last executing test programs: 5m12.409390102s ago: executing program 32 (id=47): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x7) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000300)='\x00!G', 0x3}], 0x1, 0x83, 0x972e) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x129080, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000040)={0x7, 0x7, 0x80, 0x200, 0xb, "65e11e03b4d62590c007a44750ce7c6c87df4b"}) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000080)={0x1, 0x0, 0xffffb4d0, 0x5, 0x17, "5b632d470200000000000700e2ff007f00"}) sendto$inet(r4, &(0x7f0000000300)="ab", 0x1, 0x4000000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="fc", 0x1}], 0x1, &(0x7f00000009c0)=[@sndinfo={0x20, 0x84, 0x2, {0x1000, 0x45, 0x0, 0xfffffffe}}], 0x20}, 0x24004041) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) nanosleep(&(0x7f0000000200), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="00004000000000ccb87b4260ee1c822ac8b85de700b7080000022000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) socket$nl_route(0x10, 0x3, 0x0) 5m12.216191144s ago: executing program 4 (id=50): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, &(0x7f0000002180)=""/4105, 0x137, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x691}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev}]}, 0x24}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) timer_settime(r6, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="83efffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) 5m11.276734922s ago: executing program 4 (id=63): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) close(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) socket(0x2c, 0x4, 0x8001) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x0, 0xc, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) setuid(0xffffffffffffffff) 5m11.106660573s ago: executing program 4 (id=66): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x30004080) 5m11.058513923s ago: executing program 4 (id=67): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r4, 0x0, 0x2}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0xe5e, r1, &(0x7f0000000300)="fb380f2c40a53aa3e5cb7d9b303459b208574757950f7bf19b", 0x19, 0x6, 0x0, 0x0, r6}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x82, &(0x7f0000000200), 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000000580)=""/102392, 0x18ff8) 5m9.923204282s ago: executing program 4 (id=72): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x3fed, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) 5m9.149381668s ago: executing program 4 (id=79): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000540), &(0x7f0000000580)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) clock_getres(0x4, &(0x7f0000000640)) write$cgroup_type(r4, &(0x7f00000004c0), 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x2000, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r7, 0xc058534b, &(0x7f0000000300)={0x0, 0x2, 0xcc, 0x9, 0x8f9, 0x4f6e}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) r9 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc4bc, 0x10100, 0x0, 0xbe}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)) io_uring_enter(r9, 0x48e9, 0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x35}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 5m9.148840188s ago: executing program 33 (id=79): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000540), &(0x7f0000000580)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) clock_getres(0x4, &(0x7f0000000640)) write$cgroup_type(r4, &(0x7f00000004c0), 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x2000, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r7, 0xc058534b, &(0x7f0000000300)={0x0, 0x2, 0xcc, 0x9, 0x8f9, 0x4f6e}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) r9 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc4bc, 0x10100, 0x0, 0xbe}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)) io_uring_enter(r9, 0x48e9, 0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x35}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1m14.891579019s ago: executing program 0 (id=4287): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) close_range(r2, r3, 0x0) 1m14.890808989s ago: executing program 0 (id=4288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='N'], 0x6a) ioctl$KDGKBMODE(r2, 0x4bfa, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000ce79fed26af8390953b55dc75599aa3a3609678919f7d2c0cfa7e44ada45f88153d82bc4543224b4bdd5f74587dc7e1daf2a0700a77b7d00a6fc9e", @ANYRES16=r7, @ANYBLOB="010025bd7000fadbdf2501000000040001800400030004000280"], 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x20040040) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100000}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000008400000000000000620000000000010020000000000000008400000008"], 0x38}, 0x0) 1m14.275164764s ago: executing program 0 (id=4301): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000380)=""/79, 0x4f}], 0x1) 1m13.367474121s ago: executing program 0 (id=4318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r4 = creat(&(0x7f00000003c0)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000280)=0x0) capset(&(0x7f0000000380)={0x20071026, r6}, &(0x7f0000000400)={0x3, 0xff, 0x3146e054, 0x8, 0x9, 0x8}) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x12, r1, 0x3000) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) ptrace(0x10, r9) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000001c0)={r12, 0x641516c6, 0x8, 0xfffffffc}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r12, 0x8}, 0x8) 1m13.222879412s ago: executing program 0 (id=4324): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1], 0x48) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757818"], 0x65) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000001ec0)={0x14e8, 0x14, 0x2, 0x70bd27, 0x25dfdbfe, {0x1d, 0xc}, [@INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "f88dc669b9ae0cd550e8a29d0efc5446f8fb5e6a3d28dee21632c0d87e62fccb9d8bb5c67cac0b106242f26b5110496878d8d8e22972be86585ba5f04868d0c2fceb6902981dcec675aa66a282a2925346faf3c3a2d80067b00e578173416ed297af3e4cc1218f1e228215b354baebdcd3988d43acfa97b9c1426b4c9e36d35cf4712b0100048d43553adabbbbc27ef24d10d87764e6520f128a58142a08999af23b8587081494a2c505a4b0cd191fb2b7550742f1d97c6add4938f09cc4dcd4c882968d8962e7461e26fb7ec315104915f53cfd377883354a33214c12606d"}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "4ae97628"}, @INET_DIAG_REQ_BYTECODE={0xd4, 0x1, "fe774ebdf361d3e2ba2995946e6bdfc677cf5c1223dffa7c5284a2aa20e0c4079d0227b1dc03983818058b85d1fbaa9bfdde9b32f873f4cfa0ede48841655d7bee16e8f46ec269801aec6f5564d541fd2a8c93a8cd1a2d94cbbe52e123240e0448b2d9d6dfd8e6446a4b26273ec59f341f1937c0e170e07bc8fb10c6bc064cb9e361e781c4ac39bdd27c4856539622969c7c531d74bd2ab022149623a0ff6998ccf81c3970b49a66ced2b2e112ddd32fe137607ee5c8292d68d971eba1a32ae63562068dfcb7949d464193629c0c3c28"}, @INET_DIAG_REQ_BYTECODE={0x20, 0x1, "9ff75a0a6a0cba92c868f0a4d4a7a301a4091c90d3b927faa3dfaf3b"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "b6fe56494dbb457763e075a7f0a90df7696e90a182948c24fb6c50a46484997c986cb5aebbbb5420ff17e6ebd987c8fedc99a82071d8a1653eb993953ba0f067e5942ba7f96daf4a58770205"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "5e77f95a3c939470c942afd7e4891ebfad8469b5445318d6a8dcf53548112e19c94695704bedfdd678428f8ee5bb9453edc4363a19e52c1a78a2fe0a4ec292fbbce9441f0217576e17adfe71b84a1f146fb3a864e08b0f74543646e67cb1087dba866b09cf2b95b8611ed18d8261dc78395464b46f2675db2a2420bec890de7630f35ee211fc7de4a0524f1e47b3c0c85647b757f819fcb1b6b1"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "75b6aaf066245c61cfd6a7a78fe85e576a8f75e979952dc014df2891447a5e40576a745555e0699f65fdb0043dafbc6f13416f9cb33edb507392963d00035ae2a5a54b809728e882ae74743b6e0f1c039426e387e8ea7b34f590cdb42425b119b578ba5adb44a768cfb909b47fcc686f622561962a3a0be22dbda382b99fb2b3531bef487cbb2375e9ccbcf0b19b96d0c3e9275a77e9ef2487554528"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "c0e0d516c4c74c7015f3d9efaf7684fd4ea19af12e3f63857068f1d2378e69d489ea610b17a31d2250747a486f5b5fddab7a0e17dd6e8e41f7b7d2edac02a0771903e88f40ad9c0c940139918cee3cecf9aa9bf45d646665ff88db1a2f081eaaded9ee94954fce2a6f9661d56e4ebf16b61389331d799a3f8a420e5dba10397d6d48195acd8e3ef9a751bfac53d02cf80d9e3c8a42702d62b544a183f050d2af4dacc5cc6749102aae35345a0ec4ee5f3813e888cdbd29517519458ba0f0"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "25e2f8a0813801db2407630334ffd23f241d0fc06317ace93af911e5baeeba26a65b8792413dff510c68620ed643697bd30960c25385ee8e343ef135c1c8bfb6a282bac3f5368fac91ecc7d22c6f2b2e8ec6cdb7066b33488a0eee7d578a342e61f881125d55f21092e413d38acd3d7ae1c08013579985a96138a2f54ef7670bee56b11ecfdc73664099c7d7b133e915aab84f9b17e3c3cc"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x14e8}, 0x1, 0x0, 0x0, 0x44000}, 0x51) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x10, 0x80, 0x8a64, 0x5a77, {{0x6, 0x4, 0x3, 0x16, 0x18, 0x68, 0x0, 0xa, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}]}}}}}) sendmmsg$inet(r1, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="288d0825c6dce3c6356d891a136259c9616e76d91fa3cfa31aea9458d037b358971f31a1b1a7979be1478d07a6bb94afe745d8446ef1d7f0ed23e3dda4ad529acc0bcaabd1e81027298dda9724ecfe469eb95eeb0f44afa59f4d6b4ea84ce15364c336c69c9f36854a2289552182fd76f42df6715accbb9b19900ff6642e7fd229a55896dfb36ff5166af91110c5fba0b62ea1d874611db2362d73a131ef56cb4af8185d22eaf5cd8f460565c43f15f7c3dbd331937d5e7b395fbd403ad6df1df829a47f4354004357cdb6a1a307a6ed1be938347f587a0a0e8a40f3d4e48c90704dbf8908610a", 0xe7}, {&(0x7f0000000400)="97b67fba89d1abe0a8a7e07dc624aa0d66ab8f3687e969adec4dcbdc37860155593bcd9fb089c39c9b25566eb2d88c5d469f938c7555b9de76cd8ae2d254e248cc9a8eb6f8cbd38adf5a638a072850192715c0dda40cb0579e89eda943dc548abb48536aaaebbd763ac773a6abf4dcd544ad2c93bc3cc64eea22aaf1bee44e5ee3ad8f22656b576e44e2ce994dce875ce5fba25b1f8b38024b568da6006d2e43373ee3130debfd1da1ef1c32a0", 0xad}, {&(0x7f0000000080)}, {&(0x7f0000000a40)="44b29a62408f72a6c44715c95f61488effde9bc7145176308c89b19ece5cf75b6e0ef975b76aafd9ae1ddda08cc281a22ba313cf0c240c731ba63549b5932b7cdfca9ef251ce6ef433d332c90b162c6f3316f54af109ac80f768a1bacda1862b6ed856a79038a8b6b18c19", 0x6b}, {&(0x7f0000000200)="09dbcac64e7f2555ea3e520d6148fa369a9d503b820925162ba58169dfea17838fd61dc7b9790968c3830706a6bfbd55cd3903fbeaeac72a09", 0x39}], 0x5, &(0x7f00000005c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@rr={0x7, 0x7, 0x11, [@empty]}, @timestamp_prespec={0x44, 0x2c, 0x77, 0x3, 0xa, [{@broadcast, 0x8}, {@loopback, 0x3}, {@broadcast, 0x81}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @timestamp_prespec={0x44, 0x4c, 0x1a, 0x3, 0x6, [{@empty, 0xbd}, {@broadcast, 0xa0e3}, {@rand_addr=0x64010100}, {@multicast1, 0x6a}, {@remote}, {@broadcast, 0x8}, {@loopback, 0xe6}, {@private=0xa010100, 0x10000}, {@multicast1, 0x1ff}]}, @timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @timestamp={0x44, 0x20, 0x49, 0x0, 0xf, [0x7fff, 0x200, 0x0, 0x7, 0x3, 0x5, 0x401]}, @ssrr={0x89, 0xb, 0x4b, [@empty, @local]}, @lsrr={0x83, 0x7, 0x46, [@dev={0xac, 0x14, 0x14, 0x42}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @remote}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @end, @generic={0x83, 0x9, "65863f166f14ec"}]}}}], 0x128}}, {{&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000740)="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", 0xfc}, {&(0x7f0000000840)="4bbd0ba364cac0dcb43130505d5cf5dbf71a27ae059006279602128371e52695775edb3e578f0814dc2a67db463b6f717ba2991885ac482c5f5210302a99699a31eb", 0x42}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="7400000000000000000000000700000000890fe1e00000010a010102ac1414aa8307c200000000070b0664010101e0000001071b98e0006584d978758f50d28660789b425e25d4000164010102ac1e0001ac1414aaac1e0101e000000244242913e0000002000000850a010101000005e60006000000000007ac1414aa0000000300000000000000110000000000000000000000010400009e000000000000001400000000000000"], 0xa8}}], 0x2, 0x4) 1m12.857270895s ago: executing program 0 (id=4333): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) dup3(r1, r0, 0x0) 1m12.842722646s ago: executing program 34 (id=4333): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) dup3(r1, r0, 0x0) 57.826768016s ago: executing program 6 (id=4601): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 57.800326406s ago: executing program 6 (id=4602): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000ce000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8000000850000000100"/61], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x9) ioprio_set$pid(0x0, r1, 0x6000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000002000000020000000d"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="48d2aee6a70e48fccd5b11cc7aff47a6f62011bb3ddcb0c5e832b3146ee3760bbd15a354d4cd5b567a9d75b5774af03b3ca8183b068d09dd17d0311ca21fc438816e1a35141f1fb7f1bc3432fa94d36bf942a6cffecbd65843a76f7731966c2156a4d8c659d158d6f901ab7e70d84fa189fe833178b7edc6454afb2b7ed3ef27209c73813606396096ef89111a6fc0dd7f59631f82046ab7f624a2c15ce63a4b086904a04e247cf65831d352ed1232236cccbc3a34e80a8d772247745dc60e6d86662d6b7d86d407777778368348efe442b3fe77e604422a6a05b9bd90b3f621b1b804e1d34488efd9021b5f44f709cfa1", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r8, &(0x7f0000000080), &(0x7f0000000280)=@tcp6, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) renameat2(r10, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000300)='./file0\x00', 0x1) fspick(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0) sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB="ec4a"]) 57.426852259s ago: executing program 6 (id=4606): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) faccessat2(0xffffffffffffff9c, 0x0, 0x5, 0x1300) ioctl$int_in(r0, 0x5421, &(0x7f0000000800)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r0) 57.415055689s ago: executing program 6 (id=4607): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000440)='./file1\x00', 0x1004088, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYBLOB="4dad321c5bb445e7666c772d50ccdcd979f2e2031660c7d62b07ec2915334ae578d7ee3056e9b90e84ec7d3f1e29256c6875d3cd420e435379656ba3063ba1ac62b2abb242c133a68eb664ee4a624c6993862e52a79d52a74f84c637bf476fc37e2a24aae6afe5b9b9021fa4b011703c9a46428afd68256b2c6bacb3288a02496b85146cbcd20569b2de0c66d336fbfc8fc8c64ad14390e99fcaa7cf59211ce4078bd5bee01d52f60e8a653d1ddb4da7a4d045b9a5f3f18f0558b96908dca40b826763655507628c6b1a7f9c4ce31f4b4b0ec9a4676121d02a5c5edc745395ff5cecc640b0b706b3", @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0], 0x0, 0x7cf, &(0x7f0000003380)="$eJzs3U9sHFcZAPBvXCdxXBFVBYUoStNpWqRESt2107qyemi367Ez7XrX2l1XiRBqI+JUUZy2aqhEciDNBQQCIU4cSw9c4IS4gJBA4gCckODKrVIlDi0IJA6gSkY7s5vY8a6dP04c0O9nxfNm3pt53zxv5ttZe2YCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIikNlupTCZRzxtLp9LharOt5sIm9f3t/WbdZJN+I5LuvxgbiwPlogNfuFG9v/vtSBwq5w7FWHcyFlce3v/IC58fHemvv0lA22100MJLl69cOLOysvzufQzkHvjOr9bN/ng8bnFk57NG3m7mC9X5LM3bzXRmerryzMm5djqX17P26XYnW0hrrazaabbSo7Vj6eTMzIk0mzjdXGrMz1brWTpaLnz+6alKZTp9ZWIxq7bazcYzr0y0ayfzej1vzBcrdqu7bZ7vvhBfzTtpJ6supOm58yvLJ9aHtHdDkN1Gk+uWfLa6du7QU498/N5H/zy/PLXV7k5VpqYmJ6emJqefm3nu+UpldMOCyk1iQ4v7+qLlAbTNR3C4c/38H/XIoxFLcSrSgV+1mI1WNGNhSH1PP/9/6Zm//XHTftfk/zLLjxw6cKP6YBT5/3A5d3hY/i/73r1nSEz36qsvjUtxOa7EhTgTK7ESy/HuPekv2b5tjWxvZPORRSPyaEcz8liIarEk7S1JYyamYzoq8XqcjLloRxpzkUc9smjH6WhHJ7LiFVWLVmRRjU40oxVpHI1aHIs0JmMmZuJEpJHFRJyOZixFI+ZjNqrFVs7F+WLcT9wU1/5vvPHLN//08QfFT6vfaHKzIX4/omj0j9gbMaSR/M/d294DONyF1X7+v1lxQAQAAAD+HyTFp+/d8/9d8VhRmsvr2Ze3WGu0+80HBAAAAPA/ovjN/6HuZFe39Fgk3fP/yvpGP921M8EBAAAA2yIprrFLImI8Hi9L/culKjsdGwAAALA9it//H+5OxiOuFgtu5/x/wI0DAAAAgAfNaz/vFW6+x/5H/Xvsthf3JL/+e7Rau5Jri6eeSi5Wu+2qFx8q1+tNVgt7IqIzdzDpfy5QbGt69MrD3fnRWnYo6d/98rM95fTT4vvB0esBrY/jpb3l0iRJtgjghm4A+3p7cT2AYi6+G0+UbZ44W07P9mvKvR2fy+vZRK1Zf2EyqtV9I53sVOe9t85/PYrd/3ZjYV8S586vLE989e2Vs0Us17pbuXaxt78bPg7ZJJbV3gjEY4PvbryruBCj1+942W9l7f6PXNrXLYzcRp/fjCNlmyPj5XR8/f6PdfucnBi29+Pl/k1u2PPRjS+sTaN4smzz5NEny8mAKKY2i6I7FlNro+gNwu2NxcAo4pGI+OCJq6f+9btmkp3YKooTdxkFwE45V9z15+Ys9J8yna9283+rtWt3rMs75Qq3epRLil62eJLPrWf3f69uckQ/WrY5Wr6fGD04IK9UBhzR3zn/zu97R/Rnf/LDH33l8B9+dsd5fazfZG+/8OhvHx6JIoq9vSiu9Gpau5LvXc8kZVb9sLv8w6H9tutTSXcIH/raxXdi/6XLV54+f/HMm8tvLr81NXViuvJspfJckvR+eKvFOwa5B4ABjsThMpEPfcbOkKfwFG8Aytz97GZn1Q9F8uj1Pyno5sS3YyXOxvHiaoOIeHxwv+PFOsV7kCLKMtjBZ63ja57wcnyLc8vdxY0Oum2ntmw7vubxMjd88Qf38McBAPfFkS3y8ND8v+bc/fgW593ja/6k8HgcK9se60cwPJcDAPdG1vo0Ge98K2m18sXXJ2dmJqudk1naatZeTVv57HyW5o1O1orRamM+SxdbzU6z1qx3C6/ls1k7bS8tLjZbnXSu2UoXm+38VPHk97T36Pd2tlBtdPJae7GeVdtZWms2OtVaJ53N27V0cenlet4+mbWKlduLWS2fy2vVTt5spO3mUquWTaRpO8vWNMxns0Ynn8u7xUa62MoXqq1rEVFfWsjS2axda+WLnWa5wX5feWOu2VooNvvXfTs92gDwYLh0+cqFMysry+/eWeEvt9J4eO9jbiwMADvgRpb+5HM31724MyEBAAAAAAAAAAAAAAA3ucvr/zYW9t7x6qMxoGpss7VWr0ZsrEpWV1dvo/e9sUWb3b2h2uaBui+Fa9uynZEYNM4PTiEZXvXGiy9eGLb6y1cPnLy1Lrb8nzIaEb1LXd//ZPcvvl9WvXRHuzNy+2v9OSLuoK/VZJM2O3tcAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBB/hsAAP//NAJwuw==") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) syz_pidfd_open(r1, 0x0) 57.289648961s ago: executing program 6 (id=4609): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRESDEC=r0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a0096a9c319422f1e90297e63060a2cc106f3d9690d9251b5830f08252c791e0be4f4afc9b5b094d342dda45a058f71e64a9700"/95, @ANYRES32=r2, @ANYRESOCT=r3, @ANYRESHEX=r3, @ANYRES64=r0], 0x48}}, 0x0) 56.591244076s ago: executing program 6 (id=4614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r0], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0xe01e2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000880)=[{{0xfffffffffffffffc, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)="738cd9d39c2c3735de7337d84c2b2ad3675c81615cce5cc532175d756186b2902555377e1457fb0349a5a957d86a80aa798f71a2f897fdaabf9e05cbbb9207e911c4f6f0b78caa2bff119e5c951ef3e5c5daf5cf31f364a74496d0e54ac00c86dcc900d583a7b8ecefdd88bb6efab220d03b0f2991fbd0e5a395c5e101c7dd37052dfa1efa4263d794fae35d8339f6209870602ab55d42541cdd0bc8ac0054bd7667203a60dc4b42d486d0a7d79169dc05ccf55cce5c45afdf739ffd9e0bde13e070e8d18a3c49573f019a9b953ed906215996c238a51e1b21c8bd", 0xdb}, {&(0x7f0000000380)="06c7c7bd165093350fa9183d24d6443a807a5ddc042b357bc524f8ce1d61198aba8191b5994d8774e23fb0f5df6d7099c3417664ce9e40f70e8b8a6f3c3bef294b62022857b34ed19ee7894a2bd7427d990f499b1a8c4da2e29d30f1e2ed401532cf09ab48db2ef41feda030bf3b4c64578da50830c8de33eb501e526fc9d815e475d93d1182838b19b1f2f860d0", 0x8e}, {&(0x7f00000001c0)="9249196f333ebefc3408af13c7c8b4eaf4be9e73735ea9bec61701", 0x1b}, {&(0x7f00000006c0)="0f219dd9fa85a30f0badaf5d828a7b362972ee289a3dab750ec49c7eb30a65b8530083b33a672829dcd0c0eb97a2d5d8fbe8597c9dfbbd958cea2bbc8bee0bbbfe2079d2b0106138ba0c1ea33cdb215508f391db40a88009bbf61bc948b4c14b3e25bcac851eebc692cd3d62990b58493c3bb855d4e9c9225dca9a59e3a25ef6edf16c77420d3f5892fd05d835851513c8c1951039bb8335d0e23b808712cb555545f693b90357984fa79c112191755bef7e7a9f0f6d28c0256d8342a9f277af7ef3cedff560b11a51ebc9a60f862ed72e40ca1a7edbccf41669c9c3552abbf502e84bd25b9f6d51e0514cc94f6d", 0xee}, {&(0x7f00000005c0)="1740e78098848b3ac146d9b207ec31485f638430416b0b5b547e651ccd02acf6f93361cfea3c30b936acc1fbde1f9a2a0f37c91e696e9fdab509324f985525c5dadd4c", 0x43}, {&(0x7f0000000c80)="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", 0x261}], 0x6, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x80, 0x4041}}], 0x1, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000680), 0x1, 0x400000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) r10 = gettid() sched_getaffinity(r10, 0x8, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 56.572751666s ago: executing program 35 (id=4614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r0], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0xe01e2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000880)=[{{0xfffffffffffffffc, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)="738cd9d39c2c3735de7337d84c2b2ad3675c81615cce5cc532175d756186b2902555377e1457fb0349a5a957d86a80aa798f71a2f897fdaabf9e05cbbb9207e911c4f6f0b78caa2bff119e5c951ef3e5c5daf5cf31f364a74496d0e54ac00c86dcc900d583a7b8ecefdd88bb6efab220d03b0f2991fbd0e5a395c5e101c7dd37052dfa1efa4263d794fae35d8339f6209870602ab55d42541cdd0bc8ac0054bd7667203a60dc4b42d486d0a7d79169dc05ccf55cce5c45afdf739ffd9e0bde13e070e8d18a3c49573f019a9b953ed906215996c238a51e1b21c8bd", 0xdb}, {&(0x7f0000000380)="06c7c7bd165093350fa9183d24d6443a807a5ddc042b357bc524f8ce1d61198aba8191b5994d8774e23fb0f5df6d7099c3417664ce9e40f70e8b8a6f3c3bef294b62022857b34ed19ee7894a2bd7427d990f499b1a8c4da2e29d30f1e2ed401532cf09ab48db2ef41feda030bf3b4c64578da50830c8de33eb501e526fc9d815e475d93d1182838b19b1f2f860d0", 0x8e}, {&(0x7f00000001c0)="9249196f333ebefc3408af13c7c8b4eaf4be9e73735ea9bec61701", 0x1b}, {&(0x7f00000006c0)="0f219dd9fa85a30f0badaf5d828a7b362972ee289a3dab750ec49c7eb30a65b8530083b33a672829dcd0c0eb97a2d5d8fbe8597c9dfbbd958cea2bbc8bee0bbbfe2079d2b0106138ba0c1ea33cdb215508f391db40a88009bbf61bc948b4c14b3e25bcac851eebc692cd3d62990b58493c3bb855d4e9c9225dca9a59e3a25ef6edf16c77420d3f5892fd05d835851513c8c1951039bb8335d0e23b808712cb555545f693b90357984fa79c112191755bef7e7a9f0f6d28c0256d8342a9f277af7ef3cedff560b11a51ebc9a60f862ed72e40ca1a7edbccf41669c9c3552abbf502e84bd25b9f6d51e0514cc94f6d", 0xee}, {&(0x7f00000005c0)="1740e78098848b3ac146d9b207ec31485f638430416b0b5b547e651ccd02acf6f93361cfea3c30b936acc1fbde1f9a2a0f37c91e696e9fdab509324f985525c5dadd4c", 0x43}, {&(0x7f0000000c80)="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", 0x261}], 0x6, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x80, 0x4041}}], 0x1, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000680), 0x1, 0x400000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) r10 = gettid() sched_getaffinity(r10, 0x8, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 41.431425668s ago: executing program 7 (id=4851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xff58a}]}}}]}, 0x44}}, 0x4000000) 41.431111227s ago: executing program 7 (id=4852): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x6, &(0x7f0000000000), &(0x7f0000000280)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) alarm(0x1) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)={0x33}, 0x8) sendmmsg$inet6(r1, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x30d, 0x2, 0x7}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newlink={0x370, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x600}, [@IFLA_MAP={0x24, 0xe, {0x7fffffff, 0x7, 0x9, 0x81, 0x5, 0x7}}, @IFLA_VFINFO_LIST={0x1d0, 0x16, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0xdd1, 0x7e4, 0xfffff801}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7}}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0xe03f245}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0xf4, 0xa8a}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7fffffff, 0x8}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0xbce2}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x200, 0xfffffff7}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x403, 0xd31b}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0xe}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0x5, 0x2f}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffff, 0xfff}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0xa04f}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffc00, 0x4}}]}, {0xa0, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfb4, 0x7ff}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @remote}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x49}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xb, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5}}]}]}, @IFLA_VFINFO_LIST={0x15c, 0x16, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x46a2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x3}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x2a}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x4, 0x562}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2000000, 0x400}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfff, 0x81}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x8000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffff8, 0x8}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x6}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfff, 0x9e5, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffc, 0xff}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0xb45, 0x7, 0x8100}}, {0x14, 0x1, {0x1, 0x397, 0x4, 0x8100}}]}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9eb1, 0x52}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x84f, 0x1000}}, @IFLA_VF_VLAN={0x10, 0x2, {0x14, 0x1a9, 0x7fffffff}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x81, 0x8f2, 0x9, 0x88a8}}]}]}]}]}, 0x370}, 0x1, 0x2, 0x0, 0x24040810}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x942, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f00000001c0)) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000003c0)=@gcm_256={{0x303}, "910ea9243a66a796", "db83a198a2ca82abd2ed1a03efa4ed98c3ed6a636a7a71c91a53e7336d702fb4", "c648dc72", "258f525227295121"}, 0x38) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0xffffff}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 40.503754275s ago: executing program 7 (id=4859): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)='F', 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/251, 0x2}], 0x1}, 0x40000100) 39.442159853s ago: executing program 7 (id=4871): syz_emit_ethernet(0x1e, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006380)={0x28, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') fchdir(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000000280)) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SG_SET_RESERVED_SIZE(r9, 0x2275, &(0x7f0000000200)=0xb) 39.344989234s ago: executing program 7 (id=4873): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x4001}, {0xffffffffffffffff, 0x240e}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x104}], 0x4, 0x9d) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x521002, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/icmp\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x8, 0x423b, 0x200, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r5, &(0x7f0000000280)='./file0\x00', 0x6a1c2, 0xc4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x10, 0x700, 0x5, 0x7, {{0x31, 0x4, 0x0, 0x7, 0xc4, 0x65, 0x0, 0x80, 0x2f, 0x0, @remote, @private=0xa010102, {[@timestamp_prespec={0x44, 0x4c, 0x8c, 0x3, 0x5, [{@private=0xa010101}, {@multicast1, 0x8d1}, {@local, 0x3ff}, {@rand_addr=0x64010100, 0x40}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x7800000}, {@local}, {@private=0xa010102, 0x3}, {@rand_addr=0x64010101, 0x8001}, {@empty, 0x6399}]}, @noop, @lsrr={0x83, 0x7, 0xc0, [@broadcast]}, @ssrr={0x89, 0x23, 0xd, [@loopback, @loopback, @multicast1, @multicast1, @private=0xa010100, @multicast2, @local, @multicast1]}, @timestamp={0x44, 0x14, 0x26, 0x0, 0xf, [0xfffffff9, 0x7ff, 0x8, 0x3]}, @ssrr={0x89, 0x23, 0x84, [@private=0xa010101, @empty, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010102, @multicast1]}, @noop]}}}}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@var={0xb, 0x0, 0x0, 0xe, 0x3, 0x2}, @var={0xd, 0x0, 0x0, 0xe, 0x4}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x1, 0x5}]}, {0x0, [0x0]}}, &(0x7f0000000580)=""/83, 0x4b, 0x53, 0x0, 0x2, 0x0, @void, @value}, 0x28) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x2d, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0x80, 0x1, 0x8, 0x0, 0x3ff}, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @jmp={0x5, 0x0, 0x0, 0x7, 0x8, 0x8, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x10, &(0x7f00000001c0)=""/16, 0x40f00, 0x4, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x6, 0x3, 0xffffffff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000800)=[r8, r9], &(0x7f0000000840)=[{0x3, 0x3, 0x0, 0x7}, {0x0, 0x3, 0xb, 0x9}, {0x0, 0x1, 0x2, 0x9}, {0x0, 0x5, 0x9, 0x6}, {0x5, 0x2, 0xa, 0xa}, {0x1, 0x4, 0x0, 0xb}], 0x10, 0x0, @void, @value}, 0x94) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x2005, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) 38.67938647s ago: executing program 7 (id=4883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) (fail_nth: 8) 38.67929502s ago: executing program 36 (id=4883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) (fail_nth: 8) 24.683542012s ago: executing program 8 (id=5196): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) getdents64(r2, 0x0, 0x0) open_tree(r2, &(0x7f00000000c0)='./file1\x00', 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x400}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) unlink(&(0x7f0000000100)='./file1\x00') connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) 24.641436283s ago: executing program 8 (id=5199): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x891f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2000000000000000}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = getpid() setreuid(0xee00, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_pidfd_open(r2, 0x0) setns(r5, 0x24020000) syz_clone3(&(0x7f00000006c0)={0x192142100, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000700)}, 0x20) semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000002252c6fc007c08997154087c00deffffb4f9d4a8220300000089e648a3608de8479c2cf569bf5a2b472e3bf144fa6e603f520bafee0382bbdf7663e71f5365f0464c4341ae48c19e1a4531577d91f8cce9e0b09edea4ac199cedccdd502854e00d7673ea3a5f14dd0f04fc2de0a7465a1ff5ce9cc726545a837bd1a4fd26b03197e25b54b441935f0c608e5debd49a", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$security_capability(r6, &(0x7f00000001c0), &(0x7f0000000280)=@v1={0x1000000, [{0x0, 0x8000}]}, 0xc, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0x1, 0x1}, 0x20) 24.525429423s ago: executing program 8 (id=5206): r0 = syz_io_uring_setup(0x1114, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x9, 0x2000, @fd_index=0x7, 0xd, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x10, 0x1, {0x2}}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 24.166968366s ago: executing program 8 (id=5215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x31, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000380)=""/66, 0x42) getdents64(r4, 0xfffffffffffffffe, 0x29) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000070000004404a60007036f001c000000000000000000000008000000", @ANYRESOCT], 0x38}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x26, 0x0, 0x8000a, 0x3793, 0x0, @void, @value}, 0x28) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r6, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b, 0x0, 0x0, {0xa}}], {0x14}}, 0xb0}}, 0x0) 23.823444849s ago: executing program 8 (id=5220): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) epoll_create1(0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") move_mount(r2, 0x0, 0xffffffffffffffff, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./bus\x00', 0x8901) bpf$MAP_CREATE(0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) 23.527257711s ago: executing program 8 (id=5226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fchown(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274", @ANYRES32=r4, @ANYRES64=r5], 0x4c}}, 0x2) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000340)) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x400000, 0x20) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) pipe(&(0x7f0000000300)) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f15) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0xc8, 0x0, 0xfffffffffffffffe, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r10 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r10, 0x2402, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) 23.526991421s ago: executing program 37 (id=5226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fchown(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274", @ANYRES32=r4, @ANYRES64=r5], 0x4c}}, 0x2) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000340)) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x400000, 0x20) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) pipe(&(0x7f0000000300)) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f15) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0xc8, 0x0, 0xfffffffffffffffe, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r10 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r10, 0x2402, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) 2.765099038s ago: executing program 5 (id=5604): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x12003) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x5c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 2.715715789s ago: executing program 5 (id=5607): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000040), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="07000000040000001800000042a0000000000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001800"/28], 0x48) 2.686785019s ago: executing program 5 (id=5609): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f00000005c0)={[0x1]}, 0x8, 0x800) 2.632856909s ago: executing program 5 (id=5612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) read$ptp(0xffffffffffffffff, &(0x7f0000000300)=""/105, 0x69) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='xen_mmu_flush_tlb_one_user\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1852f0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x2904, 0x4, 0x804, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 2.151840533s ago: executing program 1 (id=5629): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) 2.135608043s ago: executing program 1 (id=5631): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000100"], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='N'], 0x6a) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000ce79fed26af8390953b55dc75599aa3a3609678919f7d2c0cfa7e44ada45f88153d82bc4543224b4bdd5f74587dc7e1daf2a0700a77b7d00a6fc9e", @ANYRES16=r3, @ANYBLOB="010025bd7000fadbdf2501000000040001800400030004000280"], 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x20040040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100000}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000008400000000000000620000000000010020000000000000008400000008"], 0x38}, 0x0) 1.748344537s ago: executing program 9 (id=5646): set_mempolicy(0x4005, &(0x7f0000000580)=0x7, 0x7) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x3f, 0x3, 0x0, 0x0, 0x0, 0x50006, 0x500, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffff01, 0xa5d7}, 0x408, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000005, 0x13, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000000040)='wi', 0x2}], 0x1, 0x1) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r7) unshare(0x22020600) r8 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r8, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) unshare(0x2c020400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='percpu_alloc_percpu_fail\x00', r3, 0x0, 0x80000000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 1.542769478s ago: executing program 1 (id=5652): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f10d, 0xfffb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x3d, 0x0, 0x2}, {0x5}, {0x6, 0x0, 0x0, 0x400}]}) 1.524373688s ago: executing program 9 (id=5654): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202d437b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r4}, 0x18) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 1.478002768s ago: executing program 9 (id=5656): socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5038, 0x0, @perf_config_ext={0x2, 0x800000000007}, 0x0, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x16c2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x90a2, 0x2, &(0x7f0000006680)) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x1114, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x9, 0x2000, @fd_index=0x7, 0xd, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x10, 0x1, {0x2}}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) 1.473733938s ago: executing program 1 (id=5658): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x100, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0xfffffffffdfffffc}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.31420019s ago: executing program 2 (id=5661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000100"], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='N'], 0x6a) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000ce79fed26af8390953b55dc75599aa3a3609678919f7d2c0cfa7e44ada45f88153d82bc4543224b4bdd5f74587dc7e1daf2a0700a77b7d00a6fc9e", @ANYRES16=r3, @ANYBLOB="010025bd7000fadbdf2501000000040001800400030004000280"], 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x20040040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100000}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000008400000000000000620000000000010020000000000000008400000008"], 0x38}, 0x0) 1.28557972s ago: executing program 9 (id=5662): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 1.256353s ago: executing program 9 (id=5663): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffdfffffc}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 759.549194ms ago: executing program 2 (id=5673): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xf0b, 0x8070bd2e, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 669.282325ms ago: executing program 2 (id=5674): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000001c0)={[{@data_err_abort}, {@nomblk_io_submit}]}, 0x1, 0x553, &(0x7f0000001080)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = open(&(0x7f0000000200)='./file1\x00', 0x14927e, 0x91) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000004c0)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="08a503576a7f"}, 0x6, {0x2, 0x0, @loopback}, 'syz_tun\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000600)={0x5, {{0x2, 0x4e21, @multicast2}}}, 0x88) fallocate(r1, 0x11, 0x0, 0x8800000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x11a) pwritev2(r6, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) 646.464815ms ago: executing program 3 (id=5675): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) 636.969335ms ago: executing program 2 (id=5676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) 582.419316ms ago: executing program 3 (id=5677): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f10d, 0xfffb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x3d, 0x0, 0x2}, {0x2}, {0x6, 0x0, 0x0, 0x400}]}) 566.542546ms ago: executing program 2 (id=5678): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) 545.770336ms ago: executing program 2 (id=5679): set_mempolicy(0x4005, &(0x7f0000000580)=0x7, 0x7) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x3f, 0x3, 0x0, 0x0, 0x0, 0x50006, 0x500, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffff01, 0xa5d7}, 0x408, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000005, 0x13, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000000040)='wi', 0x2}], 0x1, 0x1) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r7) unshare(0x22020600) r8 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r8, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) unshare(0x2c020400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='percpu_alloc_percpu_fail\x00', r3, 0x0, 0x80000000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 203.612728ms ago: executing program 1 (id=5680): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r2 = socket(0x18, 0x3, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x1, @broadcast, 'vxcan1\x00'}}, 0x1e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendfile(r2, r1, 0x0, 0x1) 174.172209ms ago: executing program 5 (id=5617): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x5c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 155.883469ms ago: executing program 1 (id=5681): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) memfd_create(&(0x7f0000001440)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x51) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl(r1, 0x8, &(0x7f0000000740)="efc70acf912e652063813bdd3e934ada085497909efc13b049ad36baf72d0ac162e3f1e69c90ea753c2601f02a88817d7414d88f69d06c49d44d1392a3612731c37f6f6974444e2e35a7568abeafff83590393ff2263326e182fb1ddfbca3cbf5b06f92f18261d829ec3965722ae4a76528ced1cee59760fa6d6577cd7a797d6ead3d7c8978b10be9f9fb0bf9f292a86cd514cd44c4eff4bfb2570ec17ac7bb834358aa3687ac49fd2ebd474ab0026ecc1766e11dbc10cc4795b5e834997b9630fca221ecb2f9fc6ab22d17c44b474af0a6c7e4988a682ab0a978cd9f853c9b96679bc7c") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f0000000880)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0x8}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x2000c004) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 151.817639ms ago: executing program 5 (id=5682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000100"], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='N'], 0x6a) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000ce79fed26af8390953b55dc75599aa3a3609678919f7d2c0cfa7e44ada45f88153d82bc4543224b4bdd5f74587dc7e1daf2a0700a77b7d00a6fc9e", @ANYRES16=r3, @ANYBLOB="010025bd7000fadbdf2501000000040001800400030004000280"], 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x20040040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100000}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000008400000000000000620000000000010020000000000000008400000008"], 0x38}, 0x0) 151.565559ms ago: executing program 3 (id=5683): r0 = open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timerfd_settime(r0, 0x2, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000180)) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 130.767159ms ago: executing program 3 (id=5684): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r4}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 80.183389ms ago: executing program 9 (id=5685): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000001c0)={[{@data_err_abort}, {@nomblk_io_submit}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = open(&(0x7f0000000200)='./file1\x00', 0x14927e, 0x91) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000004c0)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="08a503576a7f"}, 0x6, {0x2, 0x0, @loopback}, 'syz_tun\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000600)={0x5, {{0x2, 0x4e21, @multicast2}}}, 0x88) fallocate(r1, 0x11, 0x0, 0x8800000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x11a) pwritev2(r6, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) 20.29337ms ago: executing program 3 (id=5686): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) 0s ago: executing program 3 (id=5687): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) read$ptp(0xffffffffffffffff, &(0x7f0000000300)=""/105, 0x69) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1852f0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x2904, 0x4, 0x804, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): rphan inode deleted [ 308.390504][T17611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.402684][T17611] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 308.410931][T17611] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.926805][T17623] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 309.050197][T17628] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 309.050197][T17628] Ue[%#s' [ 309.644201][T17640] lo speed is unknown, defaulting to 1000 [ 310.050752][T17643] cgroup: none used incorrectly [ 310.156882][T17651] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 310.186928][T17653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4865'. [ 310.196187][T17653] bridge_slave_1: left allmulticast mode [ 310.201854][T17653] bridge_slave_1: left promiscuous mode [ 310.207622][T17653] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.215700][T17653] bridge_slave_0: left allmulticast mode [ 310.221451][T17653] bridge_slave_0: left promiscuous mode [ 310.227260][T17653] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.392747][T17666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4870'. [ 310.484921][T17669] loop7: detected capacity change from 0 to 4096 [ 310.505750][T17669] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.521886][T17669] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 310.537760][T17669] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 310.572303][T15986] EXT4-fs error (device loop7): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /72/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 310.594796][T15986] EXT4-fs error (device loop7): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 310.614631][T15986] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 310.626523][T15986] EXT4-fs error (device loop7): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /72/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 310.648211][T15986] EXT4-fs error (device loop7): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 310.667966][T15986] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 310.679648][T15986] EXT4-fs error (device loop7): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /72/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 310.701537][T15986] EXT4-fs error (device loop7): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 310.724188][T15986] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 310.724318][T15986] EXT4-fs error (device loop7): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /72/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 310.724596][T15986] EXT4-fs error (device loop7): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 310.724794][T15986] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 310.724931][T15986] EXT4-fs error (device loop7): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /72/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 310.725116][T15986] EXT4-fs error (device loop7): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 310.725245][T15986] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 310.730579][T15986] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 310.730980][T15986] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 310.731542][T15986] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 310.732046][T15986] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 310.732404][T15986] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 310.803215][T16846] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.860299][T17684] loop8: detected capacity change from 0 to 1024 [ 310.860569][T17684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 310.917518][T17684] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.025324][T17684] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4115: comm syz.8.4877: Allocating blocks 385-513 which overlap fs metadata [ 311.044289][T17684] EXT4-fs (loop8): pa ffff888106965d90: logic 16, phys. 129, len 24 [ 311.054227][T17684] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 311.065320][T17684] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 311.078346][T17684] EXT4-fs (loop8): This should not happen!! Data will be lost [ 311.078346][T17684] [ 311.088927][T17684] EXT4-fs (loop8): Total free blocks count 0 [ 311.095342][T17684] EXT4-fs (loop8): Free/Dirty block details [ 311.101824][T17684] EXT4-fs (loop8): free_blocks=128 [ 311.107338][T17684] EXT4-fs (loop8): dirty_blocks=0 [ 311.112848][T17684] EXT4-fs (loop8): Block reservation details [ 311.116660][T17696] lo speed is unknown, defaulting to 1000 [ 311.119003][T17684] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 311.351044][T17707] bond1: entered promiscuous mode [ 311.357074][T17707] bond1: entered allmulticast mode [ 311.365275][T17707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.404918][T17707] bond1 (unregistering): Released all slaves [ 311.446426][T17714] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4887'. [ 311.496521][T17703] lo speed is unknown, defaulting to 1000 [ 311.635744][T17703] chnl_net:caif_netlink_parms(): no params data found [ 311.688698][T17703] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.695863][T17703] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.709085][T17703] bridge_slave_0: entered allmulticast mode [ 311.716782][T17703] bridge_slave_0: entered promiscuous mode [ 311.736777][T17703] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.743926][T17703] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.753716][T17703] bridge_slave_1: entered allmulticast mode [ 311.760459][T17703] bridge_slave_1: entered promiscuous mode [ 311.779782][T17703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.793042][T17703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.817854][T17758] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4900'. [ 311.829465][T17703] team0: Port device team_slave_0 added [ 311.838921][T17703] team0: Port device team_slave_1 added [ 311.862485][T17760] netlink: 'syz.3.4903': attribute type 21 has an invalid length. [ 311.870921][T17760] netlink: 'syz.3.4903': attribute type 6 has an invalid length. [ 311.878733][T17760] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4903'. [ 311.888702][T17703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.895761][T17703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.922061][T17703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.934293][T17703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.941383][T17703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.967388][T17703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.999235][T17703] hsr_slave_0: entered promiscuous mode [ 312.010103][T17703] hsr_slave_1: entered promiscuous mode [ 312.021843][T17703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.035836][T17703] Cannot create hsr debugfs directory [ 312.079229][T17775] loop8: detected capacity change from 0 to 128 [ 312.087261][ T30] kauditd_printk_skb: 756 callbacks suppressed [ 312.087277][ T30] audit: type=1400 audit(1742093316.297:22931): avc: denied { mount } for pid=17773 comm="syz.8.4908" name="/" dev="loop8" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 312.153631][T17703] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 312.162874][T17703] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 312.168234][T17775] syz.8.4908: attempt to access beyond end of device [ 312.168234][T17775] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 312.173056][ T30] audit: type=1326 audit(1742093316.381:22932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17778 comm="syz.3.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 312.197220][T17773] syz.8.4908: attempt to access beyond end of device [ 312.197220][T17773] loop8: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 312.206691][ T30] audit: type=1326 audit(1742093316.381:22933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17778 comm="syz.3.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 312.208858][T17703] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 312.245393][T17775] syz.8.4908: attempt to access beyond end of device [ 312.245393][T17775] loop8: rw=524288, sector=897, nr_sectors = 144 limit=128 [ 312.261545][ T30] audit: type=1326 audit(1742093316.438:22934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17778 comm="syz.3.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 312.288283][ T30] audit: type=1326 audit(1742093316.438:22935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17778 comm="syz.3.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 312.311922][ T30] audit: type=1326 audit(1742093316.438:22936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17778 comm="syz.3.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 312.312004][T17775] syz.8.4908: attempt to access beyond end of device [ 312.312004][T17775] loop8: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 312.335626][ T30] audit: type=1326 audit(1742093316.438:22937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17778 comm="syz.3.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 312.372478][ T30] audit: type=1326 audit(1742093316.438:22938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17778 comm="syz.3.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 312.396324][ T30] audit: type=1326 audit(1742093316.438:22939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17778 comm="syz.3.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 312.398935][T17775] syz.8.4908: attempt to access beyond end of device [ 312.398935][T17775] loop8: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 312.419919][ T30] audit: type=1326 audit(1742093316.438:22940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17778 comm="syz.3.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 312.459784][T17703] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 312.460019][T17775] syz.8.4908: attempt to access beyond end of device [ 312.460019][T17775] loop8: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 312.480303][T17775] syz.8.4908: attempt to access beyond end of device [ 312.480303][T17775] loop8: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 312.490179][T17703] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.500637][T17703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.507983][T17703] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.515136][T17703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.541682][T17775] syz.8.4908: attempt to access beyond end of device [ 312.541682][T17775] loop8: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 312.554585][T17703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.568386][T17775] syz.8.4908: attempt to access beyond end of device [ 312.568386][T17775] loop8: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 312.585738][T17703] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.600519][T17775] syz.8.4908: attempt to access beyond end of device [ 312.600519][T17775] loop8: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 313.188248][T17703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.389146][T17827] lo speed is unknown, defaulting to 1000 [ 313.622122][T17703] veth0_vlan: entered promiscuous mode [ 313.630244][T17703] veth1_vlan: entered promiscuous mode [ 313.657438][T17703] veth0_macvtap: entered promiscuous mode [ 313.671566][T17703] veth1_macvtap: entered promiscuous mode [ 313.705977][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.716551][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.726451][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.736896][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.746798][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.757291][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.767283][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.777767][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.787638][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.798080][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.807931][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.818380][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.828295][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.838733][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.857645][T17703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.875042][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.885581][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.895603][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.906080][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.915959][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.926420][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.936261][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.947017][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.956920][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.967452][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.977436][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.987979][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.997832][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.008343][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.019337][T17703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.028226][T17703] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.037052][T17703] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.037903][T17847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4931'. [ 314.045766][T17703] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.054664][T17847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4931'. [ 314.063350][T17703] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.163092][T17855] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 314.169647][T17855] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 314.177203][T17855] vhci_hcd vhci_hcd.0: Device attached [ 314.183781][T17857] vhci_hcd: connection closed [ 314.183994][ T2153] vhci_hcd: stop threads [ 314.193250][ T2153] vhci_hcd: release socket [ 314.197785][ T2153] vhci_hcd: disconnect device [ 314.666961][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4940'. [ 314.692685][T17879] serio: Serial port ptm0 [ 314.709527][T17877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4940'. [ 314.732032][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4940'. [ 314.947427][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4955'. [ 314.956470][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4955'. [ 315.050027][T17914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4957'. [ 315.058993][T17914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4957'. [ 315.222022][T17916] loop8: detected capacity change from 0 to 2048 [ 315.259067][T17916] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.330389][T17916] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 315.385617][T17916] bridge0: port 3(batadv1) entered blocking state [ 315.393528][T17916] bridge0: port 3(batadv1) entered disabled state [ 315.401238][T17916] batadv1: entered allmulticast mode [ 315.410330][T17916] batadv1: entered promiscuous mode [ 315.511027][T16846] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.630640][T17967] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.668004][T17967] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.721224][T17967] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.764946][T17967] netdevsim netdevsim8 netdevsim0 (unregistering): left promiscuous mode [ 315.773903][T17967] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.832958][T17967] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.844753][T17967] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.856787][T17967] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.868524][T17967] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.911366][ T412] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 315.920678][ T412] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 315.953917][T17983] FAULT_INJECTION: forcing a failure. [ 315.953917][T17983] name failslab, interval 1, probability 0, space 0, times 0 [ 315.966599][T17983] CPU: 0 UID: 0 PID: 17983 Comm: syz.5.4986 Tainted: G W 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 315.966684][T17983] Tainted: [W]=WARN [ 315.966741][T17983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.966752][T17983] Call Trace: [ 315.966758][T17983] [ 315.966765][T17983] dump_stack_lvl+0xf2/0x150 [ 315.966871][T17983] dump_stack+0x15/0x1a [ 315.966889][T17983] should_fail_ex+0x24a/0x260 [ 315.966916][T17983] should_failslab+0x8f/0xb0 [ 315.966988][T17983] kmem_cache_alloc_noprof+0x52/0x320 [ 315.967008][T17983] ? getname_flags+0x81/0x3b0 [ 315.967041][T17983] getname_flags+0x81/0x3b0 [ 315.967115][T17983] getname+0x17/0x20 [ 315.967129][T17983] do_sys_openat2+0x67/0x120 [ 315.967147][T17983] __x64_sys_open+0xe6/0x110 [ 315.967165][T17983] x64_sys_call+0x13e1/0x2dc0 [ 315.967187][T17983] do_syscall_64+0xc9/0x1c0 [ 315.967241][T17983] ? clear_bhb_loop+0x55/0xb0 [ 315.967321][T17983] ? clear_bhb_loop+0x55/0xb0 [ 315.967345][T17983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.967380][T17983] RIP: 0033:0x7fd9d721d169 [ 315.967408][T17983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.967424][T17983] RSP: 002b:00007fd9d5881038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 315.967441][T17983] RAX: ffffffffffffffda RBX: 00007fd9d7435fa0 RCX: 00007fd9d721d169 [ 315.967452][T17983] RDX: 0000000000000000 RSI: 0000000000145142 RDI: 0000400000000040 [ 315.967515][T17983] RBP: 00007fd9d5881090 R08: 0000000000000000 R09: 0000000000000000 [ 315.967525][T17983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.967585][T17983] R13: 0000000000000000 R14: 00007fd9d7435fa0 R15: 00007ffc793bd918 [ 315.967602][T17983] [ 316.306814][T17998] loop9: detected capacity change from 0 to 128 [ 316.318415][T17998] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 316.328795][T17998] FAT-fs (loop9): Filesystem has been set read-only [ 316.335770][T17998] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 316.371447][T18001] loop9: detected capacity change from 0 to 128 [ 316.384128][T18001] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 316.394494][T18001] FAT-fs (loop9): Filesystem has been set read-only [ 316.401579][T18001] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 316.473288][T18011] loop9: detected capacity change from 0 to 512 [ 316.480198][T18011] journal_path: Non-blockdev passed as './bus' [ 316.486525][T18011] EXT4-fs: error: could not find journal device path [ 316.526130][T18017] lo speed is unknown, defaulting to 1000 [ 316.669390][T18023] lo speed is unknown, defaulting to 1000 [ 317.207380][T18032] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 317.213921][T18032] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 317.221540][T18032] vhci_hcd vhci_hcd.0: Device attached [ 317.227651][T18033] vhci_hcd: connection closed [ 317.227821][ T2153] vhci_hcd: stop threads [ 317.237116][ T2153] vhci_hcd: release socket [ 317.241639][ T2153] vhci_hcd: disconnect device [ 317.376661][T18040] loop8: detected capacity change from 0 to 128 [ 317.458780][T18049] loop8: detected capacity change from 0 to 8192 [ 317.469230][T18049] vfat: Unknown parameter '1844674407370955161501777777777777777777777' [ 317.489323][ T30] kauditd_printk_skb: 849 callbacks suppressed [ 317.489341][ T30] audit: type=1400 audit(1742093321.378:23788): avc: denied { cpu } for pid=18041 comm="syz.9.5009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 317.524007][T18058] syzkaller0: entered allmulticast mode [ 317.531002][T18058] syzkaller0 (unregistering): left allmulticast mode [ 317.541384][ T30] audit: type=1400 audit(1742093321.425:23789): avc: denied { setattr } for pid=18041 comm="syz.9.5009" name="/" dev="configfs" ino=2037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 317.584540][ T30] audit: type=1400 audit(1742093321.472:23790): avc: denied { write } for pid=18057 comm="syz.2.5015" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 317.584761][T18060] usb usb8: usbfs: process 18060 (syz.2.5015) did not claim interface 0 before use [ 317.619840][ T30] audit: type=1400 audit(1742093321.500:23791): avc: denied { create } for pid=18057 comm="syz.2.5015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 317.640833][ T30] audit: type=1400 audit(1742093321.500:23792): avc: denied { write } for pid=18057 comm="syz.2.5015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 317.676325][ T30] audit: type=1326 audit(1742093321.547:23793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18061 comm="syz.2.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e74f7d169 code=0x7ffc0000 [ 317.700625][ T30] audit: type=1326 audit(1742093321.547:23794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18061 comm="syz.2.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e74f7d169 code=0x7ffc0000 [ 317.724327][ T30] audit: type=1326 audit(1742093321.547:23795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18061 comm="syz.2.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f6e74f7d169 code=0x7ffc0000 [ 317.747963][ T30] audit: type=1326 audit(1742093321.547:23796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18061 comm="syz.2.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e74f7d169 code=0x7ffc0000 [ 317.772177][ T30] audit: type=1326 audit(1742093321.547:23797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18061 comm="syz.2.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e74f7d169 code=0x7ffc0000 [ 317.850309][T18075] loop8: detected capacity change from 0 to 128 [ 317.900113][T18083] netlink: 'syz.2.5026': attribute type 10 has an invalid length. [ 318.108582][T18088] syzkaller0: entered allmulticast mode [ 318.118300][T18088] syzkaller0 (unregistering): left allmulticast mode [ 318.496670][T18115] syzkaller0: entered allmulticast mode [ 318.506444][T18115] syzkaller0 (unregistering): left allmulticast mode [ 318.558234][T18119] usb usb8: usbfs: process 18119 (syz.9.5038) did not claim interface 0 before use [ 318.628109][T18123] loop9: detected capacity change from 0 to 128 [ 318.967710][T18144] loop8: detected capacity change from 0 to 128 [ 318.980301][T18144] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 318.990495][T18144] FAT-fs (loop8): Filesystem has been set read-only [ 319.003112][T18144] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 319.096271][T18152] syzkaller0: entered allmulticast mode [ 319.115685][T18152] syzkaller0 (unregistering): left allmulticast mode [ 319.171634][T18160] usb usb8: usbfs: process 18160 (syz.8.5051) did not claim interface 0 before use [ 319.194498][T18161] 9pnet: Could not find request transport: f [ 319.237267][T18161] FAULT_INJECTION: forcing a failure. [ 319.237267][T18161] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 319.250706][T18161] CPU: 0 UID: 0 PID: 18161 Comm: syz.5.5056 Tainted: G W 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 319.250787][T18161] Tainted: [W]=WARN [ 319.250795][T18161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 319.250854][T18161] Call Trace: [ 319.250887][T18161] [ 319.250895][T18161] dump_stack_lvl+0xf2/0x150 [ 319.250968][T18161] dump_stack+0x15/0x1a [ 319.250996][T18161] should_fail_ex+0x24a/0x260 [ 319.251034][T18161] should_fail_alloc_page+0xfd/0x110 [ 319.251067][T18161] __alloc_frozen_pages_noprof+0x109/0x340 [ 319.251126][T18161] alloc_pages_mpol+0xb4/0x260 [ 319.251157][T18161] alloc_pages_noprof+0xe8/0x130 [ 319.251182][T18161] pte_alloc_one+0x31/0x110 [ 319.251207][T18161] ? __rcu_read_unlock+0x4e/0x70 [ 319.251252][T18161] handle_mm_fault+0x10ce/0x2ac0 [ 319.251271][T18161] ? __rcu_read_lock+0x36/0x50 [ 319.251293][T18161] ? __pte_offset_map_lock+0x1ce/0x280 [ 319.251328][T18161] __get_user_pages+0xf6a/0x2350 [ 319.251366][T18161] __mm_populate+0x25b/0x3b0 [ 319.251459][T18161] __se_sys_mlockall+0x36d/0x3d0 [ 319.251489][T18161] __x64_sys_mlockall+0x1f/0x30 [ 319.251566][T18161] x64_sys_call+0x2bf8/0x2dc0 [ 319.251592][T18161] do_syscall_64+0xc9/0x1c0 [ 319.251627][T18161] ? clear_bhb_loop+0x55/0xb0 [ 319.251716][T18161] ? clear_bhb_loop+0x55/0xb0 [ 319.251746][T18161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.251816][T18161] RIP: 0033:0x7fd9d721d169 [ 319.251834][T18161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.251879][T18161] RSP: 002b:00007fd9d5881038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 319.251899][T18161] RAX: ffffffffffffffda RBX: 00007fd9d7435fa0 RCX: 00007fd9d721d169 [ 319.251914][T18161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 319.251988][T18161] RBP: 00007fd9d5881090 R08: 0000000000000000 R09: 0000000000000000 [ 319.252000][T18161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.252012][T18161] R13: 0000000000000000 R14: 00007fd9d7435fa0 R15: 00007ffc793bd918 [ 319.252032][T18161] [ 319.465604][T18165] __nla_validate_parse: 9 callbacks suppressed [ 319.465623][T18165] netlink: 196 bytes leftover after parsing attributes in process `syz.8.5057'. [ 319.699013][T18170] program syz.9.5058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.830117][T18173] program syz.9.5059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.847569][T18175] syzkaller0: entered allmulticast mode [ 319.855071][T18175] syzkaller0 (unregistering): left allmulticast mode [ 319.907976][T18179] usb usb8: usbfs: process 18179 (syz.2.5060) did not claim interface 0 before use [ 319.923143][T18173] lo speed is unknown, defaulting to 1000 [ 320.040285][T18192] syzkaller0: entered allmulticast mode [ 320.061890][T18192] syzkaller0 (unregistering): left allmulticast mode [ 320.103918][T18201] usb usb8: usbfs: process 18201 (syz.5.5067) did not claim interface 0 before use [ 320.193445][T18204] netlink: 'syz.5.5072': attribute type 1 has an invalid length. [ 320.208407][T18204] 9pnet: Could not find request transport: f [ 320.363492][T18214] loop8: detected capacity change from 0 to 512 [ 320.399690][T18214] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 320.422786][T18214] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 320.452477][T18214] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.5075: corrupted in-inode xattr: e_value size too large [ 320.471604][T18214] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.5075: couldn't read orphan inode 15 (err -117) [ 320.484066][T18214] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.541754][T18214] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 320.571344][T18219] loop9: detected capacity change from 0 to 128 [ 320.578870][T16846] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.608207][T18222] loop8: detected capacity change from 0 to 1024 [ 320.622390][T18222] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.636347][T18224] loop9: detected capacity change from 0 to 1024 [ 320.645361][T18224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.656404][T18222] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.670971][T18224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.701497][T18222] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4115: comm syz.8.5077: Allocating blocks 385-513 which overlap fs metadata [ 320.722009][T18222] EXT4-fs (loop8): pa ffff888106965d20: logic 16, phys. 129, len 24 [ 320.731248][T18222] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 320.734005][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5079'. [ 320.751105][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5079'. [ 320.763230][T18222] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 320.768643][T18224] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4115: comm syz.9.5078: Allocating blocks 385-513 which overlap fs metadata [ 320.775926][T18222] EXT4-fs (loop8): This should not happen!! Data will be lost [ 320.775926][T18222] [ 320.776023][T18222] EXT4-fs (loop8): Total free blocks count 0 [ 320.804283][T18224] EXT4-fs (loop9): pa ffff888106965d20: logic 16, phys. 129, len 24 [ 320.809168][T18222] EXT4-fs (loop8): Free/Dirty block details [ 320.809225][T18222] EXT4-fs (loop8): free_blocks=128 [ 320.809296][T18222] EXT4-fs (loop8): dirty_blocks=0 [ 320.809372][T18222] EXT4-fs (loop8): Block reservation details [ 320.809423][T18222] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 320.849473][T18224] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 320.864067][T18224] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 320.877086][T18224] EXT4-fs (loop9): This should not happen!! Data will be lost [ 320.877086][T18224] [ 320.887506][T18224] EXT4-fs (loop9): Total free blocks count 0 [ 320.894078][T18224] EXT4-fs (loop9): Free/Dirty block details [ 320.895123][T18235] SELinux: Context is not valid (left unmapped). [ 320.900420][T18224] EXT4-fs (loop9): free_blocks=128 [ 320.912830][T18224] EXT4-fs (loop9): dirty_blocks=0 [ 320.918592][T18224] EXT4-fs (loop9): Block reservation details [ 320.924956][T18224] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 320.964248][T18238] loop8: detected capacity change from 0 to 512 [ 320.971151][T18238] EXT4-fs: Ignoring removed orlov option [ 320.998914][T18245] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 321.017892][T18238] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.032678][T18238] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.051084][T18250] netlink: 196 bytes leftover after parsing attributes in process `syz.5.5084'. [ 321.133735][T18251] lo speed is unknown, defaulting to 1000 [ 321.141195][T18253] ALSA: seq fatal error: cannot create timer (-19) [ 321.201906][T18258] loop9: detected capacity change from 0 to 128 [ 321.238705][T18261] loop9: detected capacity change from 0 to 128 [ 321.412667][T18271] loop9: detected capacity change from 0 to 1024 [ 321.421572][T18271] EXT4-fs: Ignoring removed nomblk_io_submit option [ 321.437358][T18273] netlink: 'syz.2.5093': attribute type 10 has an invalid length. [ 321.447591][T18271] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.487239][T18271] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4115: comm syz.9.5092: Allocating blocks 385-513 which overlap fs metadata [ 321.515610][T18271] EXT4-fs (loop9): pa ffff8881069c40e0: logic 16, phys. 129, len 24 [ 321.525220][T18271] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 321.541698][T18271] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 321.555033][T18271] EXT4-fs (loop9): This should not happen!! Data will be lost [ 321.555033][T18271] [ 321.565209][T18271] EXT4-fs (loop9): Total free blocks count 0 [ 321.572199][T18271] EXT4-fs (loop9): Free/Dirty block details [ 321.579222][T18271] EXT4-fs (loop9): free_blocks=128 [ 321.585488][T18271] EXT4-fs (loop9): dirty_blocks=0 [ 321.592114][T18271] EXT4-fs (loop9): Block reservation details [ 321.598688][T18271] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 321.640284][T18278] lo speed is unknown, defaulting to 1000 [ 321.671682][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5095'. [ 321.680831][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5095'. [ 321.735073][T18286] syzkaller0: entered allmulticast mode [ 321.757866][T18286] syzkaller0 (unregistering): left allmulticast mode [ 321.862043][T16846] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.891207][T18288] usb usb8: usbfs: process 18288 (syz.9.5098) did not claim interface 0 before use [ 321.911055][T18294] loop8: detected capacity change from 0 to 128 [ 321.989926][T18298] pim6reg: entered allmulticast mode [ 322.015240][T18301] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 322.026546][T18298] pim6reg: left allmulticast mode [ 322.172672][T18315] syzkaller0: entered allmulticast mode [ 322.187933][T18315] syzkaller0 (unregistering): left allmulticast mode [ 322.218157][T18319] loop8: detected capacity change from 0 to 128 [ 322.224806][T18321] loop9: detected capacity change from 0 to 128 [ 322.240204][T18322] usb usb8: usbfs: process 18322 (syz.5.5110) did not claim interface 0 before use [ 322.496218][T18352] random: crng reseeded on system resumption [ 322.613485][T18358] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.5125'. [ 323.147679][ T30] kauditd_printk_skb: 1054 callbacks suppressed [ 323.147700][ T30] audit: type=1326 audit(1742093326.691:24852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.3.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 323.179291][ T30] audit: type=1326 audit(1742093326.719:24853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.3.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 323.203058][ T30] audit: type=1326 audit(1742093326.719:24854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.3.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 323.226741][ T30] audit: type=1326 audit(1742093326.719:24855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.3.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 323.251444][ T30] audit: type=1326 audit(1742093326.794:24856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.3.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 323.275803][ T30] audit: type=1326 audit(1742093326.794:24857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.3.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 323.299514][ T30] audit: type=1326 audit(1742093326.794:24858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.3.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 323.323156][ T30] audit: type=1326 audit(1742093326.794:24859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.3.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 323.346847][ T30] audit: type=1326 audit(1742093326.794:24860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.3.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 323.370462][ T30] audit: type=1326 audit(1742093326.803:24861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.3.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 323.488407][T18391] loop9: detected capacity change from 0 to 128 [ 323.571125][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5143'. [ 323.580075][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5143'. [ 323.680209][T18408] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 323.764943][T18412] netlink: 196 bytes leftover after parsing attributes in process `syz.9.5146'. [ 323.803819][T18414] bond1: entered promiscuous mode [ 323.808997][T18414] bond1: entered allmulticast mode [ 323.820735][T18414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 323.870387][T18414] bond1 (unregistering): Released all slaves [ 323.992595][T18399] Set syz1 is full, maxelem 65536 reached [ 324.104876][T18429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.123028][T18427] lo speed is unknown, defaulting to 1000 [ 324.166741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.175051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.328598][T18442] loop8: detected capacity change from 0 to 1024 [ 324.335431][T18442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 324.350710][T18442] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.380575][T18449] batadv1: left allmulticast mode [ 324.385665][T18449] batadv1: left promiscuous mode [ 324.387992][T18442] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4115: comm syz.8.5159: Allocating blocks 385-513 which overlap fs metadata [ 324.390812][T18449] bridge0: port 3(batadv1) entered disabled state [ 324.414305][T18449] bridge_slave_1: left allmulticast mode [ 324.420011][T18442] EXT4-fs (loop8): pa ffff8881069c4150: logic 16, phys. 129, len 24 [ 324.428096][T18449] bridge_slave_1: left promiscuous mode [ 324.428266][T18449] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.442693][T18442] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 324.455589][T18449] bridge_slave_0: left allmulticast mode [ 324.461295][T18449] bridge_slave_0: left promiscuous mode [ 324.467002][T18442] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 324.467202][T18449] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.479849][T18442] EXT4-fs (loop8): This should not happen!! Data will be lost [ 324.479849][T18442] [ 324.496677][T18442] EXT4-fs (loop8): Total free blocks count 0 [ 324.504676][T18442] EXT4-fs (loop8): Free/Dirty block details [ 324.511340][T18442] EXT4-fs (loop8): free_blocks=128 [ 324.516787][T18442] EXT4-fs (loop8): dirty_blocks=0 [ 324.522234][T18442] EXT4-fs (loop8): Block reservation details [ 324.530192][T18442] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 324.621633][T18462] tipc: Started in network mode [ 324.626606][T18462] tipc: Node identity , cluster identity 4711 [ 324.632762][T18462] tipc: Failed to obtain node identity [ 324.638314][T18462] tipc: Enabling of bearer rejected, failed to enable media [ 324.701502][T18472] loop9: detected capacity change from 0 to 512 [ 324.725258][T18475] loop8: detected capacity change from 0 to 1024 [ 324.738682][T18475] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 324.748536][T18475] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 324.768497][T18475] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 324.785636][T18483] loop9: detected capacity change from 0 to 1024 [ 324.793003][T18483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 324.799744][T18475] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #5: comm syz.8.5164: unexpected bad inode w/o EXT4_IGET_BAD [ 324.813325][T18475] EXT4-fs (loop8): no journal found [ 324.818673][T18475] EXT4-fs (loop8): can't get journal size [ 324.845036][T18475] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 324.870598][T18483] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.926840][T18462] EXT4-fs (loop8): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 324.951364][T18483] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4115: comm syz.9.5174: Allocating blocks 385-513 which overlap fs metadata [ 324.992969][T18511] EXT4-fs (loop9): pa ffff8881069c4070: logic 16, phys. 129, len 24 [ 325.001092][T18511] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 325.018727][T18511] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 325.031217][T18511] EXT4-fs (loop9): This should not happen!! Data will be lost [ 325.031217][T18511] [ 325.041119][T18511] EXT4-fs (loop9): Total free blocks count 0 [ 325.047162][T18511] EXT4-fs (loop9): Free/Dirty block details [ 325.053641][T18511] EXT4-fs (loop9): free_blocks=128 [ 325.058957][T18511] EXT4-fs (loop9): dirty_blocks=0 [ 325.064134][T18511] EXT4-fs (loop9): Block reservation details [ 325.070381][T18511] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 325.076746][T16846] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.314519][T18547] tipc: Started in network mode [ 325.319558][T18547] tipc: Node identity , cluster identity 4711 [ 325.325644][T18547] tipc: Failed to obtain node identity [ 325.331151][T18547] tipc: Enabling of bearer rejected, failed to enable media [ 325.355104][T18551] __nla_validate_parse: 4 callbacks suppressed [ 325.355119][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5201'. [ 325.370385][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5201'. [ 325.402518][T18558] FAULT_INJECTION: forcing a failure. [ 325.402518][T18558] name failslab, interval 1, probability 0, space 0, times 0 [ 325.415221][T18558] CPU: 1 UID: 0 PID: 18558 Comm: syz.9.5207 Tainted: G W 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 325.415258][T18558] Tainted: [W]=WARN [ 325.415266][T18558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 325.415280][T18558] Call Trace: [ 325.415288][T18558] [ 325.415302][T18558] dump_stack_lvl+0xf2/0x150 [ 325.415342][T18558] dump_stack+0x15/0x1a [ 325.415366][T18558] should_fail_ex+0x24a/0x260 [ 325.415400][T18558] should_failslab+0x8f/0xb0 [ 325.415463][T18558] kmem_cache_alloc_noprof+0x52/0x320 [ 325.415487][T18558] ? getname_flags+0x81/0x3b0 [ 325.415578][T18558] getname_flags+0x81/0x3b0 [ 325.415620][T18558] user_path_at+0x26/0x120 [ 325.415644][T18558] do_fchownat+0x92/0x1a0 [ 325.415726][T18558] __x64_sys_lchown+0x4a/0x60 [ 325.415765][T18558] x64_sys_call+0x1e29/0x2dc0 [ 325.415796][T18558] do_syscall_64+0xc9/0x1c0 [ 325.415908][T18558] ? clear_bhb_loop+0x55/0xb0 [ 325.415940][T18558] ? clear_bhb_loop+0x55/0xb0 [ 325.415973][T18558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.416007][T18558] RIP: 0033:0x7ff852dcd169 [ 325.416029][T18558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.416140][T18558] RSP: 002b:00007ff851437038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 325.416164][T18558] RAX: ffffffffffffffda RBX: 00007ff852fe5fa0 RCX: 00007ff852dcd169 [ 325.416179][T18558] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000400000000680 [ 325.416195][T18558] RBP: 00007ff851437090 R08: 0000000000000000 R09: 0000000000000000 [ 325.416209][T18558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.416223][T18558] R13: 0000000000000000 R14: 00007ff852fe5fa0 R15: 00007fffc54ec8f8 [ 325.416246][T18558] [ 325.781045][T18581] lo speed is unknown, defaulting to 1000 [ 325.883166][T18580] loop8: detected capacity change from 0 to 1024 [ 325.898207][T18586] loop9: detected capacity change from 0 to 4096 [ 325.920033][T18586] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.934744][T18580] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.952088][T18586] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 325.966530][T18595] netdevsim netdevsim2: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 326.005364][T18586] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 326.297064][T18603] lo speed is unknown, defaulting to 1000 [ 326.307058][T17703] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.322887][T18597] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.378326][ T38] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.426256][T18613] tipc: Started in network mode [ 326.431171][T18613] tipc: Node identity , cluster identity 4711 [ 326.437400][T18613] tipc: Failed to obtain node identity [ 326.442868][T18613] tipc: Enabling of bearer rejected, failed to enable media [ 326.460170][ T38] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.536723][ T38] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.556144][T18616] lo speed is unknown, defaulting to 1000 [ 326.588156][T18629] lo speed is unknown, defaulting to 1000 [ 326.601945][ T38] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.690244][T18638] loop9: detected capacity change from 0 to 512 [ 326.709521][T18638] EXT4-fs: dax option not supported [ 326.731327][T18616] chnl_net:caif_netlink_parms(): no params data found [ 326.754001][ T38] batadv1: left allmulticast mode [ 326.759116][ T38] batadv1: left promiscuous mode [ 326.764289][ T38] bridge0: port 3(batadv1) entered disabled state [ 326.780593][ T38] bridge_slave_1: left allmulticast mode [ 326.786301][ T38] bridge_slave_1: left promiscuous mode [ 326.792093][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.804307][ T38] bridge_slave_0: left allmulticast mode [ 326.810138][ T38] bridge_slave_0: left promiscuous mode [ 326.815951][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.824702][T18642] loop9: detected capacity change from 0 to 4096 [ 326.833242][T18642] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.848190][T18642] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 326.909506][ T38] bridge0 (unregistering): left promiscuous mode [ 326.924196][T18646] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 326.963951][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.983516][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.006764][ T38] bond0 (unregistering): Released all slaves [ 327.078215][T18616] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.085379][T18616] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.107357][T18616] bridge_slave_0: entered allmulticast mode [ 327.115305][T18616] bridge_slave_0: entered promiscuous mode [ 327.132239][T18660] tipc: Started in network mode [ 327.137153][T18660] tipc: Node identity , cluster identity 4711 [ 327.143318][T18660] tipc: Failed to obtain node identity [ 327.148779][T18660] tipc: Enabling of bearer rejected, failed to enable media [ 327.166910][ T38] hsr_slave_0: left promiscuous mode [ 327.174793][ T38] hsr_slave_1: left promiscuous mode [ 327.180535][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.188134][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.198987][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.206486][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.219622][ T38] veth1_macvtap: left promiscuous mode [ 327.225212][ T38] veth0_macvtap: left promiscuous mode [ 327.231222][ T38] veth1_vlan: left promiscuous mode [ 327.240389][ T38] veth0_vlan: left promiscuous mode [ 327.338488][ T38] team0 (unregistering): Port device team_slave_1 removed [ 327.350988][ T38] team0 (unregistering): Port device team_slave_0 removed [ 327.389704][T18616] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.396976][T18616] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.404958][T18616] bridge_slave_1: entered allmulticast mode [ 327.412364][T18616] bridge_slave_1: entered promiscuous mode [ 327.452262][T18616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.463130][T18616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.495432][T18616] team0: Port device team_slave_0 added [ 327.513157][T18616] team0: Port device team_slave_1 added [ 327.547262][T18616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.554251][T18616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.580595][T18616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.592141][T18616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.599172][T18616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.625320][T18616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.668569][T17703] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.679972][T18616] hsr_slave_0: entered promiscuous mode [ 327.688090][T18616] hsr_slave_1: entered promiscuous mode [ 327.695844][T18616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.703792][T18616] Cannot create hsr debugfs directory [ 327.995416][T18703] loop9: detected capacity change from 0 to 512 [ 328.062051][T18703] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.215173][T18703] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.240762][T18709] lo speed is unknown, defaulting to 1000 [ 328.253755][T18616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 328.263636][T18616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 328.273134][T18616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 328.282307][T18616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 328.354055][T18616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.384455][T18616] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.420443][T17703] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.436852][T16054] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.444054][T16054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.481214][T16054] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.488409][T16054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.524958][ T30] kauditd_printk_skb: 718 callbacks suppressed [ 328.524978][ T30] audit: type=1400 audit(1742093331.728:25580): avc: denied { read } for pid=18739 comm="syz.9.5256" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 328.597542][ T30] audit: type=1400 audit(1742093331.728:25581): avc: denied { open } for pid=18739 comm="syz.9.5256" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 328.617438][T18616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.621397][ T30] audit: type=1326 audit(1742093331.804:25582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18739 comm="syz.9.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff852dcd169 code=0x7ffc0000 [ 328.631778][T18616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.655300][ T30] audit: type=1326 audit(1742093331.804:25583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18739 comm="syz.9.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff852dcd169 code=0x7ffc0000 [ 328.689405][ T30] audit: type=1326 audit(1742093331.804:25584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18739 comm="syz.9.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff852dcd169 code=0x7ffc0000 [ 328.712895][ T30] audit: type=1326 audit(1742093331.804:25585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18739 comm="syz.9.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff852dcd169 code=0x7ffc0000 [ 328.736729][ T30] audit: type=1326 audit(1742093331.804:25586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18739 comm="syz.9.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff852dcd169 code=0x7ffc0000 [ 328.760326][ T30] audit: type=1326 audit(1742093331.804:25587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18739 comm="syz.9.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7ff852dcd169 code=0x7ffc0000 [ 328.783956][ T30] audit: type=1326 audit(1742093331.804:25588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18739 comm="syz.9.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff852dcd169 code=0x7ffc0000 [ 328.807679][ T30] audit: type=1326 audit(1742093331.804:25589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18739 comm="syz.9.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff852dcd169 code=0x7ffc0000 [ 328.902834][T18616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.089960][T18616] veth0_vlan: entered promiscuous mode [ 329.122204][T18616] veth1_vlan: entered promiscuous mode [ 329.165541][T18616] veth0_macvtap: entered promiscuous mode [ 329.187478][T18616] veth1_macvtap: entered promiscuous mode [ 329.224524][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.235165][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.245192][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.255833][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.265733][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.276193][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.286063][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.296608][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.306449][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.316942][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.326873][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.337347][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.347247][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.357954][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.370664][T18616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.391503][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.402056][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.411925][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.422567][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.432465][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.442977][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.452902][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.463386][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.473243][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.483800][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.493659][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.504139][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.514064][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.524514][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.544506][T18616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.566881][T18616] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.575807][T18616] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.584622][T18616] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.593397][T18616] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.693852][T18806] lo speed is unknown, defaulting to 1000 [ 329.734670][T18786] syz_tun: entered promiscuous mode [ 330.010992][T18836] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 330.048318][T18836] SELinux: security policydb version 18 (MLS) not backwards compatible [ 330.078278][T18836] SELinux: failed to load policy [ 330.300024][T18863] lo speed is unknown, defaulting to 1000 [ 330.448715][T18878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5275'. [ 330.524190][T18752] syz.3.5258 (18752) used greatest stack depth: 6208 bytes left [ 330.652926][T18907] netlink: 'syz.3.5281': attribute type 10 has an invalid length. [ 330.922372][T18935] lo speed is unknown, defaulting to 1000 [ 331.094780][T18949] loop9: detected capacity change from 0 to 1024 [ 331.114984][T18949] EXT4-fs: Ignoring removed nomblk_io_submit option [ 331.142076][T18949] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.246711][T18949] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4115: comm syz.9.5289: Allocating blocks 385-513 which overlap fs metadata [ 331.314357][T18966] EXT4-fs (loop9): pa ffff888106965cb0: logic 16, phys. 129, len 24 [ 331.322555][T18966] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 331.348909][T18966] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 331.361276][T18966] EXT4-fs (loop9): This should not happen!! Data will be lost [ 331.361276][T18966] [ 331.370984][T18966] EXT4-fs (loop9): Total free blocks count 0 [ 331.377167][T18966] EXT4-fs (loop9): Free/Dirty block details [ 331.383108][T18966] EXT4-fs (loop9): free_blocks=128 [ 331.388377][T18966] EXT4-fs (loop9): dirty_blocks=0 [ 331.393418][T18966] EXT4-fs (loop9): Block reservation details [ 331.399505][T18966] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 331.530216][T18975] SELinux: ebitmap: truncated map [ 331.560812][T18975] SELinux: failed to load policy [ 331.561725][T18991] netlink: 'syz.9.5294': attribute type 10 has an invalid length. [ 331.904510][T19018] lo speed is unknown, defaulting to 1000 [ 332.233302][T19046] FAULT_INJECTION: forcing a failure. [ 332.233302][T19046] name failslab, interval 1, probability 0, space 0, times 0 [ 332.245996][T19046] CPU: 0 UID: 0 PID: 19046 Comm: syz.5.5306 Tainted: G W 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 332.246027][T19046] Tainted: [W]=WARN [ 332.246035][T19046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 332.246050][T19046] Call Trace: [ 332.246069][T19046] [ 332.246078][T19046] dump_stack_lvl+0xf2/0x150 [ 332.246112][T19046] dump_stack+0x15/0x1a [ 332.246134][T19046] should_fail_ex+0x24a/0x260 [ 332.246165][T19046] should_failslab+0x8f/0xb0 [ 332.246199][T19046] kmem_cache_alloc_node_noprof+0x59/0x320 [ 332.246292][T19046] ? __alloc_skb+0x10b/0x310 [ 332.246321][T19046] __alloc_skb+0x10b/0x310 [ 332.246349][T19046] netlink_alloc_large_skb+0xad/0xe0 [ 332.246385][T19046] netlink_sendmsg+0x3b4/0x6e0 [ 332.246451][T19046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.246529][T19046] __sock_sendmsg+0x140/0x180 [ 332.246562][T19046] ____sys_sendmsg+0x326/0x4b0 [ 332.246673][T19046] __sys_sendmsg+0x19d/0x230 [ 332.246721][T19046] __x64_sys_sendmsg+0x46/0x50 [ 332.246750][T19046] x64_sys_call+0x2734/0x2dc0 [ 332.246776][T19046] do_syscall_64+0xc9/0x1c0 [ 332.246865][T19046] ? clear_bhb_loop+0x55/0xb0 [ 332.246895][T19046] ? clear_bhb_loop+0x55/0xb0 [ 332.246927][T19046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.246959][T19046] RIP: 0033:0x7fd9d721d169 [ 332.247003][T19046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.247024][T19046] RSP: 002b:00007fd9d5881038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.247047][T19046] RAX: ffffffffffffffda RBX: 00007fd9d7435fa0 RCX: 00007fd9d721d169 [ 332.247061][T19046] RDX: 0000000024040084 RSI: 0000400000006040 RDI: 0000000000000003 [ 332.247075][T19046] RBP: 00007fd9d5881090 R08: 0000000000000000 R09: 0000000000000000 [ 332.247089][T19046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.247103][T19046] R13: 0000000000000000 R14: 00007fd9d7435fa0 R15: 00007ffc793bd918 [ 332.247169][T19046] [ 332.450042][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5308'. [ 332.458973][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5308'. [ 332.475848][T19042] lo speed is unknown, defaulting to 1000 [ 332.582299][T19057] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 332.635833][T19066] SELinux: security policydb version 18 (MLS) not backwards compatible [ 332.662313][T19066] SELinux: failed to load policy [ 332.905052][T19105] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5319'. [ 332.914208][T19105] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5319'. [ 333.220192][T19138] loop9: detected capacity change from 0 to 8192 [ 333.240471][T19138] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 333.436951][T19162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5329'. [ 333.608455][T19126] FAULT_INJECTION: forcing a failure. [ 333.608455][T19126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.621766][T19126] CPU: 1 UID: 0 PID: 19126 Comm: syz.1.5321 Tainted: G W 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 333.621807][T19126] Tainted: [W]=WARN [ 333.621816][T19126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.621878][T19126] Call Trace: [ 333.621885][T19126] [ 333.621894][T19126] dump_stack_lvl+0xf2/0x150 [ 333.621927][T19126] dump_stack+0x15/0x1a [ 333.621953][T19126] should_fail_ex+0x24a/0x260 [ 333.621989][T19126] should_fail+0xb/0x10 [ 333.622091][T19126] should_fail_usercopy+0x1a/0x20 [ 333.622129][T19126] _copy_to_user+0x20/0xa0 [ 333.622152][T19126] simple_read_from_buffer+0xa0/0x110 [ 333.622231][T19126] proc_fail_nth_read+0xf9/0x140 [ 333.622281][T19126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 333.622310][T19126] vfs_read+0x19b/0x6f0 [ 333.622339][T19126] ? __rcu_read_unlock+0x4e/0x70 [ 333.622368][T19126] ? __fget_files+0x17c/0x1c0 [ 333.622418][T19126] ksys_read+0xe8/0x1b0 [ 333.622453][T19126] __x64_sys_read+0x42/0x50 [ 333.622484][T19126] x64_sys_call+0x2874/0x2dc0 [ 333.622595][T19126] do_syscall_64+0xc9/0x1c0 [ 333.622632][T19126] ? clear_bhb_loop+0x55/0xb0 [ 333.622664][T19126] ? clear_bhb_loop+0x55/0xb0 [ 333.622715][T19126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.622748][T19126] RIP: 0033:0x7ff91287bb7c [ 333.622767][T19126] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 333.622797][T19126] RSP: 002b:00007ff910ec6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.622819][T19126] RAX: ffffffffffffffda RBX: 00007ff912a96080 RCX: 00007ff91287bb7c [ 333.622847][T19126] RDX: 000000000000000f RSI: 00007ff910ec60a0 RDI: 0000000000000008 [ 333.622860][T19126] RBP: 00007ff910ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 333.622875][T19126] R10: 0000000024000080 R11: 0000000000000246 R12: 0000000000000001 [ 333.622889][T19126] R13: 0000000000000001 R14: 00007ff912a96080 R15: 00007ffe60346878 [ 333.622910][T19126] [ 333.865580][T19189] tipc: Started in network mode [ 333.870527][T19189] tipc: Node identity , cluster identity 4711 [ 333.876625][T19189] tipc: Failed to obtain node identity [ 333.882136][T19189] tipc: Enabling of bearer rejected, failed to enable media [ 334.023750][T19212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5333'. [ 334.032770][T19212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5333'. [ 334.206085][ T30] kauditd_printk_skb: 237 callbacks suppressed [ 334.206103][ T30] audit: type=1326 audit(1742093337.064:25827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.1.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91287d169 code=0x7ffc0000 [ 334.236219][ T30] audit: type=1326 audit(1742093337.064:25828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.1.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91287d169 code=0x7ffc0000 [ 334.260094][ T30] audit: type=1326 audit(1742093337.064:25829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.1.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff91287d169 code=0x7ffc0000 [ 334.283840][ T30] audit: type=1326 audit(1742093337.064:25830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.1.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff91287d1a3 code=0x7ffc0000 [ 334.308107][T19219] loop1: detected capacity change from 0 to 2048 [ 334.314776][ T30] audit: type=1326 audit(1742093337.074:25831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.1.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff91287bc1f code=0x7ffc0000 [ 334.338454][ T30] audit: type=1326 audit(1742093337.074:25832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.1.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff91287d1f7 code=0x7ffc0000 [ 334.362094][ T30] audit: type=1326 audit(1742093337.158:25833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.1.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff91287bad0 code=0x7ffc0000 [ 334.385717][ T30] audit: type=1326 audit(1742093337.158:25834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.1.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff91287cd6b code=0x7ffc0000 [ 334.409567][ T30] audit: type=1326 audit(1742093337.158:25835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.1.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff91287bdca code=0x7ffc0000 [ 334.433076][ T30] audit: type=1326 audit(1742093337.158:25836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.1.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff91287cd6b code=0x7ffc0000 [ 334.668231][T19223] netlink: 196 bytes leftover after parsing attributes in process `syz.9.5336'. [ 335.552160][T19251] tipc: Started in network mode [ 335.557097][T19251] tipc: Node identity , cluster identity 4711 [ 335.563206][T19251] tipc: Failed to obtain node identity [ 335.568682][T19251] tipc: Enabling of bearer rejected, failed to enable media [ 335.878377][T19262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.889585][T19265] netlink: 'syz.1.5345': attribute type 10 has an invalid length. [ 335.909058][T19262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.976131][T19272] lo speed is unknown, defaulting to 1000 [ 336.159490][T19277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5346'. [ 336.347122][T19283] tipc: Started in network mode [ 336.352028][T19283] tipc: Node identity , cluster identity 4711 [ 336.358261][T19283] tipc: Failed to obtain node identity [ 336.363731][T19283] tipc: Enabling of bearer rejected, failed to enable media [ 336.438284][T19286] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 336.795636][T19309] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5361'. [ 336.852169][T19313] loop1: detected capacity change from 0 to 512 [ 336.861043][T19311] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 336.861538][T19313] EXT4-fs: Mount option(s) incompatible with ext2 [ 336.891016][T19311] SELinux: security policydb version 18 (MLS) not backwards compatible [ 336.904602][T19311] SELinux: failed to load policy [ 337.232696][T19346] lo speed is unknown, defaulting to 1000 [ 337.336131][T19351] syzkaller0: entered allmulticast mode [ 337.344495][T19351] syzkaller0 (unregistering): left allmulticast mode [ 337.398001][T19352] usb usb8: usbfs: process 19352 (syz.1.5380) did not claim interface 0 before use [ 337.550218][T19357] syzkaller0: entered allmulticast mode [ 337.560873][T19357] syzkaller0 (unregistering): left allmulticast mode [ 337.617185][T19360] usb usb8: usbfs: process 19360 (syz.1.5382) did not claim interface 0 before use [ 337.632705][T19364] loop9: detected capacity change from 0 to 7 [ 337.647867][T19364] Buffer I/O error on dev loop9, logical block 0, async page read [ 337.657356][T19364] Buffer I/O error on dev loop9, logical block 0, async page read [ 337.665289][T19364] loop9: unable to read partition table [ 337.683611][T19364] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 337.683611][T19364] U) failed (rc=-5) [ 337.796962][T19381] syzkaller0: entered allmulticast mode [ 337.805908][T19381] syzkaller0 (unregistering): left allmulticast mode [ 337.857794][T19384] usb usb8: usbfs: process 19384 (syz.1.5392) did not claim interface 0 before use [ 337.868711][T19382] loop9: detected capacity change from 0 to 128 [ 337.890101][T19386] lo speed is unknown, defaulting to 1000 [ 337.909132][T19382] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.926673][T19382] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.962226][T19392] loop1: detected capacity change from 0 to 256 [ 337.976279][T19392] vfat: Unknown parameter '' [ 337.988672][T19392] netlink: 'syz.1.5396': attribute type 39 has an invalid length. [ 338.068131][T19397] geneve0: entered allmulticast mode [ 338.111114][T19401] SELinux: Context : is not valid (left unmapped). [ 338.165110][T19405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.173778][T19405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.279340][T19418] syzkaller0: entered allmulticast mode [ 338.288449][T19418] syzkaller0 (unregistering): left allmulticast mode [ 338.339975][T19420] usb usb8: usbfs: process 19420 (syz.1.5406) did not claim interface 0 before use [ 338.483665][T19436] lo speed is unknown, defaulting to 1000 [ 338.819135][T19449] loop1: detected capacity change from 0 to 2048 [ 339.599630][ T30] kauditd_printk_skb: 359 callbacks suppressed [ 339.599646][ T30] audit: type=1326 audit(1742093342.117:26194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19447 comm="syz.2.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e74f7d169 code=0x7fc00000 [ 339.629707][ T30] audit: type=1326 audit(1742093342.117:26195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19447 comm="syz.2.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e74f7d169 code=0x7fc00000 [ 339.653322][ T30] audit: type=1326 audit(1742093342.117:26196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19447 comm="syz.2.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e74f7d169 code=0x7fc00000 [ 339.676987][ T30] audit: type=1326 audit(1742093342.117:26197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19447 comm="syz.2.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e74f7d169 code=0x7fc00000 [ 339.700743][ T30] audit: type=1326 audit(1742093342.117:26198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19447 comm="syz.2.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e74f7d169 code=0x7fc00000 [ 339.724362][ T30] audit: type=1326 audit(1742093342.117:26199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19447 comm="syz.2.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e74f7d169 code=0x7fc00000 [ 339.747955][ T30] audit: type=1326 audit(1742093342.117:26200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19447 comm="syz.2.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e74f7d169 code=0x7fc00000 [ 339.771594][ T30] audit: type=1326 audit(1742093342.117:26201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19447 comm="syz.2.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e74f7d169 code=0x7fc00000 [ 339.795335][ T30] audit: type=1326 audit(1742093342.117:26202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19447 comm="syz.2.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e74f7d169 code=0x7fc00000 [ 339.819005][ T30] audit: type=1326 audit(1742093342.117:26203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19447 comm="syz.2.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e74f7d169 code=0x7fc00000 [ 339.909457][T19469] __nla_validate_parse: 2 callbacks suppressed [ 339.909472][T19469] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5426'. [ 340.103632][T19477] lo speed is unknown, defaulting to 1000 [ 340.138375][T19479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5430'. [ 340.284264][T19487] tipc: Started in network mode [ 340.289219][T19487] tipc: Node identity , cluster identity 4711 [ 340.295419][T19487] tipc: Failed to obtain node identity [ 340.300896][T19487] tipc: Enabling of bearer rejected, failed to enable media [ 340.317005][T19484] syzkaller0: entered allmulticast mode [ 340.325840][T19484] syzkaller0 (unregistering): left allmulticast mode [ 340.347109][T17703] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 340.372245][T19491] netlink: 'syz.9.5435': attribute type 10 has an invalid length. [ 340.401521][T19494] usb usb8: usbfs: process 19494 (syz.2.5432) did not claim interface 0 before use [ 340.597353][T19516] SELinux: security policydb version 18 (MLS) not backwards compatible [ 340.610673][T19514] lo speed is unknown, defaulting to 1000 [ 340.626867][T19516] SELinux: failed to load policy [ 340.756205][T19521] syzkaller0: entered allmulticast mode [ 340.786166][T19521] syzkaller0 (unregistering): left allmulticast mode [ 340.834493][T19528] usb usb8: usbfs: process 19528 (syz.2.5449) did not claim interface 0 before use [ 340.955496][T19527] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5451'. [ 341.336207][T19547] SELinux: security policydb version 18 (MLS) not backwards compatible [ 341.354309][T19547] SELinux: failed to load policy [ 341.434870][T19553] SELinux: security policydb version 18 (MLS) not backwards compatible [ 341.448420][T19553] SELinux: failed to load policy [ 341.448844][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5463'. [ 341.462296][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5463'. [ 341.572098][T19568] loop1: detected capacity change from 0 to 256 [ 341.578632][T19568] vfat: Unknown parameter '' [ 341.586561][T19568] netlink: 'syz.1.5468': attribute type 39 has an invalid length. [ 341.600650][T19571] geneve0: entered allmulticast mode [ 341.616913][T19573] loop1: detected capacity change from 0 to 512 [ 341.623720][T19573] EXT4-fs: Ignoring removed oldalloc option [ 341.643981][T19573] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.5470: Parent and EA inode have the same ino 15 [ 341.658566][T19573] EXT4-fs (loop1): Remounting filesystem read-only [ 341.665132][T19573] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 341.675240][T19573] EXT4-fs (loop1): 1 orphan inode deleted [ 341.681401][T19573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.693486][T19573] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 341.700575][T19573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.077839][T19623] FAULT_INJECTION: forcing a failure. [ 342.077839][T19623] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.091238][T19623] CPU: 1 UID: 0 PID: 19623 Comm: syz.9.5491 Tainted: G W 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 342.091269][T19623] Tainted: [W]=WARN [ 342.091275][T19623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 342.091287][T19623] Call Trace: [ 342.091293][T19623] [ 342.091301][T19623] dump_stack_lvl+0xf2/0x150 [ 342.091333][T19623] dump_stack+0x15/0x1a [ 342.091428][T19623] should_fail_ex+0x24a/0x260 [ 342.091498][T19623] should_fail_alloc_page+0xfd/0x110 [ 342.091535][T19623] __alloc_frozen_pages_noprof+0x109/0x340 [ 342.091635][T19623] alloc_pages_mpol+0xb4/0x260 [ 342.091658][T19623] vma_alloc_folio_noprof+0x1a0/0x310 [ 342.091720][T19623] handle_mm_fault+0xdd7/0x2ac0 [ 342.091784][T19623] exc_page_fault+0x3b9/0x650 [ 342.091811][T19623] asm_exc_page_fault+0x26/0x30 [ 342.091838][T19623] RIP: 0033:0x7ff852c8fbe3 [ 342.091857][T19623] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 342.091890][T19623] RSP: 002b:00007ff8514364a0 EFLAGS: 00010206 [ 342.091908][T19623] RAX: 0000000000002000 RBX: 00007ff851436540 RCX: 00007ff849017000 [ 342.091922][T19623] RDX: 00007ff8514366e0 RSI: 0000000000000000 RDI: 00007ff8514365e0 [ 342.092010][T19623] RBP: 00000000000000b3 R08: 0000000000000006 R09: 0000000000000022 [ 342.092023][T19623] R10: 0000000000000024 R11: 00007ff851436540 R12: 0000000000000001 [ 342.092036][T19623] R13: 00007ff852e693e0 R14: 00000000000000ff R15: 00007ff8514365e0 [ 342.092058][T19623] [ 342.092069][T19623] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 342.260425][T19623] loop9: detected capacity change from 0 to 512 [ 342.260536][T19629] FAULT_INJECTION: forcing a failure. [ 342.260536][T19629] name failslab, interval 1, probability 0, space 0, times 0 [ 342.279376][T19629] CPU: 0 UID: 0 PID: 19629 Comm: syz.1.5494 Tainted: G W 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 342.279430][T19629] Tainted: [W]=WARN [ 342.279439][T19629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 342.279500][T19629] Call Trace: [ 342.279509][T19629] [ 342.279519][T19629] dump_stack_lvl+0xf2/0x150 [ 342.279553][T19629] dump_stack+0x15/0x1a [ 342.279634][T19629] should_fail_ex+0x24a/0x260 [ 342.279672][T19629] should_failslab+0x8f/0xb0 [ 342.279709][T19629] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 342.279740][T19629] ? sidtab_sid2str_get+0xb8/0x140 [ 342.279824][T19629] kmemdup_noprof+0x2b/0x70 [ 342.279913][T19629] sidtab_sid2str_get+0xb8/0x140 [ 342.279949][T19629] security_sid_to_context_core+0x1eb/0x2f0 [ 342.279981][T19629] security_sid_to_context+0x27/0x30 [ 342.280032][T19629] selinux_lsmprop_to_secctx+0x68/0xf0 [ 342.280072][T19629] security_lsmprop_to_secctx+0x40/0x80 [ 342.280100][T19629] audit_log_task_context+0x76/0x180 [ 342.280178][T19629] audit_log_task+0xf9/0x250 [ 342.280279][T19629] audit_seccomp+0x68/0x130 [ 342.280318][T19629] __seccomp_filter+0x6fa/0x1180 [ 342.280346][T19629] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 342.280396][T19629] ? vfs_write+0x644/0x920 [ 342.280431][T19629] __secure_computing+0x9f/0x1c0 [ 342.280456][T19629] syscall_trace_enter+0xd1/0x1f0 [ 342.280488][T19629] do_syscall_64+0xaa/0x1c0 [ 342.280589][T19629] ? clear_bhb_loop+0x55/0xb0 [ 342.280620][T19629] ? clear_bhb_loop+0x55/0xb0 [ 342.280696][T19629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.280727][T19629] RIP: 0033:0x7ff91287bb7c [ 342.280745][T19629] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 342.280769][T19629] RSP: 002b:00007ff910ee7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 342.280832][T19629] RAX: ffffffffffffffda RBX: 00007ff912a95fa0 RCX: 00007ff91287bb7c [ 342.280845][T19629] RDX: 000000000000000f RSI: 00007ff910ee70a0 RDI: 0000000000000005 [ 342.280858][T19629] RBP: 00007ff910ee7090 R08: 0000000000000000 R09: 0000000000000002 [ 342.280871][T19629] R10: 0000400000000140 R11: 0000000000000246 R12: 0000000000000001 [ 342.280886][T19629] R13: 0000000000000000 R14: 00007ff912a95fa0 R15: 00007ffe60346878 [ 342.280981][T19629] [ 342.281679][T19623] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 342.524510][T19623] EXT4-fs (loop9): orphan cleanup on readonly fs [ 342.531381][T19623] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.5491: Failed to acquire dquot type 1 [ 342.551449][T19623] EXT4-fs (loop9): 1 truncate cleaned up [ 342.566222][T19623] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 342.609962][T17703] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.677797][T19649] xt_hashlimit: max too large, truncated to 1048576 [ 342.695349][T19649] Cannot find set identified by id 0 to match [ 342.712136][T19648] tipc: Started in network mode [ 342.717300][T19648] tipc: Node identity , cluster identity 4711 [ 342.723436][T19648] tipc: Failed to obtain node identity [ 342.728963][T19648] tipc: Enabling of bearer rejected, failed to enable media [ 342.741968][T19653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5504'. [ 342.817996][T19664] FAULT_INJECTION: forcing a failure. [ 342.817996][T19664] name failslab, interval 1, probability 0, space 0, times 0 [ 342.830800][T19664] CPU: 0 UID: 0 PID: 19664 Comm: syz.9.5509 Tainted: G W 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 342.830900][T19664] Tainted: [W]=WARN [ 342.830908][T19664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 342.830923][T19664] Call Trace: [ 342.830931][T19664] [ 342.830940][T19664] dump_stack_lvl+0xf2/0x150 [ 342.830968][T19664] dump_stack+0x15/0x1a [ 342.830990][T19664] should_fail_ex+0x24a/0x260 [ 342.831056][T19664] should_failslab+0x8f/0xb0 [ 342.831168][T19664] kmem_cache_alloc_node_noprof+0x59/0x320 [ 342.831194][T19664] ? __alloc_skb+0x10b/0x310 [ 342.831217][T19664] __alloc_skb+0x10b/0x310 [ 342.831244][T19664] netlink_alloc_large_skb+0xad/0xe0 [ 342.831339][T19664] netlink_sendmsg+0x3b4/0x6e0 [ 342.831376][T19664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.831419][T19664] __sock_sendmsg+0x140/0x180 [ 342.831454][T19664] ____sys_sendmsg+0x326/0x4b0 [ 342.831483][T19664] __sys_sendmsg+0x19d/0x230 [ 342.831531][T19664] __x64_sys_sendmsg+0x46/0x50 [ 342.831612][T19664] x64_sys_call+0x2734/0x2dc0 [ 342.831641][T19664] do_syscall_64+0xc9/0x1c0 [ 342.831709][T19664] ? clear_bhb_loop+0x55/0xb0 [ 342.831741][T19664] ? clear_bhb_loop+0x55/0xb0 [ 342.831773][T19664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.831805][T19664] RIP: 0033:0x7ff852dcd169 [ 342.831820][T19664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.831872][T19664] RSP: 002b:00007ff851437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.831893][T19664] RAX: ffffffffffffffda RBX: 00007ff852fe5fa0 RCX: 00007ff852dcd169 [ 342.831956][T19664] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 000000000000000a [ 342.831966][T19664] RBP: 00007ff851437090 R08: 0000000000000000 R09: 0000000000000000 [ 342.831976][T19664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.831986][T19664] R13: 0000000000000000 R14: 00007ff852fe5fa0 R15: 00007fffc54ec8f8 [ 342.832002][T19664] [ 343.050559][T19667] lo speed is unknown, defaulting to 1000 [ 343.127958][T19670] loop9: detected capacity change from 0 to 1024 [ 343.134891][T19670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 343.168128][T19670] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.199908][T19670] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4115: comm syz.9.5511: Allocating blocks 385-513 which overlap fs metadata [ 343.222854][T19670] EXT4-fs (loop9): pa ffff8881069c4150: logic 16, phys. 129, len 24 [ 343.231979][T19670] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 343.245954][T19670] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 343.259121][T19670] EXT4-fs (loop9): This should not happen!! Data will be lost [ 343.259121][T19670] [ 343.270316][T19670] EXT4-fs (loop9): Total free blocks count 0 [ 343.276786][T19670] EXT4-fs (loop9): Free/Dirty block details [ 343.288098][T19670] EXT4-fs (loop9): free_blocks=128 [ 343.293871][T19670] EXT4-fs (loop9): dirty_blocks=0 [ 343.299143][T19670] EXT4-fs (loop9): Block reservation details [ 343.305662][T19670] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 343.355542][T19695] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5521'. [ 343.382894][T19693] tipc: Started in network mode [ 343.387843][T19693] tipc: Node identity , cluster identity 4711 [ 343.393998][T19693] tipc: Failed to obtain node identity [ 343.399566][T19693] tipc: Enabling of bearer rejected, failed to enable media [ 343.418956][T19697] FAULT_INJECTION: forcing a failure. [ 343.418956][T19697] name failslab, interval 1, probability 0, space 0, times 0 [ 343.431684][T19697] CPU: 0 UID: 0 PID: 19697 Comm: syz.2.5522 Tainted: G W 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 343.431719][T19697] Tainted: [W]=WARN [ 343.431727][T19697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 343.431742][T19697] Call Trace: [ 343.431750][T19697] [ 343.431790][T19697] dump_stack_lvl+0xf2/0x150 [ 343.431819][T19697] dump_stack+0x15/0x1a [ 343.431840][T19697] should_fail_ex+0x24a/0x260 [ 343.431933][T19697] should_failslab+0x8f/0xb0 [ 343.431967][T19697] __kmalloc_cache_node_noprof+0x56/0x320 [ 343.432074][T19697] ? __get_vm_area_node+0xfb/0x1c0 [ 343.432110][T19697] __get_vm_area_node+0xfb/0x1c0 [ 343.432142][T19697] __vmalloc_node_range_noprof+0x280/0xe70 [ 343.432253][T19697] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 343.432289][T19697] ? __rcu_read_unlock+0x4e/0x70 [ 343.432318][T19697] ? avc_has_perm_noaudit+0x1cc/0x210 [ 343.432397][T19697] ? selinux_capable+0x1f2/0x260 [ 343.432426][T19697] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 343.432534][T19697] __vmalloc_noprof+0x5e/0x70 [ 343.432569][T19697] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 343.432617][T19697] bpf_prog_alloc_no_stats+0x49/0x380 [ 343.432701][T19697] ? bpf_prog_alloc+0x28/0x150 [ 343.432734][T19697] bpf_prog_alloc+0x3a/0x150 [ 343.432770][T19697] bpf_prog_load+0x4d0/0x1050 [ 343.432874][T19697] __sys_bpf+0x463/0x7a0 [ 343.432950][T19697] __x64_sys_bpf+0x43/0x50 [ 343.432977][T19697] x64_sys_call+0x2914/0x2dc0 [ 343.433004][T19697] do_syscall_64+0xc9/0x1c0 [ 343.433040][T19697] ? clear_bhb_loop+0x55/0xb0 [ 343.433110][T19697] ? clear_bhb_loop+0x55/0xb0 [ 343.433137][T19697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.433170][T19697] RIP: 0033:0x7f6e74f7d169 [ 343.433189][T19697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.433252][T19697] RSP: 002b:00007f6e735e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 343.433274][T19697] RAX: ffffffffffffffda RBX: 00007f6e75195fa0 RCX: 00007f6e74f7d169 [ 343.433289][T19697] RDX: 0000000000000090 RSI: 0000400000000400 RDI: 0000000000000005 [ 343.433305][T19697] RBP: 00007f6e735e7090 R08: 0000000000000000 R09: 0000000000000000 [ 343.433370][T19697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.433385][T19697] R13: 0000000000000000 R14: 00007f6e75195fa0 R15: 00007ffc04f87358 [ 343.433404][T19697] [ 343.433413][T19697] syz.2.5522: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 343.686965][T19697] CPU: 0 UID: 0 PID: 19697 Comm: syz.2.5522 Tainted: G W 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 343.687001][T19697] Tainted: [W]=WARN [ 343.687136][T19697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 343.687154][T19697] Call Trace: [ 343.687164][T19697] [ 343.687175][T19697] dump_stack_lvl+0xf2/0x150 [ 343.687212][T19697] dump_stack+0x15/0x1a [ 343.687240][T19697] warn_alloc+0x145/0x1b0 [ 343.687281][T19697] __vmalloc_node_range_noprof+0x2a5/0xe70 [ 343.687400][T19697] ? __rcu_read_unlock+0x4e/0x70 [ 343.687433][T19697] ? avc_has_perm_noaudit+0x1cc/0x210 [ 343.687532][T19697] ? selinux_capable+0x1f2/0x260 [ 343.687592][T19697] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 343.687640][T19697] __vmalloc_noprof+0x5e/0x70 [ 343.687740][T19697] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 343.687777][T19697] bpf_prog_alloc_no_stats+0x49/0x380 [ 343.687880][T19697] ? bpf_prog_alloc+0x28/0x150 [ 343.688040][T19697] bpf_prog_alloc+0x3a/0x150 [ 343.688107][T19697] bpf_prog_load+0x4d0/0x1050 [ 343.688162][T19697] __sys_bpf+0x463/0x7a0 [ 343.688265][T19697] __x64_sys_bpf+0x43/0x50 [ 343.688298][T19697] x64_sys_call+0x2914/0x2dc0 [ 343.688331][T19697] do_syscall_64+0xc9/0x1c0 [ 343.688387][T19697] ? clear_bhb_loop+0x55/0xb0 [ 343.688420][T19697] ? clear_bhb_loop+0x55/0xb0 [ 343.688473][T19697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.688508][T19697] RIP: 0033:0x7f6e74f7d169 [ 343.688554][T19697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.688579][T19697] RSP: 002b:00007f6e735e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 343.688688][T19697] RAX: ffffffffffffffda RBX: 00007f6e75195fa0 RCX: 00007f6e74f7d169 [ 343.688704][T19697] RDX: 0000000000000090 RSI: 0000400000000400 RDI: 0000000000000005 [ 343.688720][T19697] RBP: 00007f6e735e7090 R08: 0000000000000000 R09: 0000000000000000 [ 343.688735][T19697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.688750][T19697] R13: 0000000000000000 R14: 00007f6e75195fa0 R15: 00007ffc04f87358 [ 343.688773][T19697] [ 343.688783][T19697] Mem-Info: [ 343.901369][T19697] active_anon:5112 inactive_anon:12996 isolated_anon:0 [ 343.901369][T19697] active_file:10493 inactive_file:12488 isolated_file:0 [ 343.901369][T19697] unevictable:16302 dirty:439 writeback:0 [ 343.901369][T19697] slab_reclaimable:3473 slab_unreclaimable:22561 [ 343.901369][T19697] mapped:29274 shmem:14340 pagetables:1147 [ 343.901369][T19697] sec_pagetables:0 bounce:0 [ 343.901369][T19697] kernel_misc_reclaimable:0 [ 343.901369][T19697] free:1843986 free_pcp:6488 free_cma:0 [ 343.947513][T19697] Node 0 active_anon:20448kB inactive_anon:51984kB active_file:41972kB inactive_file:49952kB unevictable:65208kB isolated(anon):0kB isolated(file):0kB mapped:117096kB dirty:1756kB writeback:0kB shmem:57360kB writeback_tmp:0kB kernel_stack:4096kB pagetables:4588kB sec_pagetables:0kB all_unreclaimable? no [ 343.976788][T19697] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.004076][T19697] lowmem_reserve[]: 0 2885 7863 7863 [ 344.009455][T19697] Node 0 DMA32 free:2950728kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954360kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 344.038160][T19697] lowmem_reserve[]: 0 0 4978 4978 [ 344.043412][T19697] Node 0 Normal free:4409584kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:20652kB inactive_anon:51984kB active_file:41972kB inactive_file:49936kB unevictable:65208kB writepending:1760kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:22196kB local_pcp:20996kB free_cma:0kB [ 344.074488][T19697] lowmem_reserve[]: 0 0 0 0 [ 344.079233][T19697] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 344.092302][T19697] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 1*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950728kB [ 344.108486][T19697] Node 0 Normal: 66*4kB (ME) 679*8kB (UME) 557*16kB (UME) 421*32kB (UME) 402*64kB (UME) 260*128kB (UME) 213*256kB (UM) 198*512kB (UM) 139*1024kB (UME) 47*2048kB (UM) 959*4096kB (UME) = 4409648kB [ 344.127892][T19697] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 344.137293][T19697] 53629 total pagecache pages [ 344.142012][T19697] 10 pages in swap cache [ 344.146268][T19697] Free swap = 111192kB [ 344.150471][T19697] Total swap = 124996kB [ 344.154660][T19697] 2097051 pages RAM [ 344.158499][T19697] 0 pages HighMem/MovableOnly [ 344.163176][T19697] 80069 pages reserved [ 344.171068][T19718] lo speed is unknown, defaulting to 1000 [ 344.504901][T19736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5536'. [ 344.519786][T19736] bond1: entered promiscuous mode [ 344.524844][T19736] bond1: entered allmulticast mode [ 344.530247][T19736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.546702][T19736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5536'. [ 344.585643][T19742] netlink: 'syz.3.5538': attribute type 10 has an invalid length. [ 344.599577][T19744] loop9: detected capacity change from 0 to 256 [ 344.616177][T19744] vfat: Unknown parameter '' [ 344.625360][T19744] netlink: 'syz.9.5539': attribute type 39 has an invalid length. [ 344.649509][T19746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5540'. [ 344.719089][T19755] SELinux: policydb version 0 does not match my version range 15-34 [ 344.727829][T19755] SELinux: failed to load policy [ 344.949255][ T30] kauditd_printk_skb: 352 callbacks suppressed [ 344.949274][ T30] audit: type=1400 audit(1742093347.130:26553): avc: denied { read } for pid=19790 comm="syz.2.5559" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 344.951293][T19789] loop9: detected capacity change from 0 to 512 [ 344.955960][ T30] audit: type=1400 audit(1742093347.140:26554): avc: denied { open } for pid=19790 comm="syz.2.5559" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 344.980573][T19789] EXT4-fs: Ignoring removed oldalloc option [ 345.017348][T19789] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.5560: Parent and EA inode have the same ino 15 [ 345.050308][T19789] EXT4-fs (loop9): Remounting filesystem read-only [ 345.056898][T19789] EXT4-fs warning (device loop9): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 345.068831][T19789] EXT4-fs (loop9): 1 orphan inode deleted [ 345.077604][T19789] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.089849][T19789] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 345.104392][T19789] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.109024][T19798] lo speed is unknown, defaulting to 1000 [ 345.120162][T19796] 9pnet_fd: Insufficient options for proto=fd [ 345.173638][ T30] audit: type=1326 audit(1742093347.336:26555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19801 comm="syz.3.5564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 345.197846][ T30] audit: type=1326 audit(1742093347.336:26556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19801 comm="syz.3.5564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 345.221598][ T30] audit: type=1326 audit(1742093347.346:26557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19801 comm="syz.3.5564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 345.245503][ T30] audit: type=1326 audit(1742093347.346:26558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19801 comm="syz.3.5564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 345.269130][ T30] audit: type=1326 audit(1742093347.355:26559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19801 comm="syz.3.5564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 345.293074][ T30] audit: type=1326 audit(1742093347.355:26560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19801 comm="syz.3.5564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 345.316833][ T30] audit: type=1326 audit(1742093347.355:26561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19801 comm="syz.3.5564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 345.340603][ T30] audit: type=1326 audit(1742093347.355:26562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19801 comm="syz.3.5564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b0c9d169 code=0x7ffc0000 [ 345.501662][T19824] FAULT_INJECTION: forcing a failure. [ 345.501662][T19824] name failslab, interval 1, probability 0, space 0, times 0 [ 345.514394][T19824] CPU: 1 UID: 0 PID: 19824 Comm: syz.1.5573 Tainted: G W 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 345.514429][T19824] Tainted: [W]=WARN [ 345.514436][T19824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 345.514449][T19824] Call Trace: [ 345.514456][T19824] [ 345.514464][T19824] dump_stack_lvl+0xf2/0x150 [ 345.514524][T19824] dump_stack+0x15/0x1a [ 345.514548][T19824] should_fail_ex+0x24a/0x260 [ 345.514579][T19824] should_failslab+0x8f/0xb0 [ 345.514615][T19824] kmem_cache_alloc_node_noprof+0x59/0x320 [ 345.514641][T19824] ? __alloc_skb+0x10b/0x310 [ 345.514727][T19824] __alloc_skb+0x10b/0x310 [ 345.514752][T19824] ? audit_log_start+0x34c/0x6b0 [ 345.514802][T19824] audit_log_start+0x368/0x6b0 [ 345.514884][T19824] audit_seccomp+0x4b/0x130 [ 345.514925][T19824] __seccomp_filter+0x6fa/0x1180 [ 345.514955][T19824] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 345.514993][T19824] ? vfs_write+0x644/0x920 [ 345.515026][T19824] __secure_computing+0x9f/0x1c0 [ 345.515092][T19824] syscall_trace_enter+0xd1/0x1f0 [ 345.515120][T19824] ? fpregs_assert_state_consistent+0x83/0xa0 [ 345.515146][T19824] do_syscall_64+0xaa/0x1c0 [ 345.515184][T19824] ? clear_bhb_loop+0x55/0xb0 [ 345.515280][T19824] ? clear_bhb_loop+0x55/0xb0 [ 345.515309][T19824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.515341][T19824] RIP: 0033:0x7ff91287d169 [ 345.515357][T19824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.515474][T19824] RSP: 002b:00007ff910ee7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.515497][T19824] RAX: ffffffffffffffda RBX: 00007ff912a95fa0 RCX: 00007ff91287d169 [ 345.515512][T19824] RDX: 0000400000000400 RSI: 0000000000004b47 RDI: 000000000000000f [ 345.515527][T19824] RBP: 00007ff910ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 345.515540][T19824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.515552][T19824] R13: 0000000000000000 R14: 00007ff912a95fa0 R15: 00007ffe60346878 [ 345.515598][T19824] [ 345.810814][T19832] loop9: detected capacity change from 0 to 512 [ 345.833515][T19832] EXT4-fs: Ignoring removed oldalloc option [ 345.842042][T19832] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.5575: Parent and EA inode have the same ino 15 [ 345.856532][T19832] EXT4-fs (loop9): Remounting filesystem read-only [ 345.863092][T19832] EXT4-fs warning (device loop9): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 345.873443][T19832] EXT4-fs (loop9): 1 orphan inode deleted [ 345.881216][T19832] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.893550][T19832] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 345.917204][T19832] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.937123][T19839] __nla_validate_parse: 2 callbacks suppressed [ 345.937138][T19839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5578'. [ 346.039288][T19847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5581'. [ 346.048346][T19847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5581'. [ 346.088473][T19847] erspan0: entered promiscuous mode [ 346.096776][T19847] erspan0: left promiscuous mode [ 346.211991][T19858] FAULT_INJECTION: forcing a failure. [ 346.211991][T19858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.225309][T19858] CPU: 1 UID: 0 PID: 19858 Comm: syz.1.5586 Tainted: G W 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 346.225381][T19858] Tainted: [W]=WARN [ 346.225388][T19858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 346.225408][T19858] Call Trace: [ 346.225415][T19858] [ 346.225422][T19858] dump_stack_lvl+0xf2/0x150 [ 346.225455][T19858] dump_stack+0x15/0x1a [ 346.225478][T19858] should_fail_ex+0x24a/0x260 [ 346.225528][T19858] should_fail+0xb/0x10 [ 346.225558][T19858] should_fail_usercopy+0x1a/0x20 [ 346.225630][T19858] _copy_from_user+0x1c/0xa0 [ 346.225652][T19858] copy_msghdr_from_user+0x54/0x2a0 [ 346.225721][T19858] ? __fget_files+0x17c/0x1c0 [ 346.225762][T19858] __sys_sendmsg+0x13e/0x230 [ 346.225800][T19858] __x64_sys_sendmsg+0x46/0x50 [ 346.225842][T19858] x64_sys_call+0x2734/0x2dc0 [ 346.225903][T19858] do_syscall_64+0xc9/0x1c0 [ 346.225995][T19858] ? clear_bhb_loop+0x55/0xb0 [ 346.226023][T19858] ? clear_bhb_loop+0x55/0xb0 [ 346.226112][T19858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.226151][T19858] RIP: 0033:0x7ff91287d169 [ 346.226170][T19858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.226191][T19858] RSP: 002b:00007ff910ee7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.226209][T19858] RAX: ffffffffffffffda RBX: 00007ff912a95fa0 RCX: 00007ff91287d169 [ 346.226221][T19858] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000004 [ 346.226233][T19858] RBP: 00007ff910ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 346.226267][T19858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.226344][T19858] R13: 0000000000000000 R14: 00007ff912a95fa0 R15: 00007ffe60346878 [ 346.226362][T19858] [ 346.434950][T19863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5588'. [ 346.444026][T19863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5588'. [ 346.476954][T19865] SELinux: security policydb version 18 (MLS) not backwards compatible [ 346.545572][T19870] netlink: 'syz.3.5591': attribute type 39 has an invalid length. [ 346.555414][T19865] SELinux: failed to load policy [ 346.567178][T19868] lo speed is unknown, defaulting to 1000 [ 346.727523][T19884] loop1: detected capacity change from 0 to 1024 [ 346.734326][T19884] EXT4-fs: Ignoring removed nomblk_io_submit option [ 346.756535][T19884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.788792][T19891] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5597'. [ 346.831684][T19884] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4115: comm syz.1.5595: Allocating blocks 385-513 which overlap fs metadata [ 346.852094][T19884] EXT4-fs (loop1): pa ffff8881069c4070: logic 16, phys. 129, len 24 [ 346.860994][T19884] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 346.876309][T19884] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 346.891158][T19884] EXT4-fs (loop1): This should not happen!! Data will be lost [ 346.891158][T19884] [ 346.901071][T19884] EXT4-fs (loop1): Total free blocks count 0 [ 346.907821][T19884] EXT4-fs (loop1): Free/Dirty block details [ 346.919960][T19884] EXT4-fs (loop1): free_blocks=128 [ 346.925513][T19884] EXT4-fs (loop1): dirty_blocks=0 [ 346.931191][T19884] EXT4-fs (loop1): Block reservation details [ 346.937647][T19884] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 346.962125][T19894] lo speed is unknown, defaulting to 1000 [ 346.962233][T19895] loop9: detected capacity change from 0 to 512 [ 346.974582][T19895] EXT4-fs: Ignoring removed oldalloc option [ 346.996277][T19895] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.5597: Parent and EA inode have the same ino 15 [ 347.010270][T19895] EXT4-fs (loop9): Remounting filesystem read-only [ 347.016925][T19895] EXT4-fs warning (device loop9): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 347.029361][T19895] EXT4-fs (loop9): 1 orphan inode deleted [ 347.033906][T19901] SELinux: policydb version 0 does not match my version range 15-34 [ 347.035705][T19895] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.057183][T19895] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 347.065995][T19895] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.081135][T19901] SELinux: failed to load policy [ 347.098830][T19904] SELinux: security policydb version 18 (MLS) not backwards compatible [ 347.115289][T19904] SELinux: failed to load policy [ 347.209160][T19918] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5608'. [ 347.262250][T19918] loop9: detected capacity change from 0 to 512 [ 347.268735][T19918] EXT4-fs: Ignoring removed oldalloc option [ 347.289290][T19918] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.5608: Parent and EA inode have the same ino 15 [ 347.306803][T19918] EXT4-fs (loop9): Remounting filesystem read-only [ 347.313469][T19918] EXT4-fs warning (device loop9): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 347.325390][T19918] EXT4-fs (loop9): 1 orphan inode deleted [ 347.331603][T19918] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.343800][T19918] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 347.351063][T19918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.465744][T12853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.522584][T19943] netlink: 'syz.2.5618': attribute type 1 has an invalid length. [ 347.594209][T19943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.621309][T19936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.638087][T19962] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5625'. [ 347.650718][T19946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5622'. [ 347.651149][T19936] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 347.674116][T19936] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 347.782259][T19944] lo speed is unknown, defaulting to 1000 [ 347.856751][T19985] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5634'. [ 347.930776][T19944] chnl_net:caif_netlink_parms(): no params data found [ 348.017397][T19944] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.024637][T19944] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.036497][T19944] bridge_slave_0: entered allmulticast mode [ 348.043411][T19944] bridge_slave_0: entered promiscuous mode [ 348.053752][T19944] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.061197][T19944] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.068990][T19944] bridge_slave_1: entered allmulticast mode [ 348.075904][T19944] bridge_slave_1: entered promiscuous mode [ 348.080548][T20010] loop9: detected capacity change from 0 to 256 [ 348.105013][T20010] vfat: Unknown parameter '' [ 348.117038][T20010] netlink: 'syz.9.5644': attribute type 39 has an invalid length. [ 348.130236][T19944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.140798][T19944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.191141][T19944] team0: Port device team_slave_0 added [ 348.201942][T19944] team0: Port device team_slave_1 added [ 348.253741][T19944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.260966][T19944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.286928][T19944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.312569][T19944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.319586][T19944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.345668][T19944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.393827][T19944] hsr_slave_0: entered promiscuous mode [ 348.399983][T19944] hsr_slave_1: entered promiscuous mode [ 348.419305][T19944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.430635][T19944] Cannot create hsr debugfs directory [ 348.462818][T20040] 9pnet_fd: Insufficient options for proto=fd [ 348.562249][T19944] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.631704][T20053] SELinux: policydb version 0 does not match my version range 15-34 [ 348.640063][T20053] SELinux: failed to load policy [ 348.656321][T19944] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.744746][T19944] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.800503][T19944] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.873089][T19944] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 348.882312][T19944] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 348.891235][T19944] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 348.900233][T19944] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 348.939830][T19944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.949809][T20069] geneve0: entered allmulticast mode [ 348.978540][T19944] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.993840][T16008] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.001052][T16008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.014284][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.021377][ T412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.110990][T19944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.237365][T19944] veth0_vlan: entered promiscuous mode [ 349.248698][T19944] veth1_vlan: entered promiscuous mode [ 349.282243][T19944] veth0_macvtap: entered promiscuous mode [ 349.291553][T19944] veth1_macvtap: entered promiscuous mode [ 349.304562][T19944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.315104][T19944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.325116][T19944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.335605][T19944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.345867][T19944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.356366][T19944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.366498][T19944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.376948][T19944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.386830][T19944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.397302][T19944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.407172][T19944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.417709][T19944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.427609][T19944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.438149][T19944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.447992][T19944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.448012][T19944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.449628][T19944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.477464][T19944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.487951][T19944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.497832][T19944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.508283][T19944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.518193][T19944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.528621][T19944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.538519][T19944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.549017][T19944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.558926][T19944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.569382][T19944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.579265][T19944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.589798][T19944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.599778][T19944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.610298][T19944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.620223][T19944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.630672][T19944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.641802][T19944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.653581][T19944] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.662348][T19944] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.671167][T19944] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.679888][T19944] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.841473][T20127] loop9: detected capacity change from 0 to 1024 [ 349.848285][T20127] EXT4-fs: Ignoring removed nomblk_io_submit option [ 349.866426][T20127] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.899045][T20127] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4115: comm syz.9.5685: Allocating blocks 385-513 which overlap fs metadata [ 349.923894][T20127] EXT4-fs (loop9): pa ffff888106965d20: logic 16, phys. 129, len 24 [ 349.933319][T20127] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5366: group 0, [ 349.933398][T20109] ================================================================== [ 349.933459][T20127] free 0, pa_free 8 [ 349.933442][T20109] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 349.933495][T20109] [ 349.933501][T20109] write to 0xffffffff866e0748 of 8 bytes by task 20127 on cpu 0: [ 349.933516][T20109] prb_reserve+0x740/0xb60 [ 349.933544][T20109] vprintk_store+0x558/0x870 [ 349.933563][T20109] vprintk_emit+0x168/0x690 [ 349.933584][T20109] vprintk_default+0x26/0x30 [ 349.933606][T20109] vprintk+0x1d/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 349.933632][T20109] _printk+0x7a/0xa0 [ 349.933658][T20109] __ext4_grp_locked_error+0x53e/0x7b0 [ 349.933696][T20109] ext4_mb_release_inode_pa+0x5b0/0x600 [ 349.933729][T20109] ext4_mb_discard_group_preallocations+0x691/0x870 [ 349.933769][T20109] ext4_mb_discard_preallocations_should_retry+0xec/0x4c0 [ 349.933806][T20109] ext4_mb_new_blocks+0x1c1a/0x2020 [ 349.933834][T20109] ext4_new_meta_blocks+0xc1/0x1a0 [ 349.933864][T20109] ext4_ext_insert_extent+0xa38/0x2a50 [ 349.933886][T20109] ext4_split_extent_at+0x60b/0x9f0 [ 349.933915][T20109] ext4_split_extent+0x1a2/0x3a0 [ 349.933945][T20109] ext4_ext_map_blocks+0xb7d/0x35c0 [ 349.933973][T20109] ext4_map_blocks+0x5aa/0xd20 [ 349.934004][T20109] ext4_do_writepages+0x14c3/0x2130 [ 349.934046][T20109] ext4_writepages+0x159/0x2e0 [ 349.934065][T20109] do_writepages+0x1d8/0x480 [ 349.934107][T20109] file_write_and_wait_range+0x168/0x2f0 [ 349.934147][T20109] generic_buffers_fsync_noflush+0x46/0x120 [ 349.934180][T20109] ext4_sync_file+0x1ff/0x6c0 [ 349.934217][T20109] vfs_fsync_range+0x116/0x130 [ 349.934251][T20109] ext4_buffered_write_iter+0x358/0x3c0 [ 349.934289][T20109] ext4_file_write_iter+0x383/0xf20 [ 349.934325][T20109] do_iter_readv_writev+0x403/0x4b0 [ 349.934359][T20109] vfs_writev+0x2d9/0x880 [ 349.934379][T20109] __se_sys_pwritev2+0x100/0x1c0 [ 349.934413][T20109] __x64_sys_pwritev2+0x78/0x90 [ 349.934444][T20109] x64_sys_call+0x2afe/0x2dc0 [ 349.934471][T20109] do_syscall_64+0xc9/0x1c0 [ 349.934506][T20109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.934534][T20109] [ 349.934540][T20109] read to 0xffffffff866e0748 of 8 bytes by task 20109 on cpu 1: [ 349.934558][T20109] _prb_read_valid+0x46e/0x6c0 [ 349.934595][T20109] prb_read_valid+0x3d/0x60 [ 349.934629][T20109] printk_get_next_message+0xd8/0x530 [ 349.934653][T20109] console_flush_all+0x2a7/0x790 [ 349.934674][T20109] console_unlock+0xb6/0x340 [ 349.934695][T20109] con_shutdown+0x4b/0x60 [ 349.934727][T20109] release_tty+0x84/0x4f0 [ 349.934752][T20109] tty_release_struct+0x97/0xb0 [ 349.934780][T20109] tty_release+0x8e4/0x930 [ 349.934803][T20109] __fput+0x2ac/0x640 [ 349.934774][T20127] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 349.934823][T20109] ____fput+0x1c/0x30 [ 349.934844][T20109] task_work_run+0x13a/0x1a0 [ 349.934871][T20127] EXT4-fs (loop9): This should not happen!! Data will be lost [ 349.934871][T20127] [ 349.934878][T20109] do_exit+0x5d8/0x17f0 [ 349.934912][T20109] do_group_exit+0x102/0x150 [ 349.934924][T20127] EXT4-fs (loop9): Total free blocks count 0 [ 349.934948][T20109] get_signal+0xeb9/0x1000 [ 349.934971][T20109] arch_do_signal_or_restart+0x95/0x4b0 [ 349.934978][T20127] EXT4-fs (loop9): Free/Dirty block details [ 349.934998][T20109] syscall_exit_to_user_mode+0x62/0x120 [ 349.935026][T20109] do_syscall_64+0xd6/0x1c0 [ 349.935065][T20127] EXT4-fs (loop9): free_blocks=128 [ 349.935065][T20109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.935096][T20109] [ 349.935101][T20109] value changed: 0x0000000000000da5 -> 0x0000000000000000 [ 349.935114][T20109] [ 349.935119][T20109] Reported by Kernel Concurrency Sanitizer on: [ 349.935118][T20127] EXT4-fs (loop9): dirty_blocks=0 [ 349.935132][T20109] CPU: 1 UID: 0 PID: 20109 Comm: syz.2.5679 Tainted: G W 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 349.935164][T20109] Tainted: [W]=WARN [ 349.935170][T20109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 349.935184][T20109] ================================================================== [ 349.935202][T20127] EXT4-fs (loop9): Block reservation details [ 350.374034][T20127] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 350.468916][T16008] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.574157][T16008] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.668567][T16008] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.742287][T16008] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.819138][T16008] bridge_slave_1: left allmulticast mode [ 350.824817][T16008] bridge_slave_1: left promiscuous mode [ 350.830652][T16008] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.838541][T16008] bridge_slave_0: left allmulticast mode [ 350.844175][T16008] bridge_slave_0: left promiscuous mode [ 350.849939][T16008] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.955549][T16008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.965894][T16008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.975545][T16008] bond0 (unregistering): Released all slaves [ 350.983863][T16008] bond1 (unregistering): Released all slaves [ 351.068495][T16008] hsr_slave_0: left promiscuous mode [ 351.074560][T16008] hsr_slave_1: left promiscuous mode [ 351.080224][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.087895][T16008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.095402][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.102916][T16008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.112249][T16008] veth1_macvtap: left promiscuous mode [ 351.118087][T16008] veth0_macvtap: left promiscuous mode [ 351.124844][T16008] veth1_vlan: left promiscuous mode [ 351.130126][T16008] veth0_vlan: left promiscuous mode [ 351.193995][T16008] team0 (unregistering): Port device team_slave_1 removed [ 351.204801][T16008] team0 (unregistering): Port device team_slave_0 removed [ 351.586426][T16008] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.638604][T16008] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.692402][T16008] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.756180][T16008] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.833913][T16008] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.906170][T16008] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.992099][T16008] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.044260][T16008] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.130853][T16008] bridge_slave_1: left allmulticast mode [ 352.136547][T16008] bridge_slave_1: left promiscuous mode [ 352.142233][T16008] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.150323][T16008] bridge_slave_0: left allmulticast mode [ 352.156018][T16008] bridge_slave_0: left promiscuous mode [ 352.162018][T16008] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.170596][T16008] bridge_slave_1: left allmulticast mode [ 352.176384][T16008] bridge_slave_1: left promiscuous mode [ 352.182249][T16008] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.189957][T16008] bridge_slave_0: left allmulticast mode [ 352.195642][T16008] bridge_slave_0: left promiscuous mode [ 352.201406][T16008] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.471768][T16008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.481624][T16008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.491360][T16008] bond0 (unregistering): Released all slaves [ 352.500209][T16008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.510169][T16008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.519533][T16008] bond0 (unregistering): Released all slaves [ 352.620870][T16008] hsr_slave_0: left promiscuous mode [ 352.626608][T16008] hsr_slave_1: left promiscuous mode [ 352.632816][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.640294][T16008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.647936][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.655455][T16008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.663683][T16008] hsr_slave_0: left promiscuous mode [ 352.669280][T16008] hsr_slave_1: left promiscuous mode [ 352.674999][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.682574][T16008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.690122][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.697579][T16008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.708176][T16008] veth1_macvtap: left promiscuous mode [ 352.713659][T16008] veth0_macvtap: left promiscuous mode [ 352.719254][T16008] veth1_vlan: left promiscuous mode [ 352.724465][T16008] veth0_vlan: left promiscuous mode [ 352.730639][T16008] veth1_macvtap: left promiscuous mode [ 352.736263][T16008] veth0_macvtap: left promiscuous mode [ 352.830857][T16008] team0 (unregistering): Port device team_slave_1 removed [ 352.840609][T16008] team0 (unregistering): Port device team_slave_0 removed [ 352.890459][T16008] team0 (unregistering): Port device team_slave_1 removed [ 352.899803][T16008] team0 (unregistering): Port device team_slave_0 removed [ 353.433405][T16011] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.475472][T16011] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.550227][T16011] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.603033][T16011] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.699371][T16011] bridge_slave_1: left allmulticast mode [ 353.705018][T16011] bridge_slave_1: left promiscuous mode [ 353.710808][T16011] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.718916][T16011] bridge_slave_0: left allmulticast mode [ 353.724569][T16011] bridge_slave_0: left promiscuous mode [ 353.730253][T16011] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.806016][T16011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.816215][T16011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.826125][T16011] bond0 (unregistering): Released all slaves [ 353.918371][T16011] hsr_slave_0: left promiscuous mode [ 353.924164][T16011] hsr_slave_1: left promiscuous mode [ 353.929904][T16011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.937357][T16011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.945273][T16011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.952740][T16011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.962084][T16011] veth1_macvtap: left promiscuous mode [ 353.967630][T16011] veth0_macvtap: left promiscuous mode [ 353.973119][T16011] veth1_vlan: left promiscuous mode [ 353.978482][T16011] veth0_vlan: left promiscuous mode [ 354.038105][T16011] team0 (unregistering): Port device team_slave_1 removed [ 354.050066][T16011] team0 (unregistering): Port device team_slave_0 removed [ 356.007193][T16008] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.048740][T16008] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.122724][T16008] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.176507][T16008] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.315019][T16008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.324786][T16008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.334146][T16008] bond0 (unregistering): Released all slaves [ 356.342604][T16008] bond1 (unregistering): Released all slaves [ 356.390062][T16008] IPVS: stopping master sync thread 11845 ... [ 356.411586][T16008] hsr_slave_0: left promiscuous mode [ 356.417228][T16008] hsr_slave_1: left promiscuous mode [ 356.422975][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.430481][T16008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.438011][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.445514][T16008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.455267][T16008] veth1_macvtap: left promiscuous mode [ 356.460755][T16008] veth0_macvtap: left promiscuous mode [ 356.491198][T16008] pim6reg (unregistering): left allmulticast mode [ 356.513151][T16008] team0 (unregistering): Port device team_slave_1 removed [ 356.523285][T16008] team0 (unregistering): Port device team_slave_0 removed [ 356.553428][ T3375] lo speed is unknown, defaulting to 1000 [ 356.559327][ T3375] infiniband syz0: ib_query_port failed (-19)