10221] RBP: 00007fe8a95970a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.487715][T10221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.495722][T10221] R13: 0000000000000000 R14: 00007fe8ab0e5fa0 R15: 00007ffdc9e419a8 [ 155.503785][T10221] [ 155.600335][T10223] loop2: detected capacity change from 0 to 1024 [ 155.612012][T10234] loop8: detected capacity change from 0 to 512 [ 155.648614][T10236] cgroup: none used incorrectly [ 155.656156][T10223] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1873: Failed to acquire dquot type 0 [ 155.682041][T10234] ext4: Unknown parameter 'smackfsroot' [ 155.704744][T10223] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 155.737877][T10223] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.1873: corrupted inode contents [ 155.738033][T10236] batadv_slave_1: entered promiscuous mode [ 155.763499][T10223] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #13: comm syz.2.1873: mark_inode_dirty error [ 155.783287][T10236] batadv_slave_1: left promiscuous mode [ 155.792618][T10223] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.1873: corrupted inode contents [ 155.807571][T10223] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.1873: mark_inode_dirty error [ 155.839226][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1877'. [ 155.843112][T10223] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.1873: corrupted inode contents [ 155.864429][T10223] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 155.874735][T10223] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.1873: corrupted inode contents [ 155.889289][T10223] EXT4-fs error (device loop2): ext4_truncate:4240: inode #13: comm syz.2.1873: mark_inode_dirty error [ 155.901938][T10223] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 155.912067][T10223] EXT4-fs (loop2): 1 truncate cleaned up [ 155.926111][T10223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.985231][T10250] bond27: entered promiscuous mode [ 155.990509][T10250] bond27: entered allmulticast mode [ 156.008506][T10250] 8021q: adding VLAN 0 to HW filter on device bond27 [ 156.011901][T10255] FAULT_INJECTION: forcing a failure. [ 156.011901][T10255] name failslab, interval 1, probability 0, space 0, times 0 [ 156.027946][T10255] CPU: 0 UID: 0 PID: 10255 Comm: syz.6.1883 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 156.038718][T10255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 156.048809][T10255] Call Trace: [ 156.052149][T10255] [ 156.055096][T10255] dump_stack_lvl+0xf2/0x150 [ 156.059794][T10255] dump_stack+0x15/0x1a [ 156.061782][T10257] FAULT_INJECTION: forcing a failure. [ 156.061782][T10257] name failslab, interval 1, probability 0, space 0, times 0 [ 156.063970][T10255] should_fail_ex+0x223/0x230 [ 156.081223][T10255] should_failslab+0x8f/0xb0 [ 156.085901][T10255] kmem_cache_alloc_node_noprof+0x59/0x320 [ 156.091738][T10255] ? __alloc_skb+0x10b/0x310 [ 156.096346][T10255] __alloc_skb+0x10b/0x310 [ 156.100779][T10255] ? audit_log_start+0x34c/0x6b0 [ 156.105727][T10255] audit_log_start+0x368/0x6b0 [ 156.110545][T10255] ? kmem_cache_free+0xdc/0x2d0 [ 156.115478][T10255] audit_seccomp+0x4b/0x130 [ 156.120093][T10255] __seccomp_filter+0x6fa/0x1180 [ 156.125092][T10255] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 156.130805][T10255] ? vfs_write+0x596/0x920 [ 156.135256][T10255] ? putname+0xcf/0xf0 [ 156.139331][T10255] __secure_computing+0x9f/0x1c0 [ 156.144283][T10255] syscall_trace_enter+0xd1/0x1f0 [ 156.149327][T10255] ? fpregs_assert_state_consistent+0x83/0xa0 [ 156.155421][T10255] do_syscall_64+0xaa/0x1c0 [ 156.160005][T10255] ? clear_bhb_loop+0x55/0xb0 [ 156.164739][T10255] ? clear_bhb_loop+0x55/0xb0 [ 156.169511][T10255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.175420][T10255] RIP: 0033:0x7f37fd03e8ec [ 156.179956][T10255] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 156.199623][T10255] RSP: 002b:00007f37fb6b7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.208161][T10255] RAX: ffffffffffffffda RBX: 00007f37fd205fa0 RCX: 00007f37fd03e8ec [ 156.216168][T10255] RDX: 000000000000000f RSI: 00007f37fb6b70b0 RDI: 0000000000000006 [ 156.224145][T10255] RBP: 00007f37fb6b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 156.232116][T10255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.240182][T10255] R13: 0000000000000000 R14: 00007f37fd205fa0 R15: 00007fff03824588 [ 156.248166][T10255] [ 156.251251][T10257] CPU: 1 UID: 0 PID: 10257 Comm: syz.9.1884 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 156.262198][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 156.272274][T10257] Call Trace: [ 156.275553][T10257] [ 156.278601][T10257] dump_stack_lvl+0xf2/0x150 [ 156.283224][T10257] dump_stack+0x15/0x1a [ 156.287404][T10257] should_fail_ex+0x223/0x230 [ 156.292091][T10257] ? rds_cong_from_addr+0x34/0x2a0 [ 156.297274][T10257] should_failslab+0x8f/0xb0 [ 156.301876][T10257] __kmalloc_cache_noprof+0x4e/0x320 [ 156.307268][T10257] rds_cong_from_addr+0x34/0x2a0 [ 156.312228][T10257] rds_cong_get_maps+0x1a/0x70 [ 156.317037][T10257] __rds_conn_create+0x53a/0xfb0 [ 156.322027][T10257] rds_conn_create_outgoing+0x43/0x60 [ 156.327414][T10257] rds_sendmsg+0xba7/0x1400 [ 156.331969][T10257] ? __pfx_rds_sendmsg+0x10/0x10 [ 156.336918][T10257] __sock_sendmsg+0x140/0x180 [ 156.341652][T10257] ____sys_sendmsg+0x312/0x410 [ 156.346426][T10257] __sys_sendmsg+0x19d/0x230 [ 156.351144][T10257] __x64_sys_sendmsg+0x46/0x50 [ 156.355987][T10257] x64_sys_call+0x2734/0x2dc0 [ 156.360755][T10257] do_syscall_64+0xc9/0x1c0 [ 156.365355][T10257] ? clear_bhb_loop+0x55/0xb0 [ 156.370102][T10257] ? clear_bhb_loop+0x55/0xb0 [ 156.374819][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.380749][T10257] RIP: 0033:0x7fe8aaf1fed9 [ 156.385250][T10257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.404934][T10257] RSP: 002b:00007fe8a9597058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.413419][T10257] RAX: ffffffffffffffda RBX: 00007fe8ab0e5fa0 RCX: 00007fe8aaf1fed9 [ 156.421392][T10257] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 156.429364][T10257] RBP: 00007fe8a95970a0 R08: 0000000000000000 R09: 0000000000000000 [ 156.437375][T10257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.445345][T10257] R13: 0000000000000000 R14: 00007fe8ab0e5fa0 R15: 00007ffdc9e419a8 [ 156.453383][T10257] [ 156.458214][T10261] sctp: [Deprecated]: syz.0.1881 (pid 10261) Use of int in max_burst socket option. [ 156.458214][T10261] Use struct sctp_assoc_value instead [ 156.474682][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.499975][T10261] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 156.507397][T10261] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 156.519455][T10261] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1881'. [ 156.552695][T10269] loop9: detected capacity change from 0 to 164 [ 156.721622][T10281] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 156.957366][T10294] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1896'. [ 157.035203][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1899'. [ 157.044340][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1899'. [ 157.412297][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 157.463092][T10307] bond21: entered promiscuous mode [ 157.468327][T10307] bond21: entered allmulticast mode [ 157.477465][T10307] 8021q: adding VLAN 0 to HW filter on device bond21 [ 157.501336][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1903'. [ 157.540544][T10313] sctp: [Deprecated]: syz.2.1902 (pid 10313) Use of int in max_burst socket option. [ 157.540544][T10313] Use struct sctp_assoc_value instead [ 157.562469][T10316] sctp: [Deprecated]: syz.9.1903 (pid 10316) Use of int in max_burst socket option. [ 157.562469][T10316] Use struct sctp_assoc_value instead [ 157.579057][T10313] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 157.586363][T10313] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 157.596435][T10316] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 157.604032][T10316] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 157.639621][T10320] bond28: entered promiscuous mode [ 157.644776][T10320] bond28: entered allmulticast mode [ 157.650262][T10320] 8021q: adding VLAN 0 to HW filter on device bond28 [ 157.715981][T10323] sctp: [Deprecated]: syz.0.1907 (pid 10323) Use of int in max_burst socket option. [ 157.715981][T10323] Use struct sctp_assoc_value instead [ 157.731471][T10323] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 157.738844][T10323] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 157.893187][T10329] loop8: detected capacity change from 0 to 164 [ 158.374759][T10335] __nla_validate_parse: 4 callbacks suppressed [ 158.374775][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1912'. [ 158.431721][T10339] loop9: detected capacity change from 0 to 1024 [ 158.439438][T10339] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 158.451292][T10339] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 158.462877][T10339] EXT4-fs (loop9): invalid journal inode [ 158.471155][T10339] EXT4-fs (loop9): can't get journal size [ 158.481659][T10339] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.523096][T10343] FAULT_INJECTION: forcing a failure. [ 158.523096][T10343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.536211][T10343] CPU: 0 UID: 0 PID: 10343 Comm: syz.6.1915 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 158.547034][T10343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.557198][T10343] Call Trace: [ 158.560577][T10343] [ 158.563519][T10343] dump_stack_lvl+0xf2/0x150 [ 158.568146][T10343] dump_stack+0x15/0x1a [ 158.572341][T10343] should_fail_ex+0x223/0x230 [ 158.577121][T10343] should_fail+0xb/0x10 [ 158.581310][T10343] should_fail_usercopy+0x1a/0x20 [ 158.586378][T10343] _copy_from_user+0x1e/0xb0 [ 158.591060][T10343] do_sys_poll+0x153/0xc20 [ 158.595520][T10343] ? selinux_file_open+0x34a/0x3b0 [ 158.600791][T10343] __se_sys_poll+0xe1/0x200 [ 158.605324][T10343] __x64_sys_poll+0x43/0x50 [ 158.609858][T10343] x64_sys_call+0x2a72/0x2dc0 [ 158.614577][T10343] do_syscall_64+0xc9/0x1c0 [ 158.619180][T10343] ? clear_bhb_loop+0x55/0xb0 [ 158.623885][T10343] ? clear_bhb_loop+0x55/0xb0 [ 158.628580][T10343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.634505][T10343] RIP: 0033:0x7f37fd03fed9 [ 158.638954][T10343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.658595][T10343] RSP: 002b:00007f37fb6b7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 158.667092][T10343] RAX: ffffffffffffffda RBX: 00007f37fd205fa0 RCX: 00007f37fd03fed9 [ 158.675083][T10343] RDX: 0000000000005859 RSI: 0000000000000037 RDI: 0000000020000000 [ 158.683770][T10343] RBP: 00007f37fb6b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 158.691771][T10343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.699833][T10343] R13: 0000000000000000 R14: 00007f37fd205fa0 R15: 00007fff03824588 [ 158.707840][T10343] [ 158.715476][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 158.715493][ T29] audit: type=1326 audit(1733552879.991:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10345 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 158.745332][ T29] audit: type=1326 audit(1733552879.991:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10345 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 158.768954][ T29] audit: type=1326 audit(1733552879.991:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10345 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 158.792558][ T29] audit: type=1326 audit(1733552879.991:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10345 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 158.816100][ T29] audit: type=1326 audit(1733552879.991:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10345 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 158.839698][ T29] audit: type=1326 audit(1733552879.991:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10345 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 158.863201][ T29] audit: type=1326 audit(1733552879.991:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10345 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 158.886894][ T29] audit: type=1326 audit(1733552879.991:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10345 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 158.910518][ T29] audit: type=1326 audit(1733552879.991:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10345 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 158.934119][ T29] audit: type=1326 audit(1733552879.991:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10345 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16d4b8fed9 code=0x7ffc0000 [ 158.990978][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1917'. [ 159.002063][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1919'. [ 159.049849][ T9692] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.101941][T10356] bond29: entered promiscuous mode [ 159.107116][T10356] bond29: entered allmulticast mode [ 159.113089][T10356] 8021q: adding VLAN 0 to HW filter on device bond29 [ 159.128894][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1922'. [ 159.138210][T10362] loop6: detected capacity change from 0 to 128 [ 159.146241][T10362] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.158747][T10362] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 159.191732][T10367] sctp: [Deprecated]: syz.0.1920 (pid 10367) Use of int in max_burst socket option. [ 159.191732][T10367] Use struct sctp_assoc_value instead [ 159.192177][T10369] sctp: [Deprecated]: syz.8.1922 (pid 10369) Use of int in max_burst socket option. [ 159.192177][T10369] Use struct sctp_assoc_value instead [ 159.229150][T10369] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.236555][T10369] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 159.246564][T10367] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.248273][T10369] netlink: 332 bytes leftover after parsing attributes in process `syz.8.1922'. [ 159.253914][T10367] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 159.276235][T10367] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1920'. [ 159.288929][ T8228] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.290846][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1924'. [ 159.371769][T10377] loop6: detected capacity change from 0 to 8192 [ 159.387390][ T6842] ================================================================== [ 159.395513][ T6842] BUG: KCSAN: data-race in _copy_to_iter / fat16_ent_put [ 159.402668][ T6842] [ 159.404999][ T6842] write to 0xffff8881324faece of 2 bytes by task 10377 on cpu 1: [ 159.412820][ T6842] fat16_ent_put+0x28/0x60 [ 159.417288][ T6842] fat_alloc_clusters+0x4c9/0xa80 [ 159.422338][ T6842] fat_get_block+0x25c/0x5e0 [ 159.426965][ T6842] __block_write_begin_int+0x417/0xfa0 [ 159.432447][ T6842] cont_write_begin+0x546/0x860 [ 159.437316][ T6842] fat_write_begin+0x51/0xe0 [ 159.441918][ T6842] generic_perform_write+0x1a8/0x4a0 [ 159.447228][ T6842] __generic_file_write_iter+0xa1/0x120 [ 159.452799][ T6842] generic_file_write_iter+0x77/0x1c0 [ 159.458191][ T6842] vfs_write+0x77f/0x920 [ 159.462460][ T6842] ksys_write+0xe8/0x1b0 [ 159.466716][ T6842] __x64_sys_write+0x42/0x50 [ 159.471319][ T6842] x64_sys_call+0x287e/0x2dc0 [ 159.476005][ T6842] do_syscall_64+0xc9/0x1c0 [ 159.480514][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.486465][ T6842] [ 159.488793][ T6842] read to 0xffff8881324fac00 of 1024 bytes by task 6842 on cpu 0: [ 159.496611][ T6842] _copy_to_iter+0x130/0xd00 [ 159.501214][ T6842] copy_page_to_iter+0x171/0x2b0 [ 159.506189][ T6842] filemap_read+0x42d/0x6a0 [ 159.510739][ T6842] blkdev_read_iter+0x20e/0x2c0 [ 159.515612][ T6842] vfs_read+0x5dc/0x700 [ 159.519784][ T6842] ksys_read+0xe8/0x1b0 [ 159.523949][ T6842] __x64_sys_read+0x42/0x50 [ 159.528470][ T6842] x64_sys_call+0x2874/0x2dc0 [ 159.533153][ T6842] do_syscall_64+0xc9/0x1c0 [ 159.537682][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.543590][ T6842] [ 159.545923][ T6842] Reported by Kernel Concurrency Sanitizer on: [ 159.552079][ T6842] CPU: 0 UID: 0 PID: 6842 Comm: udevd Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 159.562320][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 159.572393][ T6842] ==================================================================