last executing test programs: 59.039930056s ago: executing program 0 (id=1): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x2}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x7f, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x99, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x7, 0x10, 0x7, 0x1d9ceb2e, {{0x9, 0x4, 0x2, 0x9, 0x24, 0x66, 0x0, 0x3, 0x2f, 0x0, @loopback, @empty, {[@timestamp={0x44, 0x10, 0x74, 0x0, 0x6, [0x80000001, 0x5, 0x1ff]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000800)={@rand_addr, 0x0}, &(0x7f0000000840)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000008c0)=0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000000f000000050030000000000008000300", @ANYRES32=r15, @ANYBLOB="05002f"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x180, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000804) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYBLOB="00000000c3100600340012800b000100697036746e6c00002400028006000f0000000000080008000200000005000400520000000800070004000000"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x884) r16 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r16, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) 58.204737253s ago: executing program 0 (id=7): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000207f002500000000002020207b1af8ff00000000bfa100000000000007010000f85607ebe89727881cbacdff5d51fa161effffffb702000005000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=tcp']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') 57.841043041s ago: executing program 0 (id=9): bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffe3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) set_tid_address(0x0) r2 = gettid() r3 = gettid() tkill(r2, 0x12) tkill(r2, 0x1) tkill(r3, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r5, &(0x7f0000002800), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) rt_tgsigqueueinfo(0x0, 0x0, 0x24, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000001ff0), 0x10) 57.759477451s ago: executing program 0 (id=12): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x1c, r3, 0xc4fc9e906872338b, 0x10000, 0x0, {{0x15}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x4, 0xe018, 0x7, 0x6, 0xffffffab, 0x4, 0x8}, 0x1c) recvmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000940)=""/138, 0x8a}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000000a00)=""/159, 0x9f}, {&(0x7f0000000200)=""/66, 0x42}, {&(0x7f0000000ac0)=""/200, 0xc8}, {&(0x7f0000000bc0)=""/207, 0xcf}], 0x6, &(0x7f0000000180)}, 0x143) acct(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 57.241676179s ago: executing program 0 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000400)='ext4_load_inode\x00', r2, 0x0, 0x8000000}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x9d, &(0x7f0000000300)='trans=rdma,') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000701e0dd98b00"/44], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = fcntl$getown(r3, 0x9) sched_setscheduler(r5, 0x5, &(0x7f00000003c0)=0xfffffff8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x3d, 0x55d, &(0x7f0000000b00)="$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") creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 55.801544854s ago: executing program 0 (id=36): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff3800000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0xff07, 0x0, 0x0, 0x1ff, 0x0, "5f330000a90100f9"}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000280)=0x13) poll(&(0x7f0000000180)=[{r3, 0xc140}], 0x1, 0xe7f1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0xa) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x20800, 0x0) r9 = dup(r8) ioctl$PTP_EXTTS_REQUEST2(r9, 0x43403d05, 0x0) r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x204100, 0x0) r12 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x4a000, 0x40, 0x20}, 0x18) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xfffffffffffffeff, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c010000", @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES16=r5, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r6, @ANYBLOB="080001007063690011150200300180000030303a31302e300000000008008b00", @ANYRES32=r10, @ANYRES32=r1, @ANYRES32=r11, @ANYBLOB="000825bd7000fbdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008c00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES64=r9, @ANYRES32=r9, @ANYBLOB="0e0001006e657464657673696d0000000f317f3c71c90002006e657464657673696d30000008008a00", @ANYRES32=r12, @ANYBLOB], 0x13c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0x20000000000}, 0x11138a, 0x800, 0x4, 0x5, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 55.787747344s ago: executing program 32 (id=36): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff3800000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0xff07, 0x0, 0x0, 0x1ff, 0x0, "5f330000a90100f9"}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000280)=0x13) poll(&(0x7f0000000180)=[{r3, 0xc140}], 0x1, 0xe7f1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0xa) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x20800, 0x0) r9 = dup(r8) ioctl$PTP_EXTTS_REQUEST2(r9, 0x43403d05, 0x0) r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x204100, 0x0) r12 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x4a000, 0x40, 0x20}, 0x18) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xfffffffffffffeff, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c010000", @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES16=r5, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r6, @ANYBLOB="080001007063690011150200300180000030303a31302e300000000008008b00", @ANYRES32=r10, @ANYRES32=r1, @ANYRES32=r11, @ANYBLOB="000825bd7000fbdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008c00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES64=r9, @ANYRES32=r9, @ANYBLOB="0e0001006e657464657673696d0000000f317f3c71c90002006e657464657673696d30000008008a00", @ANYRES32=r12, @ANYBLOB], 0x13c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0x20000000000}, 0x11138a, 0x800, 0x4, 0x5, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 48.326855947s ago: executing program 3 (id=119): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x4, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) syz_open_dev$mouse(0x0, 0x9, 0x10000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='wbt_timer\x00', r2}, 0x18) sendto$inet(r1, &(0x7f0000000280)="3b81b02371abd7eecd3712ff98cfe04a121e037ebccae1ee6fbe6615b4c9dba2a0a043c380c4dfa8ce358977055fe36e5c2f4760cfe416428ddf4726b173b6bc1844e173796c263aaa1d4786100a5cdc97655d65d6b457af23701ce7c38f2cf4ca081c0f613267653bb8e9c7002907a2c323f7", 0x73, 0x4000080, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6], 0x22c}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) io_setup(0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 47.780894805s ago: executing program 3 (id=124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/60}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd71, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20044880) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, 0x0, 0x0) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000005580)) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) sendmsg$nl_xfrm(r8, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a002000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)={0x104, 0x2, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x252}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x12e}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xe}]}, @CTA_LABELS_MASK={0x10, 0x17, [0x9, 0x9, 0x3]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5256c67c}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4026}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xe}]}, @CTA_ZONE={0x6}, @CTA_TUPLE_MASTER={0x4}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}]}, 0x104}, 0x1, 0x0, 0x0, 0x404c051}, 0x2004c0c4) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) r10 = syz_open_pts(r5, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r10, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r10, 0x5406, &(0x7f00000001c0)={0xffff, 0x6, 0x4, 0x7, 0x19, "a69b35fd00"}) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000140)=0x4) 47.747558084s ago: executing program 3 (id=126): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r0, 0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000380), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000280)={{}, 0x78}, 0x10) (fail_nth: 8) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) 47.409097833s ago: executing program 4 (id=131): r0 = mq_open(&(0x7f0000000000)=')\x00', 0x40, 0x4, &(0x7f0000000040)={0x80, 0x6, 0x80000001, 0x7e5c}) pwrite64(r0, &(0x7f0000000080)="c9c3aa8728939d1b2477493b77723c949b0d4eb3b3fc3c0eeb02e3062e9e23d8e12a2962657a2dd9510365ce951072f270268b3ba5a979b9da6ff1d4a18dfadcba881094881d1f0423ffd1b20b1249837382382b70ff990b657c45bacc3b77b61cdec5a92bf9a6cde816e848ee12c41145a920cd59c85ce0fb28c9a0058e3008188a53d180cfdbde58bc4a2792881a251067680278ca8345bbf57e924f5f9688addf5a7ca533d2c4d22662dd71", 0xad, 0xffffffffffffffa8) (async) sysfs$1(0x1, &(0x7f0000000140)='^&\'\x00') (async) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/213, 0xd5, 0x3, &(0x7f00000002c0)={r1, r2+10000000}) io_setup(0x8001, &(0x7f0000000300)=0x0) io_pgetevents(r3, 0xfff, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)={0x0, 0x3938700}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x10001]}, 0x8}) (async) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000500)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000540)=0x6, 0x12) (async) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000580)) (async) r6 = fcntl$dupfd(r5, 0x406, r5) r7 = syz_clone(0x201800, &(0x7f00000005c0)="3dca4526d4a5ae4576bea73ca451888df7a195c80b9b91255b0364557102735bc1e52d915c7aa6392fd8dbc8247076b8", 0x30, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="f93f0debc1792cb19ac2d68d63b2a5af0beb785c8a92") (async) prctl$PR_GET_FP_MODE(0x2e) (async) ioctl$TCXONC(r5, 0x540a, 0x1) setsockopt$inet6_tcp_int(r6, 0x6, 0x4, &(0x7f00000006c0)=0x7fffffff, 0x4) io_uring_enter(r6, 0x1151, 0xdefe, 0x40, &(0x7f0000000700)={[0x7fffffffffffffff]}, 0x8) (async) getsockopt$inet6_tcp_int(r6, 0x6, 0x17, &(0x7f0000000740), &(0x7f0000000780)=0x4) (async) ioctl$TIOCCBRK(r5, 0x5428) (async) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000007c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x5, 0x5, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0x4, 0xff}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x200, 0xe, 0x0, 0x96, 0x20, 0x5}, 0xc, &(0x7f0000000840)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0xf, 0x3}]}, 0x1, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x816}}]}) (async) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000900)) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000ac0)={'sit0\x00', 0x0, 0x7, 0x8000, 0xa7d, 0xb44, {{0x1b, 0x4, 0x0, 0x26, 0x6c, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @private=0xa010100, {[@timestamp={0x44, 0xc, 0xe2, 0x0, 0x1, [0x4, 0x70]}, @cipso={0x86, 0x15, 0x3, [{0x0, 0xf, "a6fb786be7fb1e2a1a668b32df"}]}, @timestamp={0x44, 0x8, 0x98, 0x0, 0x9, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0xbc, 0x3, 0x1, [{@rand_addr=0x64010102, 0x4}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x1}, {@rand_addr=0x64010100, 0x8f95}, {@loopback, 0x8001}]}, @noop]}}}}}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c40)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x13, 0x5, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f22}, [@generic={0xd, 0xf, 0x7, 0x30, 0xd}, @alu={0x0, 0x0, 0x6, 0x7, 0x5, 0xfffffffffffffff4, 0x10}]}, &(0x7f0000000980)='GPL\x00', 0x9, 0xde, &(0x7f00000009c0)=""/222, 0x40f00, 0x48, '\x00', r8, @fallback=0x34, r6, 0x8, &(0x7f0000000bc0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000c00)={0x2, 0xc, 0x8, 0xb606}, 0x10, r9, r6, 0x1, &(0x7f0000000c80)=[r6, r6, 0x1, r5, r6, r6, r0, 0xffffffffffffffff, r6, r6], &(0x7f0000000cc0)=[{0x1, 0x1, 0x8, 0x6}], 0x10, 0x1, @void, @value}, 0x94) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000dc0)={0x0, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}]}) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000e00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x27, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0xcb, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0xfa}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x40, 0x3b}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x40, 0x5, 0x5}}]}}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x300, 0x1, 0x5, 0x83, 0x58, 0x3}, 0xa4, &(0x7f0000000e80)={0x5, 0xf, 0xa4, 0x1, [@generic={0x9f, 0x10, 0x1, "2b2d1b13ecbdba8f8c1ce10088610c9e847152df74f26e5687f1d415fa4b34eb321664a72f96ba9e9782840b6b2b6185a6561f397d2c7fd8ac6e4dabc20e705a0546f0aa6e43ce39620575fffd5551e8f763cc5c563168cbf1568574731d99748ff794f59ff54d4b5289d2c645553d663486fe49e789d7d9c0b520dfed0bd35f119b562c2a92bd4a67b5f55473424717a500ddea798918ebefd55eaa"}]}, 0x2, [{0x20, &(0x7f0000000f40)=@string={0x20, 0x3, "dbde34aeba64e9769494e450eed4302d9a6486b310b0419d99bdc15872b9"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x443}}]}) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x32, &(0x7f0000001000)=0xffffffff, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001100)={'syztnl1\x00', &(0x7f0000001040)={'syztnl0\x00', r8, 0x0, 0x40, 0xe5a, 0x81, {{0x27, 0x4, 0x3, 0x39, 0x9c, 0x66, 0x0, 0x1, 0x31da67c87dc93cb6, 0x0, @remote, @empty, {[@ssrr={0x89, 0xb, 0xc8, [@broadcast, @private=0xa010102]}, @noop, @end, @ssrr={0x89, 0x7, 0x76, [@multicast2]}, @rr={0x7, 0x1f, 0x4e, [@remote, @remote, @private=0xa010102, @multicast2, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x54, 0x77, 0x3, 0x1, [{@rand_addr=0x64010101, 0x6}, {@empty}, {@private=0xa010100, 0x2}, {@private=0xa010102, 0x9}, {@local, 0xf60}, {@multicast2, 0x9}, {@multicast2, 0xf}, {@rand_addr=0x64010101, 0x1ff}, {@rand_addr=0x64010100, 0xa9e8}, {@broadcast, 0xa7f8}]}]}}}}}) (async) timer_create(0x1, &(0x7f0000001140)={0x0, 0x8, 0x2, @tid=r7}, &(0x7f0000001180)=0x0) timer_delete(r10) 47.397938403s ago: executing program 3 (id=132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x2}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x7f, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x99, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x7, 0x10, 0x7, 0x1d9ceb2e, {{0x9, 0x4, 0x2, 0x9, 0x24, 0x66, 0x0, 0x3, 0x2f, 0x0, @loopback, @empty, {[@timestamp={0x44, 0x10, 0x74, 0x0, 0x6, [0x80000001, 0x5, 0x1ff]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000800), &(0x7f0000000840)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000008c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000f000000050030000000000008000300", @ANYRES32=r5, @ANYBLOB="05002f"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 47.397607803s ago: executing program 3 (id=133): r0 = getpid() iopl(0x3) tkill(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) 47.381411873s ago: executing program 3 (id=134): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) unshare(0x22020600) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b2f113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a89b60317cd78ea1dc8e0f77f2c1e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2002045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f6b43ec83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea5919ffff72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff153d20f3681f7a3a31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16], &(0x7f0000000140)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0xffffffffffffff1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0x1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10, 0x0, 0x8000000000000000}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@noxattr}, {@version_u}, {@access_any}, {@cachetag={'cachetag', 0x3d, '\''}}, {@cache_none}, {@nodevmap}]}}) write$P9_RLERRORu(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) msgget$private(0x0, 0x20) statx(r2, &(0x7f0000000100)='./file0\x00', 0x0, 0x400, &(0x7f0000000740)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@local, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000640)) 47.293591293s ago: executing program 4 (id=135): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0xff, 0x4}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmmsg$inet6(r2, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000240)="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", 0xfeb}], 0x1}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="6db6", 0x2}], 0x1}}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) rmdir(0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000b9a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000200)=0x5f) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001200576d100000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000002000255000008001d00ca0e00000a000100bbbbbbbbbbbb0000080003"], 0x3c}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8957) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 46.48240345s ago: executing program 4 (id=144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x2}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x7f, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x99, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x7, 0x10, 0x7, 0x1d9ceb2e, {{0x9, 0x4, 0x2, 0x9, 0x24, 0x66, 0x0, 0x3, 0x2f, 0x0, @loopback, @empty, {[@timestamp={0x44, 0x10, 0x74, 0x0, 0x6, [0x80000001, 0x5, 0x1ff]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000800), &(0x7f0000000840)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000008c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000f000000050030000000000008000300", @ANYRES32=r5, @ANYBLOB="05002f"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 46.45323489s ago: executing program 4 (id=145): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001801000000000000180000001800000002000000000000000000000d020000000000000000000005fa0d00000000"], &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x1, 0x0, @void, @value}, 0x28) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'lo\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000700000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f8a33409a4b34d0932000000001000"/37], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000180), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x2b, 0x1, 0x0) close(r6) r7 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1100000000000000004003001100000000000000000000001c00000000000000000f00fdffff07007d4dd2265e5bf769afe4fa4249b936c862833e4ad8e30eca71b4caaf73646f9ca31b809e7fabe18cbbbf486472d04f62df85c899085bc324090815b62bf04d556bdbbc5f62a33e4d8f506b8f3aa4efc38468f35593a106f0baeddaf408334128566ce34d145909b06c1d55cc9b7ea2e753aa950d5590b035ff3735d64da2540a474ca7cf95873174435c6e7c4dc0f7c6faae3e8548ecd58847b7b4593380110771667b55a0ebbdc95926ca0ecdfe", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f020c000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000084000000070000009404000044100000000000000000000000000000000000001100000000000000000001160100"/76], 0x98}, 0x4dc) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r6) sendmsg$can_bcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@gettaction={0x74, 0x32, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e80}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x74}}, 0x40000) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80a, &(0x7f00000003c0), 0x1, 0x796, &(0x7f0000000c40)="$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") r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000000), &(0x7f0000000100)=r9}, 0x20) 46.337592339s ago: executing program 4 (id=146): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x380, 0x110, 0xf}, 0x18) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x8100) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x105840, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu--0\t\t\t') openat(r1, 0x0, 0x450801, 0x52abe154ad664f65) 46.186527659s ago: executing program 4 (id=147): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) lchown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) 46.173505559s ago: executing program 33 (id=147): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) lchown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) 31.833359437s ago: executing program 34 (id=134): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) unshare(0x22020600) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16], &(0x7f0000000140)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0xffffffffffffff1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0x1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10, 0x0, 0x8000000000000000}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@noxattr}, {@version_u}, {@access_any}, {@cachetag={'cachetag', 0x3d, '\''}}, {@cache_none}, {@nodevmap}]}}) write$P9_RLERRORu(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) msgget$private(0x0, 0x20) statx(r2, &(0x7f0000000100)='./file0\x00', 0x0, 0x400, &(0x7f0000000740)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@local, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000640)) 2.279218519s ago: executing program 1 (id=843): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r2], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='fsi_master_gpio_break\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) getpgrp(0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r3], 0x48) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a00)={0x1034, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}]}, 0x1034}, 0x1, 0x0, 0x0, 0x20}, 0x80) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) r10 = inotify_init() r11 = inotify_add_watch(r10, &(0x7f00000000c0)='./file0\x00', 0x20000002) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000044d900000000000000000a20000000000a03000000000060000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2c001280140001800c000100636f756e746572000400028014000180090001006c617374000000000400028008000340000001"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20050800) inotify_rm_watch(r10, r11) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.937244377s ago: executing program 7 (id=854): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xfffffffffffffeb2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x4028840, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) socket$nl_route(0x10, 0x3, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000250000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20) r6 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) io_uring_setup(0x4896, &(0x7f00000003c0)={0x0, 0xfcd3, 0x3}) 1.915159747s ago: executing program 2 (id=856): mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000480)=0x4, 0x4e, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000d80)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000a80)=0xe8) r3 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000e80)={[{@user_xattr}, {@data_ordered}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0xb, 0x30, 0x32, 0x38, 0x2f, 0x32], 0x2d, [0x34, 0x30, 0x32, 0x65], 0x2d, [0x33, 0x32, 0x557ac6fe166c31e6, 0x66], 0x2d, [0x34, 0x65, 0x63, 0x30], 0x2d, [0x4891d870394e93e3, 0x61, 0x33, 0x31, 0x31, 0x33, 0x61, 0x37]}}}, {@smackfshat={'smackfshat', 0x3d, '@]/\',('}}, {@uid_gt={'uid>', r2}}, {@smackfsroot={'smackfsroot', 0x3d, '-'}}, {@subj_type={'subj_type', 0x3d, '!-:\\)-/,@$!^\'{{'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'jqfmt=vfsv0'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}, 0x4, 0x4eb, &(0x7f0000000f80)="$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") listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x11) r4 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x802, &(0x7f00000004c0)={[{@noblock_validity}, {@dioread_nolock}, {@nobh}, {@minixdf}, {@nobh}, {@i_version, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [{@fsname={'fsname', 0x3d, '9p\x00'}}], 0x2c}, 0x1, 0x452, &(0x7f0000001900)="$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") setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000a40), 0x8) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000ac0)=0x100) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x8c0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRESDEC=r3, @ANYBLOB="2c776605006f3d26cc5d983094307d93bb953bae17507f2c8fdfcb3496e92ab8cfdc", @ANYRES16=r4, @ANYRES64=r3, @ANYRES64=r0, @ANYRES16=r0]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000100)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) 1.840911337s ago: executing program 7 (id=859): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r4}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x24200, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) 1.692116047s ago: executing program 2 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000b103000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) eventfd2(0x0, 0x0) (fail_nth: 13) 1.679212896s ago: executing program 7 (id=862): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) (async) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x4]}, &(0x7f00000000c0), 0x8) 1.344270175s ago: executing program 1 (id=863): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x7f, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x99, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f000000050030000000000008000300", @ANYRES32=r5, @ANYBLOB="05002f"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.241349825s ago: executing program 1 (id=865): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r2}}, './file0/file0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) pipe(&(0x7f0000000040)) setfsgid(0xee00) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffff0001}}, &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.214295115s ago: executing program 2 (id=867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000580)="5308bd", 0x3, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000001600008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x110, &(0x7f0000000680)={0x0, 0xcfb6, 0x10, 0x4, 0xfffffff9}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0x6000}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="90", 0x1, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}], 0x1, 0x40000) shutdown(r1, 0x1) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000340)="05000806", 0x4, 0x20000084, &(0x7f0000000080)={0x11, 0x8100, r8, 0x306}, 0x14) 1.033512274s ago: executing program 1 (id=870): r0 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x3, 0x7, 0x301, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x2c}}, 0x24000014) 1.006831244s ago: executing program 1 (id=873): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r2], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='fsi_master_gpio_break\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) getpgrp(0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r3], 0x48) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a00)={0x1034, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}]}, 0x1034}, 0x1, 0x0, 0x0, 0x20}, 0x80) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) r10 = inotify_init() r11 = inotify_add_watch(r10, &(0x7f00000000c0)='./file0\x00', 0x20000002) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000044d900000000000000000a20000000000a03000000000060000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2c001280140001800c000100636f756e746572000400028014000180090001006c617374000000000400028008000340000001"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20050800) inotify_rm_watch(r10, r11) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 999.922264ms ago: executing program 2 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='nilfs2_mdt_submit_block\x00', r4}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4018, r5}, 0x18) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000002c0)={r7, 0x7, 0xffff, 0x7}) r9 = socket$inet(0x2, 0x3, 0x4) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) mq_timedsend(r8, &(0x7f00000006c0)="a652be478e588a437b412e443db798aa1291a79e875e5dabed8e2f384403a516dee5d3ceb6b5d309572c16903ec2742b630e7247b61f1d5d706a621ee670dfba67d9a02b9c3fffae464497aeae38fdc1fd94c6f44d73e2f1d1672c4b9918d3eb04264702eff6c01072a706ddec970e86e24910a90adb16756e3eeb5289c96389ad38b9fa8c9ead8c04d5f34e82ecf79f7b30501fd555320f4801003c", 0x9c, 0xd778, &(0x7f0000000800)={r12, r13+10000000}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000640)={'syztnl1\x00', r11, 0x20, 0x40, 0x1ff, 0x8, {{0x6, 0x4, 0x3, 0x3, 0x18, 0x66, 0x0, 0xb, 0x4, 0x0, @multicast1, @multicast1, {[@noop]}}}}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r14 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r14, 0x80044940, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 796.269023ms ago: executing program 7 (id=877): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0xffe4, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2000000, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x4}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x40, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000633c77fbac141412e000002062079f4b4d2f87e5feca6aab845013f2325f1a3903050b038da1880b2518", 0x0, 0xfe, 0x60000000, 0x3f, 0x51, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x50) 767.702983ms ago: executing program 7 (id=880): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000240)={0x18, 0x0, {0x0, @random="21b5fca301be", 'bridge_slave_1\x00'}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)={@map=r3, r4, 0x26, 0x0, 0x0, @void, @value=r4}, 0x20) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r5}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'veth1_to_bridge\x00'}}, 0x1e) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x4, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r10 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r10, &(0x7f0000000000)={0x1d, r9}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000900)='kfree\x00', r11, 0x0, 0x6}, 0x18) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x40044) getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r13, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r14, 0x29, 0xe8, 0x6, 0x7, 0x9, @mcast1, @mcast2, 0x10, 0x10, 0x2, 0x10}}) fcntl$getown(r7, 0x9) 681.567703ms ago: executing program 5 (id=882): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000080)=0xc) sendmmsg$unix(r2, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}}], 0x1, 0x4) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) pipe2$watch_queue(&(0x7f0000000500), 0x80) (async) pipe2$watch_queue(&(0x7f0000000500), 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) inotify_init1(0x0) (async) r7 = inotify_init1(0x0) close_range(r7, 0xffffffffffffffff, 0x0) (async) close_range(r7, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x488, 0xffffffff, 0x0, 0x230, 0x0, 0xfeffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x2f2, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xfffffffe, 0x7, 0x6, 0x1, 0x0, "da5313299b547a92e157839f82d6a5f10cffc90ea05385ee24d2532f4e0e97f0278a28e718fbcc681e1e990cecd520710c94f540d200ab848b9de2688c9cc40f"}}}, {{@ipv6={@mcast1, @loopback, [], [], 'netdevsim0\x00', 'geneve0\x00', {}, {}, 0x0, 0x96}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x45, 0x1}}, @common=@srh1={{0x90}, {0x3c, 0x8, 0x3, 0x0, 0x8000, @mcast1, @mcast2, @mcast1, [0xff, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], 0x1000, 0x88}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 679.253823ms ago: executing program 5 (id=883): r0 = socket(0x1e, 0x4, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./control\x00', 0x404, &(0x7f00000003c0)={[{@errors_remount}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@grpquota}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r3 = epoll_create(0x9) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000380)={r3, r2, 0x5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, r6, 0x209}, 0x14}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) unlink(&(0x7f0000000180)='./file1\x00') r8 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x30040) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f00000002c0)={0x52, 0x95, 0x4, {0x401, 0x5}, {0xd, 0x8000}, @cond=[{0x1, 0x7, 0x7, 0x3, 0x3}, {0x7, 0x8, 0xdf0, 0x2afe, 0x7, 0x7}]}) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r12}, 0x10) getrandom(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r10}, 0x0, 0x0}, 0x20) 659.611403ms ago: executing program 7 (id=884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000580)="5308bd", 0x3, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000001600008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x110, &(0x7f0000000680)={0x0, 0xcfb6, 0x10, 0x4, 0xfffffff9}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0x6000}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="90", 0x1, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}], 0x1, 0x40000) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000340)="05000806", 0x4, 0x20000084, &(0x7f0000000080)={0x11, 0x8100, r8, 0x306}, 0x14) 559.712762ms ago: executing program 6 (id=885): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000800000008f6de1482f57c0686ed73341e822be41372a2f406dbf27bc5cbc37e98328b1e302230442af41cd5442034473680f6d818ba923aceee498e8df7639709c693b9d2bbf2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x401}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00002caac36640851d9e100000000800030006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x101002) r6 = dup(r5) r7 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='kmem_cache_free\x00', r8}, 0x18) close(r7) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0xf00, 0x2, 0x0, 0x3000000, 0x0}) r9 = socket(0x10, 0x3, 0x0) semop(0xffffffffffffffff, &(0x7f00000003c0)=[{0x3, 0x9c06, 0x1000}, {0x4, 0x9, 0x1000}, {0x3, 0xbc9, 0x1800}, {0x3, 0x323c, 0x800}, {0x3, 0x7}], 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/rcu_normal', 0x88000, 0x1fb) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xfff1, 0x5}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_NAT={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r9], 0x30}}, 0x0) 509.711522ms ago: executing program 5 (id=886): r0 = inotify_init() close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 495.624162ms ago: executing program 6 (id=887): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_pts(0xffffffffffffffff, 0x4200) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)=0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xfffe, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 474.452872ms ago: executing program 6 (id=888): r0 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0x1, 0xfe, 0x1, 0x0, 0x1000000) 413.392642ms ago: executing program 5 (id=889): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, 0x0, 0x0, 0x3fff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000940)={0x5, 0x5, 0x4, 0x1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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") r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0xc4c9cc21ef8230a8, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f82f8787e9079670af2c3a638a534b73a7c8cb980242d6e740fe1b0d6542e48c3fbcc0220ac18188b38e847b27aad727bf397489d1af0f9cf6aa13687e5a2806fd93e8d70e5d9eeddc9420362bcf6e2593e6661e24f8d5442409d54d17ee9e96ec81c55378be14a61921484c1a0c72e4fd55351cc83e22e8186f7334b03d0439d42d4372d66cdf4487f0373f16755c11"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000040) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setuid(0xee01) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r7, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$packet_int(r1, 0x107, 0x13, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000980)=@gcm_256={{0x303}, "ce9c95be5899d49e", "668cc0467b10729dd895a7e7c37ec0b5f1f7c354a5804b1d3e9816d1bc70c82f", "acbf1b2b", "45981671095f56fe"}, 0x38) listen(r4, 0xffff) 412.661752ms ago: executing program 6 (id=890): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000060000000000009c00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000840)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES16=r2, @ANYRES32=r3, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0x80}}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) msgrcv(0xffffffffffffffff, &(0x7f0000000940)={0x0, ""/86}, 0x5e, 0x3, 0x3800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000004000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv2(r7, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/164, 0xa4}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000280)=""/2, 0x2}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/36, 0x24}, {&(0x7f0000000580)=""/73, 0x49}, {&(0x7f0000000600)=""/129, 0x81}, {&(0x7f0000000400)=""/17, 0x11}, {&(0x7f0000000740)=""/64, 0x40}], 0xa, 0x29262345, 0x10, 0x11) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mlockall(0x7) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) 342.001452ms ago: executing program 5 (id=891): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x27, 0xb, &(0x7f0000000640)=ANY=[@ANYRES64, @ANYBLOB="1800000000000000000000000000000018016ed21318000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095", @ANYRES8, @ANYRESDEC, @ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8"], &(0x7f0000000000)='GPL\x00', 0xd, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000005c0)='\x8don\x00\xdb\xf8\xe1\x8e\xe6\r\x9dg\xac\x8c<\xd6vb7\xa0\xd71t\xe5\x92o?\x1c\xad5\xd9%\xdf\xab\x04\xc7\x9dX\r\x97$\xeaw\xff\xfb4\x12\x8c\x8a\x89\x96\xa89\xe2nV\xf6\xe1\x9d\xb1\xfd\x91\xde\x87\xbbR\xafy+\xdf\xe2h\xfd\x00\x81\x9ec7\x05\xd89\xa6y:\xea>\xeeM\xa5oc\xb6\n)\xae\xfa\xf4y\xacS\x02$\xa9\xb0\x13\xd9a!\xb9\xedu\x18\x19\xe1\x9d', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffdfffffffff, r0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r6) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000280)=0x37) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000500)={0x6, 0xffff, 0x0, 'queue0\x00', 0x954}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) write$sndseq(r7, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32={[0x0, 0x1000000]}}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000740)={0xa, 0x3, 0x2}) syz_open_dev$sg(0x0, 0x0, 0x401) 341.633822ms ago: executing program 2 (id=892): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000240)=[{0xa, 0x3, 0x0, 0x0, @tick=0x4, {}, {}, @ext={0x1000, &(0x7f0000001a40)="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"}}, {0x0, 0x0, 0x0, 0xf, @time={0x0, 0x5}, {}, {}, @quote}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2275, &(0x7f00000018c0)) r2 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r2, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffd, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) 256.931312ms ago: executing program 2 (id=893): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="54010000100013070000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000000000000000000000a000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000100000000000000fe8000000000000000000000000000bbacec0f79641bb618c4b531252ff59264553be6c45e358ffb169654833838ee"], 0x154}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000000002000", @ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="0000000001"], 0x80}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x90200, 0x88, 0x1}, 0x18) move_mount(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', r9, &(0x7f0000000500)='./file0\x00', 0xa6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r11, &(0x7f0000001140), 0x700, 0x2, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000320b00"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) r12 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r12, 0x0, 0x0, 0x0, 0x0) 247.672591ms ago: executing program 6 (id=894): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000400)="1ea0f835b4e985a8309629d30ebaabfa025c5072df2ae22527e759698c9972df48de3e14f7d518f4f96df1bb3ac2f88239379bb63160ce62005f7df854beff5296768da39635a37647e0487663c4e4bdd287d0c178aacce4e7343dd349386ab8e286bbc2cb970af1251c8d983561e2b3ee9bccc69d289c44bd7555c28e97f5864dbaa0df30024b96234c02db56755091bb2bc1b98b34fd2375f254f199c2a1049b1d797dce7ef5fe368e15c5658fd4a49e06048f6ff13fa162ffddbdcb13c8a7728496856c5f9d037cb3110efb69f1ead6afc2cdb5f826b5fadedf19a18af54a48b9ee886d9d377ada64", 0xea}, {&(0x7f0000000180)="635f836acffc2a98", 0x8}, {&(0x7f0000000300)="b319f6b80c8dcb30ff952bfd6f0be6c11e7bf6235d61fc398f82d40a1d679e55fab945458ca70fe4c2eec490017a0ad5dd4ea66beb3580bd8a10c972aaff892b9777b86d22ba18048d1db5802ef4ad6f5c217cd174a8b19d7b680f12af8818f891ca7a2448d5396ddb3225d3b7d21748f671012209bb23d5e7582e0e036b72fb32024bcc1509479d2f19d7a07ec1b823e20b1dd88a2a510be264d1f7bbf57d05628c00f7627a5cf46760c9fe8d4270ef200d32c9b38f8601e3c8d2b99f724d80", 0xc0}, {&(0x7f00000001c0)="0e713a0fe3c296e3ed7d54841c54f467f356d5ef88fe907008cf49c369fa225590db99ef178e1a26551badb4b7179fcc0f132d943d07ccfa9748a1d7c57f717ebcf3f43c344bfa71154c18bc3351f68ebec3ff107b94293cab654a534f840260419271fd52a03f26d4e2a1", 0x6b}], 0x4, &(0x7f0000000680)=[{0x100, 0x102, 0x8d, "83159b5d4e91b159f213d6243ae21d18b69c752d887da01b56eac6c199984fb9e3c7542f402793cebc92d03d739ec3fc3531488ebb9d88dff4d03cca2ca404fd99f83f2f50db8dbc7c9a6cb4256c25e31b606c6924be868e0d8c81d5cad008004c23b882600372978a7de7816f08672c5e6cc5e6aa0263bb46382f7b382142a8592658235ee07c021e4768889e8a9d51aa63739d8837a07054edfe7f8e5d81161a994191a9b7f68a4c5c3c429f70a00a1bdfe6b6fdfeab052b2aaa424fd4b28918d02aa96b9166d1b432305a8149c8163e9f0e539437e44cc899da3a5089e1078cb91e332fb45ad18ca783"}, {0xa8, 0x29, 0x2, "105caa835cd401630cdccd085696057d5d2256af2d0476a6a8a73023fef0ff38039914b9757da621657bbe8a774f8e24408a2ee787e95ced96075b9fa5e5cf266485f4caf52152127ebc2b9b8a2b02d4002a30eed8922a8fbca67f086ed68dd6bbc6c23c39247c7e9816246d46f7e32191e141a612199e8a4bfffdadbb7fd9ff31781a4827f8509182b7ef4557fd8f60cf4a39f5b4"}, {0xe0, 0x111, 0x6, "2481ea3725f42ec1b6ac8e08c4a59675e8554daab7f11c17562fdb42ce3d7b4daf814221dc573ea114962b9587204172b6f460266220920b0c4d61f4fa07f137dc3545f558b615f82d3be93b64bf9badbea3a91e5cac5b711e3d06358ba90e139a220a30c114a51470327ef2ce6c48f25726ecf5999aeaee27b8288982bf6e36d28c714febec35d0703ef14808e87d627ef5f78e50edc1771836b2937bbec9461de2038a3f631b129998fb51aeee29e83067f6f7f21c966179e7615ec7c2286f83a0b90eebac91b36422"}], 0x288}, 0x4000000) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x20c593, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRES32=r0, @ANYRES64, @ANYRES8, @ANYRES64=r1, @ANYRESDEC], 0x1, 0x1207, &(0x7f0000002dc0)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 126.38252ms ago: executing program 1 (id=895): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x48800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) (fail_nth: 1) 37.49727ms ago: executing program 5 (id=896): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) close(r0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000000)=0x13) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2000000000000100, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffc}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000080)='GPL\x00', 0x5, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r4}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000fb0c00000000000000000000ffcdf2000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r3], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRES16=r7, @ANYRES32=r6, @ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) r9 = syz_io_uring_setup(0x3ddf, &(0x7f0000000440)={0x0, 0xb949, 0x80, 0x0, 0x222}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r9, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r9, 0x4ac9, 0x0, 0x5, 0x0, 0x0) r12 = socket$inet(0xa, 0x801, 0x84) connect$inet(r12, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r12, 0x8) listen(r12, 0xfffffffd) accept4(r12, 0x0, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r13 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r13, 0x107, 0x8, 0x0, &(0x7f0000000240)) 37.247961ms ago: executing program 35 (id=896): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) close(r0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000000)=0x13) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2000000000000100, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffc}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000080)='GPL\x00', 0x5, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r4}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000fb0c00000000000000000000ffcdf2000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r3], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRES16=r7, @ANYRES32=r6, @ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) r9 = syz_io_uring_setup(0x3ddf, &(0x7f0000000440)={0x0, 0xb949, 0x80, 0x0, 0x222}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r9, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r9, 0x4ac9, 0x0, 0x5, 0x0, 0x0) r12 = socket$inet(0xa, 0x801, 0x84) connect$inet(r12, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r12, 0x8) listen(r12, 0xfffffffd) accept4(r12, 0x0, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r13 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r13, 0x107, 0x8, 0x0, &(0x7f0000000240)) 0s ago: executing program 6 (id=898): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000ff0f000005"], 0x48) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x80}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x80000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x101}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {0x3}, {}, {}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x18, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, {0x2, r9}}) io_uring_enter(0xffffffffffffffff, 0x10002def, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): TASK> [ 66.658585][ T5818] dump_stack_lvl+0xf2/0x150 [ 66.663315][ T5818] dump_stack+0x15/0x1a [ 66.667577][ T5818] should_fail_ex+0x223/0x230 [ 66.672310][ T5818] should_failslab+0x8f/0xb0 [ 66.676946][ T5818] __kmalloc_noprof+0xab/0x3f0 [ 66.681733][ T5818] ? unix_bind+0x171/0x870 [ 66.686196][ T5818] unix_bind+0x171/0x870 [ 66.690661][ T5818] __sys_bind+0x10c/0x190 [ 66.695019][ T5818] __x64_sys_bind+0x41/0x50 [ 66.699621][ T5818] x64_sys_call+0x20ab/0x2dc0 [ 66.704324][ T5818] do_syscall_64+0xc9/0x1c0 [ 66.708985][ T5818] ? clear_bhb_loop+0x55/0xb0 [ 66.713708][ T5818] ? clear_bhb_loop+0x55/0xb0 [ 66.718432][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.724420][ T5818] RIP: 0033:0x7ff7423e5d29 [ 66.728853][ T5818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.748484][ T5818] RSP: 002b:00007ff740a51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 66.757035][ T5818] RAX: ffffffffffffffda RBX: 00007ff7425d5fa0 RCX: 00007ff7423e5d29 [ 66.765040][ T5818] RDX: 000000000000006e RSI: 0000000020000300 RDI: 0000000000000006 [ 66.773020][ T5818] RBP: 00007ff740a51090 R08: 0000000000000000 R09: 0000000000000000 [ 66.781309][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.789334][ T5818] R13: 0000000000000000 R14: 00007ff7425d5fa0 R15: 00007fff5f40c7f8 [ 66.797323][ T5818] [ 66.848088][ T5824] syz.2.464[5824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.850847][ T5824] netlink: 96 bytes leftover after parsing attributes in process `syz.2.464'. [ 66.918973][ T5824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=5824 comm=syz.2.464 [ 66.942816][ T5821] syzkaller0: tun_chr_ioctl cmd 2147767511 [ 67.012579][ T5836] netlink: 'syz.2.467': attribute type 13 has an invalid length. [ 67.021331][ T5836] gretap0: refused to change device tx_queue_len [ 67.025673][ T5837] loop5: detected capacity change from 0 to 512 [ 67.028073][ T5836] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 67.075019][ T5837] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.141019][ T5849] xt_TPROXY: Can be used only with -p tcp or -p udp [ 67.202002][ T5853] loop2: detected capacity change from 0 to 256 [ 67.271630][ T5857] loop2: detected capacity change from 0 to 512 [ 67.279783][ T5857] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.298112][ T5857] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.473: invalid indirect mapped block 4294967295 (level 1) [ 67.319233][ T5857] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.473: invalid indirect mapped block 4294967295 (level 1) [ 67.338308][ T5857] EXT4-fs (loop2): 2 truncates cleaned up [ 67.349085][ T5857] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.473: bg 0: block 5: invalid block bitmap [ 67.365001][ T5857] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 67.568834][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 67.568853][ T29] audit: type=1400 audit(1735238997.990:3062): avc: denied { write } for pid=5863 comm="syz.2.475" path="socket:[11653]" dev="sockfs" ino=11653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.648609][ T5864] Falling back ldisc for ttyS3. [ 67.805913][ T3547] EXT4-fs unmount: 24 callbacks suppressed [ 67.805936][ T3547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.023696][ T5870] netlink: 'syz.1.479': attribute type 13 has an invalid length. [ 68.813619][ T5870] gretap0: refused to change device tx_queue_len [ 68.820081][ T5870] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 69.244325][ T5879] loop7: detected capacity change from 0 to 512 [ 69.289342][ T5879] EXT4-fs: Ignoring removed oldalloc option [ 69.312873][ T29] audit: type=1400 audit(1735238999.760:3063): avc: denied { validate_trans } for pid=5881 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 69.372703][ T5879] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.480: Parent and EA inode have the same ino 15 [ 69.392985][ T5880] loop5: detected capacity change from 0 to 512 [ 69.414536][ T29] audit: type=1326 audit(1735238999.860:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c6665d29 code=0x7ffc0000 [ 69.446995][ T5879] EXT4-fs (loop7): 1 orphan inode deleted [ 69.453597][ T29] audit: type=1326 audit(1735238999.880:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09c6664690 code=0x7ffc0000 [ 69.463186][ T5880] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.478: casefold flag without casefold feature [ 69.476999][ T29] audit: type=1326 audit(1735238999.880:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f09c6667557 code=0x7ffc0000 [ 69.500252][ T5879] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.512793][ T29] audit: type=1326 audit(1735238999.880:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09c6665d29 code=0x7ffc0000 [ 69.538893][ T5880] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.478: couldn't read orphan inode 15 (err -117) [ 69.548029][ T29] audit: type=1326 audit(1735238999.880:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f09c6667557 code=0x7ffc0000 [ 69.548107][ T29] audit: type=1326 audit(1735238999.880:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f09c666498a code=0x7ffc0000 [ 69.606673][ T29] audit: type=1326 audit(1735238999.880:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c6665d29 code=0x7ffc0000 [ 69.630123][ T29] audit: type=1326 audit(1735238999.880:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c6665d29 code=0x7ffc0000 [ 69.654238][ T5311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.663640][ T5880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.698544][ T5904] bpf_get_probe_write_proto: 5 callbacks suppressed [ 69.698562][ T5904] syz.7.488[5904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.705359][ T5904] syz.7.488[5904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.718228][ T5904] syz.7.488[5904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.796967][ T5902] FAULT_INJECTION: forcing a failure. [ 69.796967][ T5902] name failslab, interval 1, probability 0, space 0, times 0 [ 69.820935][ T5902] CPU: 0 UID: 0 PID: 5902 Comm: syz.1.487 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 69.831552][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.841693][ T5902] Call Trace: [ 69.841705][ T5902] [ 69.841715][ T5902] dump_stack_lvl+0xf2/0x150 [ 69.849416][ T5904] loop7: detected capacity change from 0 to 512 [ 69.853023][ T5902] dump_stack+0x15/0x1a [ 69.863450][ T5902] should_fail_ex+0x223/0x230 [ 69.868248][ T5902] should_failslab+0x8f/0xb0 [ 69.872950][ T5902] __kmalloc_cache_node_noprof+0x56/0x320 [ 69.878705][ T5902] ? __get_vm_area_node+0xfb/0x1c0 [ 69.883858][ T5902] __get_vm_area_node+0xfb/0x1c0 [ 69.888913][ T5902] __vmalloc_node_range_noprof+0x280/0xe80 [ 69.894860][ T5902] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 69.900446][ T5902] ? mntput_no_expire+0x70/0x3c0 [ 69.905574][ T5902] ? avc_has_perm_noaudit+0x1cc/0x210 [ 69.910988][ T5902] ? selinux_capable+0x1f2/0x260 [ 69.915953][ T5902] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 69.921523][ T5902] __vmalloc_noprof+0x5e/0x70 [ 69.926262][ T5902] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 69.931883][ T5902] bpf_prog_alloc_no_stats+0x49/0x380 [ 69.937275][ T5902] ? bpf_prog_alloc+0x28/0x150 [ 69.942167][ T5902] bpf_prog_alloc+0x3a/0x150 [ 69.946851][ T5902] bpf_prog_load+0x4d1/0x1070 [ 69.951622][ T5902] ? __rcu_read_unlock+0x4e/0x70 [ 69.956669][ T5902] __sys_bpf+0x463/0x7a0 [ 69.960940][ T5902] __x64_sys_bpf+0x43/0x50 [ 69.965437][ T5902] x64_sys_call+0x2914/0x2dc0 [ 69.970140][ T5902] do_syscall_64+0xc9/0x1c0 [ 69.974655][ T5902] ? clear_bhb_loop+0x55/0xb0 [ 69.979361][ T5902] ? clear_bhb_loop+0x55/0xb0 [ 69.984138][ T5902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.990069][ T5902] RIP: 0033:0x7f09c6665d29 [ 69.994538][ T5902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.014188][ T5902] RSP: 002b:00007f09c4c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.022767][ T5902] RAX: ffffffffffffffda RBX: 00007f09c6856160 RCX: 00007f09c6665d29 [ 70.030933][ T5902] RDX: 0000000000000090 RSI: 0000000020000600 RDI: 0000000000000005 [ 70.038950][ T5902] RBP: 00007f09c4c8f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.046948][ T5902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.055174][ T5902] R13: 0000000000000000 R14: 00007f09c6856160 R15: 00007ffcd5056268 [ 70.063219][ T5902] [ 70.066444][ T5902] syz.1.487: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 70.082531][ T5902] CPU: 0 UID: 0 PID: 5902 Comm: syz.1.487 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 70.093154][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.103226][ T5902] Call Trace: [ 70.106513][ T5902] [ 70.109516][ T5902] dump_stack_lvl+0xf2/0x150 [ 70.114141][ T5902] dump_stack+0x15/0x1a [ 70.118344][ T5902] warn_alloc+0x145/0x1b0 [ 70.122782][ T5902] __vmalloc_node_range_noprof+0x2a5/0xe80 [ 70.128618][ T5902] ? mntput_no_expire+0x70/0x3c0 [ 70.133588][ T5902] ? avc_has_perm_noaudit+0x1cc/0x210 [ 70.138994][ T5902] ? selinux_capable+0x1f2/0x260 [ 70.143944][ T5902] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 70.149548][ T5902] __vmalloc_noprof+0x5e/0x70 [ 70.154245][ T5902] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 70.159800][ T5902] bpf_prog_alloc_no_stats+0x49/0x380 [ 70.165193][ T5902] ? bpf_prog_alloc+0x28/0x150 [ 70.169963][ T5902] bpf_prog_alloc+0x3a/0x150 [ 70.174561][ T5902] bpf_prog_load+0x4d1/0x1070 [ 70.179248][ T5902] ? __rcu_read_unlock+0x4e/0x70 [ 70.184265][ T5902] __sys_bpf+0x463/0x7a0 [ 70.188527][ T5902] __x64_sys_bpf+0x43/0x50 [ 70.192969][ T5902] x64_sys_call+0x2914/0x2dc0 [ 70.197927][ T5902] do_syscall_64+0xc9/0x1c0 [ 70.202442][ T5902] ? clear_bhb_loop+0x55/0xb0 [ 70.207163][ T5902] ? clear_bhb_loop+0x55/0xb0 [ 70.211848][ T5902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.217775][ T5902] RIP: 0033:0x7f09c6665d29 [ 70.222249][ T5902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.241899][ T5902] RSP: 002b:00007f09c4c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.250320][ T5902] RAX: ffffffffffffffda RBX: 00007f09c6856160 RCX: 00007f09c6665d29 [ 70.258372][ T5902] RDX: 0000000000000090 RSI: 0000000020000600 RDI: 0000000000000005 [ 70.266383][ T5902] RBP: 00007f09c4c8f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.274365][ T5902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.282345][ T5902] R13: 0000000000000000 R14: 00007f09c6856160 R15: 00007ffcd5056268 [ 70.290359][ T5902] [ 70.293850][ T5902] Mem-Info: [ 70.296972][ T5902] active_anon:9664 inactive_anon:1 isolated_anon:0 [ 70.296972][ T5902] active_file:18085 inactive_file:2020 isolated_file:0 [ 70.296972][ T5902] unevictable:0 dirty:187 writeback:0 [ 70.296972][ T5902] slab_reclaimable:3024 slab_unreclaimable:15405 [ 70.296972][ T5902] mapped:37060 shmem:3487 pagetables:973 [ 70.296972][ T5902] sec_pagetables:0 bounce:0 [ 70.296972][ T5902] kernel_misc_reclaimable:0 [ 70.296972][ T5902] free:1864503 free_pcp:8071 free_cma:0 [ 70.341881][ T5902] Node 0 active_anon:35408kB inactive_anon:4kB active_file:72340kB inactive_file:8080kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148240kB dirty:748kB writeback:0kB shmem:13948kB writeback_tmp:0kB kernel_stack:3344kB pagetables:3892kB sec_pagetables:0kB all_unreclaimable? no [ 70.369790][ T5902] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 70.396676][ T5902] lowmem_reserve[]: 0 2866 7844 0 [ 70.401815][ T5902] Node 0 DMA32 free:2950284kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953916kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 70.430460][ T5902] lowmem_reserve[]: 0 0 4978 0 [ 70.435274][ T5902] Node 0 Normal free:4492368kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:35408kB inactive_anon:4kB active_file:72340kB inactive_file:8080kB unevictable:0kB writepending:748kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:32128kB local_pcp:26068kB free_cma:0kB [ 70.465481][ T5902] lowmem_reserve[]: 0 0 0 0 [ 70.470098][ T5902] Node 0 DMA: 0*4kB 0*8kB 0*16kB [ 70.470236][ T5915] netlink: 'syz.6.493': attribute type 13 has an invalid length. [ 70.470589][ T5915] gretap0: refused to change device tx_queue_len [ 70.475346][ T5902] 0*32kB [ 70.483039][ T5915] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 70.489443][ T5902] 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 70.513520][ T3547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.517321][ T5902] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950284kB [ 70.542427][ T5902] Node 0 Normal: 14*4kB (UME) 269*8kB (UME) 288*16kB (UME) 188*32kB (UME) 363*64kB (UME) 182*128kB (UME) 132*256kB (UME) 78*512kB (UME) 59*1024kB (UM) 9*2048kB (UM) 1045*4096kB (M) = 4492256kB [ 70.561729][ T5902] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 70.561767][ T5902] 23621 total pagecache pages [ 70.561775][ T5902] 1 pages in swap cache [ 70.561782][ T5902] Free swap = 124476kB [ 70.561790][ T5902] Total swap = 124996kB [ 70.561799][ T5902] 2097051 pages RAM [ 70.561806][ T5902] 0 pages HighMem/MovableOnly [ 70.561813][ T5902] 80180 pages reserved [ 70.688714][ T5925] loop6: detected capacity change from 0 to 512 [ 70.720425][ T5904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.734659][ T5904] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.786468][ T5927] syz.5.497[5927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.786668][ T5927] syz.5.497[5927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.831023][ T5927] syz.5.497[5927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.861586][ T5925] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm +}[@: invalid indirect mapped block 11 (level 0) [ 70.928195][ T5925] EXT4-fs (loop6): Remounting filesystem read-only [ 71.000905][ T5311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.020731][ T5925] EXT4-fs (loop6): 1 truncate cleaned up [ 71.064923][ T5925] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.084453][ T5940] bridge0: entered promiscuous mode [ 71.108548][ T5940] macvlan2: entered promiscuous mode [ 71.121687][ T5925] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 71.139570][ T5940] bridge0: port 3(macvlan2) entered blocking state [ 71.146171][ T5940] bridge0: port 3(macvlan2) entered disabled state [ 71.163641][ T5925] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.195941][ T5940] macvlan2: entered allmulticast mode [ 71.201425][ T5940] bridge0: entered allmulticast mode [ 71.234495][ T5940] macvlan2: left allmulticast mode [ 71.239732][ T5940] bridge0: left allmulticast mode [ 71.279709][ T5940] bridge0: left promiscuous mode [ 71.285886][ T5943] FAULT_INJECTION: forcing a failure. [ 71.285886][ T5943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.299209][ T5943] CPU: 0 UID: 0 PID: 5943 Comm: syz.1.502 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 71.309830][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.320031][ T5943] Call Trace: [ 71.323417][ T5943] [ 71.326464][ T5943] dump_stack_lvl+0xf2/0x150 [ 71.331142][ T5943] dump_stack+0x15/0x1a [ 71.335412][ T5943] should_fail_ex+0x223/0x230 [ 71.340133][ T5943] should_fail+0xb/0x10 [ 71.344309][ T5943] should_fail_usercopy+0x1a/0x20 [ 71.349424][ T5943] _copy_from_user+0x1e/0xb0 [ 71.354107][ T5943] vmemdup_user+0x12e/0x1b0 [ 71.358861][ T5943] map_lookup_elem+0x1f5/0x560 [ 71.363641][ T5943] __sys_bpf+0x398/0x7a0 [ 71.367944][ T5943] __x64_sys_bpf+0x43/0x50 [ 71.372458][ T5943] x64_sys_call+0x2914/0x2dc0 [ 71.377282][ T5943] do_syscall_64+0xc9/0x1c0 [ 71.381816][ T5943] ? clear_bhb_loop+0x55/0xb0 [ 71.386526][ T5943] ? clear_bhb_loop+0x55/0xb0 [ 71.391229][ T5943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.397210][ T5943] RIP: 0033:0x7f09c6665d29 [ 71.401735][ T5943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.421463][ T5943] RSP: 002b:00007f09c4cd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.429990][ T5943] RAX: ffffffffffffffda RBX: 00007f09c6855fa0 RCX: 00007f09c6665d29 [ 71.437984][ T5943] RDX: 0000000000000020 RSI: 00000000200001c0 RDI: 0000000000000001 [ 71.445971][ T5943] RBP: 00007f09c4cd1090 R08: 0000000000000000 R09: 0000000000000000 [ 71.453966][ T5943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.462030][ T5943] R13: 0000000000000000 R14: 00007f09c6855fa0 R15: 00007ffcd5056268 [ 71.470042][ T5943] [ 71.514840][ T5946] hsr_slave_0: left promiscuous mode [ 71.533960][ T5946] hsr_slave_1: left promiscuous mode [ 71.767242][ T5962] loop7: detected capacity change from 0 to 256 [ 71.844192][ T5971] netlink: 'syz.7.507': attribute type 13 has an invalid length. [ 71.853603][ T5971] gretap0: refused to change device tx_queue_len [ 71.860092][ T5971] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 71.880730][ T5968] batman_adv: batadv0: Adding interface: dummy0 [ 71.887020][ T5968] batman_adv: batadv0: Interface activated: dummy0 [ 71.922345][ T5968] loop6: detected capacity change from 0 to 1024 [ 71.941342][ T5968] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 72.051990][ T5997] syz.6.511[5997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.052059][ T5997] syz.6.511[5997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.059646][ T5999] loop7: detected capacity change from 0 to 128 [ 72.098651][ T5999] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 72.106871][ T6003] xt_TPROXY: Can be used only with -p tcp or -p udp [ 72.115250][ T5997] syz.6.511[5997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.115539][ T6003] FAULT_INJECTION: forcing a failure. [ 72.115539][ T6003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.138669][ T5999] FAT-fs (loop7): FAT read failed (blocknr 128) [ 72.140091][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.2.514 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 72.157481][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.167547][ T6003] Call Trace: [ 72.170831][ T6003] [ 72.173768][ T6003] dump_stack_lvl+0xf2/0x150 [ 72.178401][ T6003] dump_stack+0x15/0x1a [ 72.182696][ T6003] should_fail_ex+0x223/0x230 [ 72.187398][ T6003] should_fail+0xb/0x10 [ 72.191614][ T6003] should_fail_usercopy+0x1a/0x20 [ 72.196680][ T6003] _copy_to_user+0x20/0xa0 [ 72.201114][ T6003] simple_read_from_buffer+0xa0/0x110 [ 72.206557][ T6003] proc_fail_nth_read+0xf9/0x140 [ 72.211536][ T6003] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.217097][ T6003] vfs_read+0x1a2/0x700 [ 72.221308][ T6003] ? __rcu_read_unlock+0x4e/0x70 [ 72.226291][ T6003] ? __fget_files+0x17c/0x1c0 [ 72.230991][ T6003] ksys_read+0xe8/0x1b0 [ 72.235267][ T6003] __x64_sys_read+0x42/0x50 [ 72.239785][ T6003] x64_sys_call+0x2874/0x2dc0 [ 72.244474][ T6003] do_syscall_64+0xc9/0x1c0 [ 72.249023][ T6003] ? clear_bhb_loop+0x55/0xb0 [ 72.253708][ T6003] ? clear_bhb_loop+0x55/0xb0 [ 72.258552][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.264539][ T6003] RIP: 0033:0x7ff7423e473c [ 72.268959][ T6003] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 72.288654][ T6003] RSP: 002b:00007ff740a51030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.297154][ T6003] RAX: ffffffffffffffda RBX: 00007ff7425d5fa0 RCX: 00007ff7423e473c [ 72.305187][ T6003] RDX: 000000000000000f RSI: 00007ff740a510a0 RDI: 0000000000000004 [ 72.313164][ T6003] RBP: 00007ff740a51090 R08: 0000000000000000 R09: 0000000000000000 [ 72.321143][ T6003] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.329120][ T6003] R13: 0000000000000000 R14: 00007ff7425d5fa0 R15: 00007fff5f40c7f8 [ 72.337103][ T6003] [ 72.411743][ T5997] loop6: detected capacity change from 0 to 512 [ 72.496648][ T5997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.509705][ T5997] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.530304][ T6023] netlink: 'syz.5.519': attribute type 13 has an invalid length. [ 72.547138][ T6023] gretap0: refused to change device tx_queue_len [ 72.553619][ T6023] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 72.582074][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 72.582116][ T29] audit: type=1400 audit(1735239003.030:3260): avc: denied { read write } for pid=6025 comm="syz.1.521" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.614057][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.620078][ T29] audit: type=1400 audit(1735239003.070:3261): avc: denied { open } for pid=6025 comm="syz.1.521" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.631608][ T6028] netlink: 28 bytes leftover after parsing attributes in process `syz.7.522'. [ 72.646049][ T29] audit: type=1400 audit(1735239003.070:3262): avc: denied { ioctl } for pid=6025 comm="syz.1.521" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.662601][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.684887][ T29] audit: type=1400 audit(1735239003.110:3263): avc: denied { create } for pid=6011 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.695862][ T6026] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 72.695862][ T6026] n'º|$@OOݱµ’-®+·el' [ 72.708088][ T29] audit: type=1400 audit(1735239003.160:3264): avc: denied { getopt } for pid=6011 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.737771][ T6026] usb usb7: usbfs: process 6026 (syz.1.521) did not claim interface 0 before use [ 72.790731][ T6033] loop7: detected capacity change from 0 to 512 [ 72.808904][ T29] audit: type=1400 audit(1735239003.180:3265): avc: denied { read } for pid=6025 comm="syz.1.521" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.832130][ T29] audit: type=1400 audit(1735239003.180:3266): avc: denied { open } for pid=6025 comm="syz.1.521" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.855756][ T29] audit: type=1400 audit(1735239003.180:3267): avc: denied { ioctl } for pid=6025 comm="syz.1.521" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.880928][ T29] audit: type=1400 audit(1735239003.180:3268): avc: denied { write } for pid=6025 comm="syz.1.521" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.890083][ T6033] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.903741][ T29] audit: type=1400 audit(1735239003.250:3269): avc: denied { create } for pid=6031 comm="syz.5.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.920315][ T6033] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.985460][ T4179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.987366][ T6041] loop2: detected capacity change from 0 to 2048 [ 73.023015][ T6041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.035504][ T6041] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.056842][ T6041] serio: Serial port ptm0 [ 73.141441][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.176171][ T6059] : renamed from bond0 (while UP) [ 73.204439][ T6062] netlink: 'syz.2.534': attribute type 13 has an invalid length. [ 73.212574][ T6062] gretap0: refused to change device tx_queue_len [ 73.219026][ T6062] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 73.238825][ T6063] loop5: detected capacity change from 0 to 512 [ 73.245415][ T6063] ext4: Bad value for 'sb' [ 73.385857][ T6068] batman_adv: batadv0: Adding interface: dummy0 [ 73.392369][ T6068] batman_adv: batadv0: Interface activated: dummy0 [ 73.421322][ T6070] syz.1.537[6070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.631813][ T5311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.670610][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.7.538'. [ 73.679799][ T6073] bridge_slave_1: left allmulticast mode [ 73.685479][ T6073] bridge_slave_1: left promiscuous mode [ 73.691371][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.699475][ T6073] bridge_slave_0: left allmulticast mode [ 73.705133][ T6073] bridge_slave_0: left promiscuous mode [ 73.711027][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.817514][ T6076] futex_wake_op: syz.7.539 tries to shift op by -1; fix this program [ 73.830306][ T6076] loop7: detected capacity change from 0 to 1024 [ 73.849719][ T6076] loop7: detected capacity change from 0 to 2048 [ 73.952517][ T6080] vhci_hcd: default hub control req: 0318 v0302 i0000 l0 [ 74.105779][ T6092] netlink: 'syz.7.546': attribute type 13 has an invalid length. [ 74.117069][ T6092] gretap0: refused to change device tx_queue_len [ 74.123554][ T6092] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 74.194563][ T6100] FAULT_INJECTION: forcing a failure. [ 74.194563][ T6100] name failslab, interval 1, probability 0, space 0, times 0 [ 74.207300][ T6100] CPU: 1 UID: 0 PID: 6100 Comm: syz.7.549 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 74.217919][ T6100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.228001][ T6100] Call Trace: [ 74.231378][ T6100] [ 74.234341][ T6100] dump_stack_lvl+0xf2/0x150 [ 74.238980][ T6100] dump_stack+0x15/0x1a [ 74.243206][ T6100] should_fail_ex+0x223/0x230 [ 74.247912][ T6100] should_failslab+0x8f/0xb0 [ 74.252553][ T6100] kmem_cache_alloc_node_noprof+0x59/0x320 [ 74.258435][ T6100] ? __alloc_skb+0x10b/0x310 [ 74.258464][ T6100] __alloc_skb+0x10b/0x310 [ 74.258485][ T6100] ? audit_log_start+0x34c/0x6b0 [ 74.258512][ T6100] audit_log_start+0x368/0x6b0 [ 74.258547][ T6100] audit_seccomp+0x4b/0x130 [ 74.258648][ T6100] __seccomp_filter+0x6fa/0x1180 [ 74.258735][ T6100] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.258790][ T6100] ? vfs_write+0x596/0x920 [ 74.258833][ T6100] ? __schedule+0x6fa/0x930 [ 74.258871][ T6100] __secure_computing+0x9f/0x1c0 [ 74.258905][ T6100] syscall_trace_enter+0xd1/0x1f0 [ 74.258993][ T6100] do_syscall_64+0xaa/0x1c0 [ 74.259018][ T6100] ? clear_bhb_loop+0x55/0xb0 [ 74.259044][ T6100] ? clear_bhb_loop+0x55/0xb0 [ 74.259147][ T6100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.259188][ T6100] RIP: 0033:0x7fb7db685d29 [ 74.259206][ T6100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.259228][ T6100] RSP: 002b:00007fb7d9cf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 74.259254][ T6100] RAX: ffffffffffffffda RBX: 00007fb7db875fa0 RCX: 00007fb7db685d29 [ 74.259283][ T6100] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000002 [ 74.259299][ T6100] RBP: 00007fb7d9cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.259314][ T6100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.259329][ T6100] R13: 0000000000000000 R14: 00007fb7db875fa0 R15: 00007ffc078f8f88 [ 74.259352][ T6100] [ 74.266933][ T6098] loop2: detected capacity change from 0 to 512 [ 74.267979][ T6098] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 74.268020][ T6098] EXT4-fs: error: could not find journal device path [ 74.318566][ T6103] loop7: detected capacity change from 0 to 2048 [ 74.396743][ T6110] syz.6.553 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 74.398831][ T6103] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.585505][ T5311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.630429][ T6124] netlink: 88 bytes leftover after parsing attributes in process `syz.2.556'. [ 74.658725][ T6128] netlink: 'syz.6.560': attribute type 13 has an invalid length. [ 74.666887][ T6128] gretap0: refused to change device tx_queue_len [ 74.669010][ T6130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.561'. [ 74.673312][ T6128] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 74.729529][ T6134] FAULT_INJECTION: forcing a failure. [ 74.729529][ T6134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.742769][ T6134] CPU: 1 UID: 0 PID: 6134 Comm: syz.6.563 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 74.753415][ T6134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.763553][ T6134] Call Trace: [ 74.766850][ T6134] [ 74.769793][ T6134] dump_stack_lvl+0xf2/0x150 [ 74.774470][ T6134] dump_stack+0x15/0x1a [ 74.778764][ T6134] should_fail_ex+0x223/0x230 [ 74.783549][ T6134] should_fail+0xb/0x10 [ 74.787774][ T6134] should_fail_usercopy+0x1a/0x20 [ 74.792828][ T6134] _copy_to_user+0x20/0xa0 [ 74.797352][ T6134] simple_read_from_buffer+0xa0/0x110 [ 74.802781][ T6134] proc_fail_nth_read+0xf9/0x140 [ 74.807757][ T6134] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.813349][ T6134] vfs_read+0x1a2/0x700 [ 74.813769][ T6143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.566'. [ 74.817567][ T6134] ? __rcu_read_unlock+0x4e/0x70 [ 74.831408][ T6134] ? __fget_files+0x17c/0x1c0 [ 74.836122][ T6134] ksys_read+0xe8/0x1b0 [ 74.840297][ T6134] __x64_sys_read+0x42/0x50 [ 74.844878][ T6134] x64_sys_call+0x2874/0x2dc0 [ 74.849613][ T6134] do_syscall_64+0xc9/0x1c0 [ 74.854154][ T6134] ? clear_bhb_loop+0x55/0xb0 [ 74.858837][ T6134] ? clear_bhb_loop+0x55/0xb0 [ 74.863584][ T6134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.866053][ T6144] netlink: 296 bytes leftover after parsing attributes in process `syz.1.566'. [ 74.869489][ T6134] RIP: 0033:0x7f219b95473c [ 74.869513][ T6134] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 74.869563][ T6134] RSP: 002b:00007f2199fc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.911150][ T6134] RAX: ffffffffffffffda RBX: 00007f219bb45fa0 RCX: 00007f219b95473c [ 74.919136][ T6134] RDX: 000000000000000f RSI: 00007f2199fc70a0 RDI: 0000000000000004 [ 74.927126][ T6134] RBP: 00007f2199fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.935125][ T6134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.943192][ T6134] R13: 0000000000000000 R14: 00007f219bb45fa0 R15: 00007ffc7b97b9a8 [ 74.951244][ T6134] [ 74.981469][ T6146] loop5: detected capacity change from 0 to 512 [ 74.984979][ T6148] bpf_get_probe_write_proto: 2 callbacks suppressed [ 74.984999][ T6148] syz.6.568[6148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.995041][ T6148] syz.6.568[6148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.996751][ T6146] EXT4-fs: Ignoring removed i_version option [ 75.013709][ T6148] syz.6.568[6148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.036568][ T6146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 75.064904][ T6146] ext4 filesystem being mounted at /96/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.160680][ T6165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.573'. [ 75.171385][ T6165] netlink: 44 bytes leftover after parsing attributes in process `syz.1.573'. [ 75.174833][ T6148] loop6: detected capacity change from 0 to 512 [ 75.180312][ T6165] netlink: 43 bytes leftover after parsing attributes in process `syz.1.573'. [ 75.195574][ T6165] netlink: 'syz.1.573': attribute type 6 has an invalid length. [ 75.196905][ T3547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 75.203455][ T6165] netlink: 'syz.1.573': attribute type 5 has an invalid length. [ 75.221207][ T6165] netlink: 43 bytes leftover after parsing attributes in process `syz.1.573'. [ 75.233247][ T6148] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.247895][ T6148] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.285663][ T6172] netlink: 'syz.5.574': attribute type 13 has an invalid length. [ 75.293900][ T6172] gretap0: refused to change device tx_queue_len [ 75.300310][ T6172] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 75.357164][ T6180] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 75.429093][ T6192] FAULT_INJECTION: forcing a failure. [ 75.429093][ T6192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.442272][ T6192] CPU: 1 UID: 0 PID: 6192 Comm: syz.1.581 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 75.452892][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.462974][ T6192] Call Trace: [ 75.466268][ T6192] [ 75.469218][ T6192] dump_stack_lvl+0xf2/0x150 [ 75.473923][ T6192] dump_stack+0x15/0x1a [ 75.478372][ T6192] should_fail_ex+0x223/0x230 [ 75.483088][ T6192] should_fail+0xb/0x10 [ 75.487284][ T6192] should_fail_usercopy+0x1a/0x20 [ 75.492334][ T6192] copy_page_from_iter_atomic+0x228/0xf80 [ 75.498172][ T6192] ? shmem_write_begin+0xa2/0x180 [ 75.503262][ T6192] ? shmem_write_begin+0xda/0x180 [ 75.508391][ T6192] generic_perform_write+0x2f1/0x4a0 [ 75.513734][ T6192] shmem_file_write_iter+0xc2/0xe0 [ 75.518929][ T6192] do_iter_readv_writev+0x394/0x450 [ 75.524209][ T6192] vfs_writev+0x2d4/0x880 [ 75.528611][ T6192] ? proc_fail_nth_write+0x12a/0x150 [ 75.533957][ T6192] __se_sys_pwritev2+0x100/0x1c0 [ 75.539021][ T6192] __x64_sys_pwritev2+0x78/0x90 [ 75.543965][ T6192] x64_sys_call+0x2afe/0x2dc0 [ 75.548728][ T6192] do_syscall_64+0xc9/0x1c0 [ 75.553244][ T6192] ? clear_bhb_loop+0x55/0xb0 [ 75.557974][ T6192] ? clear_bhb_loop+0x55/0xb0 [ 75.562777][ T6192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.568750][ T6192] RIP: 0033:0x7f09c6665d29 [ 75.573254][ T6192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.592865][ T6192] RSP: 002b:00007f09c4cd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 75.601329][ T6192] RAX: ffffffffffffffda RBX: 00007f09c6855fa0 RCX: 00007f09c6665d29 [ 75.609317][ T6192] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000006 [ 75.617309][ T6192] RBP: 00007f09c4cd1090 R08: 0000000000000000 R09: 0000000000000003 [ 75.625490][ T6192] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000001 [ 75.633480][ T6192] R13: 0000000000000000 R14: 00007f09c6855fa0 R15: 00007ffcd5056268 [ 75.641460][ T6192] [ 75.746092][ T6208] FAULT_INJECTION: forcing a failure. [ 75.746092][ T6208] name failslab, interval 1, probability 0, space 0, times 0 [ 75.759043][ T6208] CPU: 1 UID: 0 PID: 6208 Comm: syz.1.587 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 75.769666][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.779730][ T6208] Call Trace: [ 75.783087][ T6208] [ 75.786021][ T6208] dump_stack_lvl+0xf2/0x150 [ 75.790684][ T6208] dump_stack+0x15/0x1a [ 75.794894][ T6208] should_fail_ex+0x223/0x230 [ 75.799665][ T6208] should_failslab+0x8f/0xb0 [ 75.804287][ T6208] kmem_cache_alloc_node_noprof+0x59/0x320 [ 75.810170][ T6208] ? __alloc_skb+0x10b/0x310 [ 75.814785][ T6208] ? avc_has_perm_noaudit+0x1cc/0x210 [ 75.820252][ T6208] __alloc_skb+0x10b/0x310 [ 75.824747][ T6208] alloc_skb_with_frags+0x80/0x450 [ 75.829872][ T6208] ? selinux_file_open+0x34a/0x3b0 [ 75.835076][ T6208] ? should_fail_ex+0xd7/0x230 [ 75.840046][ T6208] sock_alloc_send_pskb+0x435/0x4f0 [ 75.845283][ T6208] tun_get_user+0xa24/0x25c0 [ 75.849896][ T6208] ? _parse_integer+0x27/0x30 [ 75.854583][ T6208] ? ref_tracker_alloc+0x1f5/0x2f0 [ 75.859747][ T6208] tun_chr_write_iter+0x188/0x240 [ 75.864792][ T6208] vfs_write+0x77f/0x920 [ 75.869072][ T6208] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 75.874755][ T6208] ksys_write+0xe8/0x1b0 [ 75.879042][ T6208] __x64_sys_write+0x42/0x50 [ 75.883719][ T6208] x64_sys_call+0x287e/0x2dc0 [ 75.888443][ T6208] do_syscall_64+0xc9/0x1c0 [ 75.892957][ T6208] ? clear_bhb_loop+0x55/0xb0 [ 75.897641][ T6208] ? clear_bhb_loop+0x55/0xb0 [ 75.902340][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.908294][ T6208] RIP: 0033:0x7f09c6665d29 [ 75.912781][ T6208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.932448][ T6208] RSP: 002b:00007f09c4cd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.940962][ T6208] RAX: ffffffffffffffda RBX: 00007f09c6855fa0 RCX: 00007f09c6665d29 [ 75.949190][ T6208] RDX: 0000000000000ffe RSI: 00000000200000c0 RDI: 0000000000000003 [ 75.957339][ T6208] RBP: 00007f09c4cd1090 R08: 0000000000000000 R09: 0000000000000000 [ 75.965317][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.973376][ T6208] R13: 0000000000000000 R14: 00007f09c6855fa0 R15: 00007ffcd5056268 [ 75.981360][ T6208] [ 76.021145][ T6211] netlink: 'syz.5.588': attribute type 13 has an invalid length. [ 76.030434][ T4179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.041823][ T6211] gretap0: refused to change device tx_queue_len [ 76.048284][ T6211] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 76.075233][ T6213] loop6: detected capacity change from 0 to 128 [ 76.086626][ T6200] tipc: Enabling not permitted [ 76.092335][ T6200] tipc: Enabling of bearer rejected, failed to enable media [ 76.144146][ T6221] loop6: detected capacity change from 0 to 512 [ 76.145551][ T6200] syzkaller0: entered promiscuous mode [ 76.156238][ T6200] syzkaller0: entered allmulticast mode [ 76.164433][ T6221] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.592: corrupted in-inode xattr: invalid ea_ino [ 76.189300][ T6221] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.592: couldn't read orphan inode 15 (err -117) [ 76.211468][ T6221] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.260991][ T6221] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6221 comm=syz.6.592 [ 76.273459][ T6221] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6221 comm=syz.6.592 [ 76.279035][ T6232] FAULT_INJECTION: forcing a failure. [ 76.279035][ T6232] name failslab, interval 1, probability 0, space 0, times 0 [ 76.298554][ T6232] CPU: 1 UID: 0 PID: 6232 Comm: syz.1.595 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 76.309170][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.319252][ T6232] Call Trace: [ 76.322544][ T6232] [ 76.325499][ T6232] dump_stack_lvl+0xf2/0x150 [ 76.330147][ T6232] dump_stack+0x15/0x1a [ 76.334429][ T6232] should_fail_ex+0x223/0x230 [ 76.339157][ T6232] should_failslab+0x8f/0xb0 [ 76.343851][ T6232] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 76.347079][ T6234] loop2: detected capacity change from 0 to 512 [ 76.349722][ T6232] ? shmem_alloc_inode+0x34/0x50 [ 76.349759][ T6232] shmem_alloc_inode+0x34/0x50 [ 76.364943][ T6234] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.596: corrupted in-inode xattr: invalid ea_ino [ 76.365694][ T6232] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 76.384498][ T6232] alloc_inode+0x3c/0x160 [ 76.385629][ T6234] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.596: couldn't read orphan inode 15 (err -117) [ 76.388865][ T6232] new_inode+0x1e/0x100 [ 76.388892][ T6232] shmem_get_inode+0x24e/0x730 [ 76.403449][ T6234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.404792][ T6232] __shmem_file_setup+0x127/0x1f0 [ 76.415072][ T6234] FAULT_INJECTION: forcing a failure. [ 76.415072][ T6234] name failslab, interval 1, probability 0, space 0, times 0 [ 76.421990][ T6232] shmem_file_setup+0x3b/0x50 [ 76.422022][ T6232] __se_sys_memfd_create+0x31d/0x5c0 [ 76.422058][ T6232] __x64_sys_memfd_create+0x31/0x40 [ 76.454797][ T6232] x64_sys_call+0x2d4c/0x2dc0 [ 76.459636][ T6232] do_syscall_64+0xc9/0x1c0 [ 76.464233][ T6232] ? clear_bhb_loop+0x55/0xb0 [ 76.468920][ T6232] ? clear_bhb_loop+0x55/0xb0 [ 76.473604][ T6232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.479522][ T6232] RIP: 0033:0x7f09c6665d29 [ 76.484026][ T6232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.503732][ T6232] RSP: 002b:00007f09c4cd0e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 76.512330][ T6232] RAX: ffffffffffffffda RBX: 00000000000002fe RCX: 00007f09c6665d29 [ 76.520316][ T6232] RDX: 00007f09c4cd0ef0 RSI: 0000000000000000 RDI: 00007f09c66e2469 [ 76.528342][ T6232] RBP: 00000000200000c0 R08: 00007f09c4cd0bb7 R09: 00007f09c4cd0e40 [ 76.536378][ T6232] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000000 [ 76.544523][ T6232] R13: 00007f09c4cd0ef0 R14: 00007f09c4cd0eb0 R15: ffffffff81000000 [ 76.552521][ T6232] ? 0xffffffff81000000 [ 76.556684][ T6232] [ 76.559732][ T6234] CPU: 0 UID: 0 PID: 6234 Comm: syz.2.596 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 76.570357][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.580570][ T6234] Call Trace: [ 76.583935][ T6234] [ 76.586871][ T6234] dump_stack_lvl+0xf2/0x150 [ 76.591497][ T6234] dump_stack+0x15/0x1a [ 76.595688][ T6234] should_fail_ex+0x223/0x230 [ 76.600463][ T6234] should_failslab+0x8f/0xb0 [ 76.605132][ T6234] kmem_cache_alloc_node_noprof+0x59/0x320 [ 76.610981][ T6234] ? __alloc_skb+0x10b/0x310 [ 76.615591][ T6234] __alloc_skb+0x10b/0x310 [ 76.620041][ T6234] netlink_alloc_large_skb+0xad/0xe0 [ 76.625487][ T6234] netlink_sendmsg+0x3b4/0x6e0 [ 76.630330][ T6234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.635632][ T6234] __sock_sendmsg+0x140/0x180 [ 76.640511][ T6234] ____sys_sendmsg+0x312/0x410 [ 76.645290][ T6234] __sys_sendmsg+0x19d/0x230 [ 76.649929][ T6234] __x64_sys_sendmsg+0x46/0x50 [ 76.654913][ T6234] x64_sys_call+0x2734/0x2dc0 [ 76.659670][ T6234] do_syscall_64+0xc9/0x1c0 [ 76.664198][ T6234] ? clear_bhb_loop+0x55/0xb0 [ 76.668894][ T6234] ? clear_bhb_loop+0x55/0xb0 [ 76.673638][ T6234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.679572][ T6234] RIP: 0033:0x7ff7423e5d29 [ 76.683992][ T6234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.703755][ T6234] RSP: 002b:00007ff740a51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.712357][ T6234] RAX: ffffffffffffffda RBX: 00007ff7425d5fa0 RCX: 00007ff7423e5d29 [ 76.720368][ T6234] RDX: 0000000020048880 RSI: 00000000200002c0 RDI: 0000000000000005 [ 76.728349][ T6234] RBP: 00007ff740a51090 R08: 0000000000000000 R09: 0000000000000000 [ 76.736334][ T6234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.744365][ T6234] R13: 0000000000000000 R14: 00007ff7425d5fa0 R15: 00007fff5f40c7f8 [ 76.752351][ T6234] [ 76.772368][ T6239] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 76.778944][ T6239] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.786565][ T6239] vhci_hcd vhci_hcd.0: Device attached [ 76.825168][ T6244] loop5: detected capacity change from 0 to 2048 [ 76.844563][ T6244] ext4: Unknown parameter 'dont_hash' [ 76.848925][ T6251] syz.1.599[6251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.850112][ T6251] syz.1.599[6251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.864771][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.885171][ T6251] syz.1.599[6251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.899983][ T6250] loop7: detected capacity change from 0 to 512 [ 76.905309][ T6255] netlink: 'syz.5.601': attribute type 13 has an invalid length. [ 76.932685][ T6250] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.600: corrupted in-inode xattr: invalid ea_ino [ 76.937536][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.951262][ T6250] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.600: couldn't read orphan inode 15 (err -117) [ 76.967321][ T6257] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 76.970452][ T6250] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.973854][ T6257] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.993916][ T6257] vhci_hcd vhci_hcd.0: Device attached [ 76.999575][ T3447] vhci_hcd: vhci_device speed not set [ 77.005267][ T6255] gretap0: refused to change device tx_queue_len [ 77.009878][ T6240] vhci_hcd: connection closed [ 77.011762][ T6255] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 77.012531][ T28] vhci_hcd: stop threads [ 77.036554][ T28] vhci_hcd: release socket [ 77.041060][ T28] vhci_hcd: disconnect device [ 77.058179][ T3447] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 77.058830][ T6250] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6250 comm=syz.7.600 [ 77.066894][ T3447] usb 13-1: enqueue for inactive port 0 [ 77.078170][ T6250] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6250 comm=syz.7.600 [ 77.094367][ T3447] usb 13-1: enqueue for inactive port 0 [ 77.117450][ T3447] usb 13-1: enqueue for inactive port 0 [ 77.145526][ T6271] loop5: detected capacity change from 0 to 128 [ 77.178184][ T9] vhci_hcd: vhci_device speed not set [ 77.198386][ T3447] vhci_hcd: vhci_device speed not set [ 77.210289][ T6250] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 77.217020][ T6250] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 77.224683][ T6250] vhci_hcd vhci_hcd.0: Device attached [ 77.238898][ T9] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 77.260908][ T6250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.269651][ T6250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.278835][ T6277] vhci_hcd: connection closed [ 77.282130][ T28] vhci_hcd: stop threads [ 77.291235][ T28] vhci_hcd: release socket [ 77.291246][ T28] vhci_hcd: disconnect device [ 77.376503][ T6259] vhci_hcd: connection reset by peer [ 77.386469][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.396225][ T3395] vhci_hcd: stop threads [ 77.400539][ T3395] vhci_hcd: release socket [ 77.404977][ T3395] vhci_hcd: disconnect device [ 77.469078][ T6292] loop2: detected capacity change from 0 to 2048 [ 77.486199][ T6292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.515913][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.521227][ T6300] netlink: 'syz.5.613': attribute type 13 has an invalid length. [ 77.533660][ T6300] gretap0: refused to change device tx_queue_len [ 77.540140][ T6300] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 77.557961][ T4179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.648611][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 77.648629][ T29] audit: type=1400 audit(1735239008.100:3731): avc: denied { read } for pid=6310 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.699522][ T29] audit: type=1400 audit(1735239008.150:3732): avc: denied { write } for pid=6310 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.720538][ T6323] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 77.722473][ T29] audit: type=1326 audit(1735239008.150:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.5.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd5e05d29 code=0x7ffc0000 [ 77.728345][ T6323] audit: out of memory in audit_log_start [ 77.751636][ T29] audit: type=1326 audit(1735239008.150:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.5.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effd5e05d29 code=0x7ffc0000 [ 77.751670][ T29] audit: type=1326 audit(1735239008.150:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.5.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd5e05d29 code=0x7ffc0000 [ 77.751705][ T29] audit: type=1326 audit(1735239008.150:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.5.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effd5e05d29 code=0x7ffc0000 [ 77.751784][ T29] audit: type=1326 audit(1735239008.150:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.5.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd5e05d29 code=0x7ffc0000 [ 77.751818][ T29] audit: type=1326 audit(1735239008.150:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.5.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effd5e05d29 code=0x7ffc0000 [ 77.877533][ T5311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.880188][ T6323] loop5: detected capacity change from 0 to 512 [ 77.893547][ T6323] journal_path: Non-blockdev passed as './file0' [ 77.899993][ T6323] EXT4-fs: error: could not find journal device path [ 77.955238][ T6338] netlink: 'syz.1.627': attribute type 13 has an invalid length. [ 77.967916][ T6339] loop7: detected capacity change from 0 to 512 [ 77.976080][ T6338] gretap0: refused to change device tx_queue_len [ 77.982534][ T6338] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 78.009189][ T6339] journal_path: Non-blockdev passed as './file0' [ 78.015595][ T6339] EXT4-fs: error: could not find journal device path [ 78.074184][ T6342] SELinux: syz.7.628 (6342) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 78.175206][ T6352] syz.7.632[6352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.175392][ T6352] syz.7.632[6352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.208728][ T6352] syz.7.632[6352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.308482][ T6357] loop7: detected capacity change from 0 to 512 [ 78.351419][ T6357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.364802][ T6357] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.571358][ T6374] FAULT_INJECTION: forcing a failure. [ 78.571358][ T6374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.584628][ T6374] CPU: 0 UID: 0 PID: 6374 Comm: syz.1.637 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 78.595329][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.605400][ T6374] Call Trace: [ 78.608696][ T6374] [ 78.611643][ T6374] dump_stack_lvl+0xf2/0x150 [ 78.616276][ T6374] dump_stack+0x15/0x1a [ 78.620534][ T6374] should_fail_ex+0x223/0x230 [ 78.625231][ T6374] should_fail+0xb/0x10 [ 78.629401][ T6374] should_fail_usercopy+0x1a/0x20 [ 78.634455][ T6374] _copy_to_user+0x20/0xa0 [ 78.639048][ T6374] simple_read_from_buffer+0xa0/0x110 [ 78.644725][ T6374] proc_fail_nth_read+0xf9/0x140 [ 78.649794][ T6374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.655403][ T6374] vfs_read+0x1a2/0x700 [ 78.659592][ T6374] ? __rcu_read_unlock+0x4e/0x70 [ 78.664634][ T6374] ? __fget_files+0x17c/0x1c0 [ 78.669357][ T6374] ksys_read+0xe8/0x1b0 [ 78.673569][ T6374] __x64_sys_read+0x42/0x50 [ 78.678104][ T6374] x64_sys_call+0x2874/0x2dc0 [ 78.682798][ T6374] do_syscall_64+0xc9/0x1c0 [ 78.687318][ T6374] ? clear_bhb_loop+0x55/0xb0 [ 78.692095][ T6374] ? clear_bhb_loop+0x55/0xb0 [ 78.696795][ T6374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.702732][ T6374] RIP: 0033:0x7f09c666473c [ 78.704384][ T6376] loop2: detected capacity change from 0 to 2048 [ 78.707195][ T6374] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 78.707220][ T6374] RSP: 002b:00007f09c4cd1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.741645][ T6374] RAX: ffffffffffffffda RBX: 00007f09c6855fa0 RCX: 00007f09c666473c [ 78.749909][ T6374] RDX: 000000000000000f RSI: 00007f09c4cd10a0 RDI: 0000000000000006 [ 78.757904][ T6374] RBP: 00007f09c4cd1090 R08: 0000000000000000 R09: 0000000000000000 [ 78.765922][ T6374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.773913][ T6374] R13: 0000000000000000 R14: 00007f09c6855fa0 R15: 00007ffcd5056268 [ 78.781928][ T6374] [ 78.827003][ T6377] Process accounting resumed [ 78.864681][ T6384] netlink: 'syz.6.640': attribute type 13 has an invalid length. [ 78.877533][ T6384] gretap0: refused to change device tx_queue_len [ 78.884001][ T6384] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 79.022619][ T5311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.033275][ T6403] loop6: detected capacity change from 0 to 128 [ 79.052223][ T6397] __nla_validate_parse: 1 callbacks suppressed [ 79.052243][ T6397] netlink: 20 bytes leftover after parsing attributes in process `syz.5.647'. [ 79.104994][ T6405] loop7: detected capacity change from 0 to 2048 [ 79.115697][ T6409] loop5: detected capacity change from 0 to 2048 [ 79.117807][ T6407] netlink: 84 bytes leftover after parsing attributes in process `syz.6.650'. [ 79.137402][ T6407] loop6: detected capacity change from 0 to 512 [ 79.145828][ T6407] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #2: comm syz.6.650: corrupted xattr block 255: invalid header [ 79.159125][ T6407] EXT4-fs (loop6): Remounting filesystem read-only [ 79.165728][ T6407] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 79.174371][ T6407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.176016][ T6405] loop7: p1 < > p4 [ 79.186954][ T6407] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 79.197795][ T6407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.210745][ T6405] loop7: p4 size 8388608 extends beyond EOD, truncated [ 79.240179][ T6412] SELinux: failed to load policy [ 79.247944][ T2998] loop7: p1 < > p4 [ 79.254826][ T6414] loop6: detected capacity change from 0 to 512 [ 79.262433][ T2998] loop7: p4 size 8388608 extends beyond EOD, truncated [ 79.283430][ T3372] udevd[3372]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 79.299176][ T3454] udevd[3454]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 79.309459][ T6414] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 79.318075][ T6414] EXT4-fs (loop6): orphan cleanup on readonly fs [ 79.326847][ T6420] netlink: 'syz.7.654': attribute type 13 has an invalid length. [ 79.335216][ T6414] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.352912][ T3372] udevd[3372]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 79.352979][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 79.363384][ T6420] gretap0: refused to change device tx_queue_len [ 79.379000][ T6420] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 79.402984][ T6422] netlink: 72 bytes leftover after parsing attributes in process `syz.5.656'. [ 79.405831][ T6414] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 79.436461][ T6414] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.653: bg 0: block 40: padding at end of block bitmap is not set [ 79.467452][ T6424] loop2: detected capacity change from 0 to 2048 [ 79.477530][ T6414] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 79.489898][ T6414] EXT4-fs (loop6): 1 truncate cleaned up [ 79.498942][ T6427] loop7: detected capacity change from 0 to 128 [ 79.506268][ T6427] mmap: syz.7.658 (6427): VmData 29073408 exceed data ulimit 10. Update limits or use boot option ignore_rlimit_data. [ 79.520074][ T6414] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.544582][ T6424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.616160][ T4179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.627636][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.679615][ T6437] syz.2.660[6437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.680962][ T6434] loop6: detected capacity change from 0 to 128 [ 79.702924][ T6435] loop7: detected capacity change from 0 to 1024 [ 79.717443][ T6435] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 79.751451][ T6435] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 79.762626][ T6435] EXT4-fs (loop7): invalid journal inode [ 79.801096][ T6445] loop6: detected capacity change from 0 to 512 [ 79.813864][ T6446] loop2: detected capacity change from 0 to 512 [ 79.840897][ T6449] loop7: detected capacity change from 0 to 128 [ 79.860763][ T6449] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 79.867459][ T6445] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.871206][ T6446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.883382][ T6445] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.901162][ T6449] netlink: 'syz.7.665': attribute type 4 has an invalid length. [ 79.924014][ T6446] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.924616][ T6445] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.663: corrupted xattr block 33: invalid header [ 79.947656][ T6449] netlink: 'syz.7.665': attribute type 4 has an invalid length. [ 79.970799][ T6445] EXT4-fs (loop6): Remounting filesystem read-only [ 79.977487][ T6445] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 79.990344][ T6445] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 79.999511][ T6445] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 80.042722][ T4179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.042913][ T6464] netlink: 'syz.1.669': attribute type 13 has an invalid length. [ 80.060201][ T6464] gretap0: refused to change device tx_queue_len [ 80.066579][ T6464] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 80.082532][ T1019] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 80.160687][ T6472] loop7: detected capacity change from 0 to 2048 [ 80.198297][ T6022] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 80.219894][ T6472] loop7: p1 < > p4 [ 80.225139][ T6472] loop7: p4 size 8388608 extends beyond EOD, truncated [ 80.239380][ T6478] vhci_hcd: invalid port number 255 [ 80.387588][ T6488] batadv_slave_1: entered promiscuous mode [ 80.394114][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.679'. [ 80.403167][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.431234][ T6491] FAULT_INJECTION: forcing a failure. [ 80.431234][ T6491] name failslab, interval 1, probability 0, space 0, times 0 [ 80.443978][ T6491] CPU: 1 UID: 0 PID: 6491 Comm: syz.7.680 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 80.454616][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.464818][ T6491] Call Trace: [ 80.468169][ T6491] [ 80.471195][ T6491] dump_stack_lvl+0xf2/0x150 [ 80.475851][ T6491] dump_stack+0x15/0x1a [ 80.480055][ T6491] should_fail_ex+0x223/0x230 [ 80.484750][ T6491] should_failslab+0x8f/0xb0 [ 80.489378][ T6491] kmem_cache_alloc_noprof+0x52/0x320 [ 80.494808][ T6491] ? getname_flags+0x81/0x3b0 [ 80.499520][ T6491] getname_flags+0x81/0x3b0 [ 80.504222][ T6491] getname+0x17/0x20 [ 80.508211][ T6491] do_sys_openat2+0x67/0x120 [ 80.512838][ T6491] __x64_sys_openat+0xf3/0x120 [ 80.517638][ T6491] x64_sys_call+0x2b30/0x2dc0 [ 80.522343][ T6491] do_syscall_64+0xc9/0x1c0 [ 80.527148][ T6491] ? clear_bhb_loop+0x55/0xb0 [ 80.531831][ T6491] ? clear_bhb_loop+0x55/0xb0 [ 80.536524][ T6491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.542429][ T6491] RIP: 0033:0x7fb7db684690 [ 80.546898][ T6491] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 80.566610][ T6491] RSP: 002b:00007fb7d9cf6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 80.575040][ T6491] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007fb7db684690 [ 80.583105][ T6491] RDX: 0000000000101301 RSI: 00007fb7d9cf6c10 RDI: 00000000ffffff9c [ 80.591159][ T6491] RBP: 00007fb7d9cf6c10 R08: 0000000000000000 R09: 0000000000000000 [ 80.599248][ T6491] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 80.607227][ T6491] R13: 0000000000000000 R14: 00007fb7db875fa0 R15: 00007ffc078f8f88 [ 80.615210][ T6491] [ 80.620727][ T6488] batadv_slave_1 (unregistering): left promiscuous mode [ 80.630224][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.637505][ T6488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.675952][ T6493] 9pnet: Could not find request transport: 0xffffffffffffffff [ 80.725416][ T6499] lo speed is unknown, defaulting to 1000 [ 80.732703][ T6499] lo speed is unknown, defaulting to 1000 [ 80.738913][ T6499] lo speed is unknown, defaulting to 1000 [ 80.745251][ T6499] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.761697][ T6502] netlink: 'syz.2.685': attribute type 13 has an invalid length. [ 80.790477][ T6499] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 80.793732][ T6502] gretap0: refused to change device tx_queue_len [ 80.804059][ T6502] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 80.821665][ T6499] lo speed is unknown, defaulting to 1000 [ 80.827950][ T6499] lo speed is unknown, defaulting to 1000 [ 80.839614][ T6499] lo speed is unknown, defaulting to 1000 [ 80.846370][ T6499] lo speed is unknown, defaulting to 1000 [ 80.856657][ T6499] lo speed is unknown, defaulting to 1000 [ 80.863188][ T6499] lo speed is unknown, defaulting to 1000 [ 80.877533][ T6509] netlink: 16 bytes leftover after parsing attributes in process `syz.7.687'. [ 80.897118][ T6509] netlink: 20 bytes leftover after parsing attributes in process `syz.7.687'. [ 80.916577][ T6514] bpf_get_probe_write_proto: 2 callbacks suppressed [ 80.916597][ T6514] syz.5.691[6514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.924895][ T6514] syz.5.691[6514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.936448][ T6514] syz.5.691[6514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.053632][ T6532] netlink: 'syz.1.697': attribute type 11 has an invalid length. [ 81.060382][ T6530] loop7: detected capacity change from 0 to 2048 [ 81.073480][ T6522] vhci_hcd: invalid port number 255 [ 81.092270][ T6530] EXT4-fs (loop7): failed to initialize system zone (-117) [ 81.105474][ T6530] EXT4-fs (loop7): mount failed [ 81.125911][ T6530] netlink: 32 bytes leftover after parsing attributes in process `syz.7.696'. [ 81.131448][ T6536] loop5: detected capacity change from 0 to 512 [ 81.174836][ T6528] loop2: detected capacity change from 0 to 1024 [ 81.193382][ T6536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.229655][ T6545] FAULT_INJECTION: forcing a failure. [ 81.229655][ T6545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.242798][ T6545] CPU: 0 UID: 0 PID: 6545 Comm: syz.7.699 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 81.243233][ T6528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.253401][ T6545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.253421][ T6545] Call Trace: [ 81.253429][ T6545] [ 81.253439][ T6545] dump_stack_lvl+0xf2/0x150 [ 81.253478][ T6545] dump_stack+0x15/0x1a [ 81.260189][ T6528] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.270118][ T6545] should_fail_ex+0x223/0x230 [ 81.270158][ T6545] should_fail+0xb/0x10 [ 81.273857][ T6536] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.276427][ T6545] should_fail_usercopy+0x1a/0x20 [ 81.314084][ T6547] netlink: 'syz.1.700': attribute type 13 has an invalid length. [ 81.315898][ T6545] _copy_to_user+0x20/0xa0 [ 81.328105][ T6545] copy_siginfo_to_user+0x24/0xb0 [ 81.333257][ T6545] x64_setup_rt_frame+0x2b4/0x590 [ 81.338305][ T6545] arch_do_signal_or_restart+0x287/0x4b0 [ 81.339351][ T6528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.343983][ T6545] syscall_exit_to_user_mode+0x62/0x120 [ 81.357700][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.361508][ T6545] do_syscall_64+0xd6/0x1c0 [ 81.375048][ T6545] ? clear_bhb_loop+0x55/0xb0 [ 81.379776][ T6545] ? clear_bhb_loop+0x55/0xb0 [ 81.379805][ T6545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.379845][ T6545] RIP: 0033:0x7fb7db685d27 [ 81.379861][ T6545] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 81.379880][ T6545] RSP: 002b:00007fb7d9cf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 81.379913][ T6545] RAX: 0000000000000013 RBX: 00007fb7db875fa0 RCX: 00007fb7db685d29 [ 81.379926][ T6545] RDX: 0000000000000001 RSI: 0000000020000840 RDI: 0000000000000003 [ 81.379939][ T6545] RBP: 00007fb7d9cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.379952][ T6545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.379968][ T6545] R13: 0000000000000000 R14: 00007fb7db875fa0 R15: 00007ffc078f8f88 [ 81.379991][ T6545] [ 81.459654][ T6547] gretap0: refused to change device tx_queue_len [ 81.484897][ T6547] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 81.544618][ T6556] loop7: detected capacity change from 0 to 512 [ 81.559004][ T6556] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 81.571916][ T6556] EXT4-fs (loop7): 1 truncate cleaned up [ 81.579368][ T6556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.599466][ T6556] netlink: 'syz.7.702': attribute type 322 has an invalid length. [ 81.627126][ T5311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.633747][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 81.646895][ T6568] FAULT_INJECTION: forcing a failure. [ 81.646895][ T6568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.660118][ T6568] CPU: 1 UID: 0 PID: 6568 Comm: syz.2.706 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 81.670778][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.680849][ T6568] Call Trace: [ 81.684218][ T6568] [ 81.687175][ T6568] dump_stack_lvl+0xf2/0x150 [ 81.691794][ T6568] dump_stack+0x15/0x1a [ 81.695975][ T6568] should_fail_ex+0x223/0x230 [ 81.700675][ T6568] should_fail+0xb/0x10 [ 81.704889][ T6568] should_fail_usercopy+0x1a/0x20 [ 81.709978][ T6568] copy_to_user_nofault+0x7d/0x110 [ 81.715112][ T6568] bpf_probe_write_user+0x80/0xc0 [ 81.720150][ T6568] bpf_prog_6303d92f98284ad8+0x44/0x48 [ 81.725728][ T6568] bpf_trace_run2+0x104/0x1d0 [ 81.730427][ T6568] ? skb_release_data+0x50e/0x5c0 [ 81.735464][ T6568] ? skb_release_data+0x50e/0x5c0 [ 81.740823][ T6568] __traceiter_kfree+0x2b/0x50 [ 81.745705][ T6568] ? skb_release_data+0x50e/0x5c0 [ 81.750741][ T6568] kfree+0x247/0x2f0 [ 81.754740][ T6568] ? skb_put+0xba/0x100 [ 81.758910][ T6568] skb_release_data+0x50e/0x5c0 [ 81.763842][ T6568] ? netlink_broadcast_filtered+0xae7/0xbe0 [ 81.769829][ T6568] __kfree_skb+0x42/0x150 [ 81.774257][ T6568] consume_skb+0x49/0x160 [ 81.778610][ T6568] netlink_broadcast_filtered+0xae7/0xbe0 [ 81.784359][ T6568] ? rtmsg_ifinfo_build_skb+0x122/0x1b0 [ 81.789936][ T6568] nlmsg_notify+0xca/0x170 [ 81.794518][ T6568] rtmsg_ifinfo+0xeb/0x100 [ 81.799004][ T6568] dev_close_many+0x151/0x240 [ 81.803701][ T6568] unregister_netdevice_many_notify+0x263/0x11b0 [ 81.810386][ T6568] ? __pfx_vxcan_dellink+0x10/0x10 [ 81.815516][ T6568] rtnl_dellink+0x38b/0x590 [ 81.820145][ T6568] ? security_capable+0x81/0x90 [ 81.825056][ T6568] ? ns_capable+0x7d/0xb0 [ 81.829406][ T6568] ? __pfx_rtnl_dellink+0x10/0x10 [ 81.834477][ T6568] rtnetlink_rcv_msg+0x651/0x710 [ 81.839482][ T6568] ? __dev_queue_xmit+0x186/0x2090 [ 81.844604][ T6568] netlink_rcv_skb+0x12c/0x230 [ 81.849389][ T6568] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.854889][ T6568] rtnetlink_rcv+0x1c/0x30 [ 81.859324][ T6568] netlink_unicast+0x599/0x670 [ 81.864126][ T6568] netlink_sendmsg+0x5cc/0x6e0 [ 81.869009][ T6568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.874308][ T6568] __sock_sendmsg+0x140/0x180 [ 81.879003][ T6568] ____sys_sendmsg+0x312/0x410 [ 81.883780][ T6568] __sys_sendmsg+0x19d/0x230 [ 81.888395][ T6568] __x64_sys_sendmsg+0x46/0x50 [ 81.893286][ T6568] x64_sys_call+0x2734/0x2dc0 [ 81.897982][ T6568] do_syscall_64+0xc9/0x1c0 [ 81.902600][ T6568] ? clear_bhb_loop+0x55/0xb0 [ 81.907611][ T6568] ? clear_bhb_loop+0x55/0xb0 [ 81.912294][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.918245][ T6568] RIP: 0033:0x7ff7423e5d29 [ 81.922712][ T6568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.942329][ T6568] RSP: 002b:00007ff740a51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.950778][ T6568] RAX: ffffffffffffffda RBX: 00007ff7425d5fa0 RCX: 00007ff7423e5d29 [ 81.958757][ T6568] RDX: 0000000000040044 RSI: 0000000020000200 RDI: 0000000000000005 [ 81.966782][ T6568] RBP: 00007ff740a51090 R08: 0000000000000000 R09: 0000000000000000 [ 81.974805][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.982956][ T6568] R13: 0000000000000000 R14: 00007ff7425d5fa0 R15: 00007fff5f40c7f8 [ 81.990943][ T6568] [ 82.008014][ T3547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.024829][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.7.707'. [ 82.030500][ T6574] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=6574 comm=syz.5.708 [ 82.037096][ T6575] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=6575 comm=syz.5.708 [ 82.116044][ T6580] loop5: detected capacity change from 0 to 512 [ 82.124789][ T6580] EXT4-fs: inline encryption not supported [ 82.150918][ T6580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.171881][ T6580] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.183093][ T6580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.195720][ T6589] loop7: detected capacity change from 0 to 128 [ 82.203947][ T6589] FAULT_INJECTION: forcing a failure. [ 82.203947][ T6589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.217059][ T6589] CPU: 1 UID: 0 PID: 6589 Comm: syz.7.713 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 82.227728][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.237814][ T6589] Call Trace: [ 82.241107][ T6589] [ 82.244058][ T6589] dump_stack_lvl+0xf2/0x150 [ 82.248773][ T6589] dump_stack+0x15/0x1a [ 82.251916][ T6580] netlink: 28 bytes leftover after parsing attributes in process `syz.5.710'. [ 82.252950][ T6589] should_fail_ex+0x223/0x230 [ 82.266593][ T6589] should_fail+0xb/0x10 [ 82.270790][ T6589] should_fail_usercopy+0x1a/0x20 [ 82.275856][ T6589] _copy_to_user+0x20/0xa0 [ 82.280373][ T6589] __x64_sys_statfs+0xa4/0xf0 [ 82.285114][ T6589] x64_sys_call+0x1fcd/0x2dc0 [ 82.289889][ T6589] do_syscall_64+0xc9/0x1c0 [ 82.294414][ T6589] ? clear_bhb_loop+0x55/0xb0 [ 82.299111][ T6589] ? clear_bhb_loop+0x55/0xb0 [ 82.303987][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.309952][ T6589] RIP: 0033:0x7fb7db685d29 [ 82.314415][ T6589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.324286][ T6596] netlink: 'syz.2.715': attribute type 13 has an invalid length. [ 82.334127][ T6589] RSP: 002b:00007fb7d9cf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 82.334161][ T6589] RAX: ffffffffffffffda RBX: 00007fb7db875fa0 RCX: 00007fb7db685d29 [ 82.334176][ T6589] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 00000000200000c0 [ 82.334192][ T6589] RBP: 00007fb7d9cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.334208][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.334224][ T6589] R13: 0000000000000000 R14: 00007fb7db875fa0 R15: 00007ffc078f8f88 [ 82.334249][ T6589] [ 82.344074][ T9] usb 5-1: enqueue for inactive port 0 [ 82.353852][ T6596] gretap0: refused to change device tx_queue_len [ 82.384060][ T9] usb 5-1: enqueue for inactive port 0 [ 82.390461][ T6596] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 82.427616][ T6598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6598 comm=syz.6.716 [ 82.462872][ T6598] netlink: 'syz.6.716': attribute type 1 has an invalid length. [ 82.471032][ T6602] netlink: 'syz.6.716': attribute type 1 has an invalid length. [ 82.489790][ T9] vhci_hcd: vhci_device speed not set [ 82.509997][ T6598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.517463][ T6607] syz.2.719[6607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.517539][ T6607] syz.2.719[6607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.518021][ T6602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17853 sclass=netlink_route_socket pid=6602 comm=syz.6.716 [ 82.530284][ T6607] syz.2.719[6607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.674330][ T6615] xt_CT: No such helper "snmp" [ 82.740684][ T29] kauditd_printk_skb: 605 callbacks suppressed [ 82.740706][ T29] audit: type=1326 audit(1735239013.190:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7423e5d29 code=0x7ffc0000 [ 82.775123][ T6610] loop2: detected capacity change from 0 to 512 [ 82.783294][ T29] audit: type=1326 audit(1735239013.230:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff7423e5d29 code=0x7ffc0000 [ 82.806753][ T29] audit: type=1326 audit(1735239013.230:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff7423e5d63 code=0x7ffc0000 [ 82.830046][ T29] audit: type=1326 audit(1735239013.230:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff7423e47df code=0x7ffc0000 [ 82.853391][ T29] audit: type=1326 audit(1735239013.230:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff7423e5db7 code=0x7ffc0000 [ 82.876772][ T29] audit: type=1326 audit(1735239013.230:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7423e4690 code=0x7ffc0000 [ 82.900315][ T29] audit: type=1326 audit(1735239013.230:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7423e592b code=0x7ffc0000 [ 82.923596][ T29] audit: type=1326 audit(1735239013.240:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff7423e498a code=0x7ffc0000 [ 82.946812][ T29] audit: type=1326 audit(1735239013.240:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff7423e498a code=0x7ffc0000 [ 82.970050][ T29] audit: type=1326 audit(1735239013.240:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff7423e4597 code=0x7ffc0000 [ 83.040290][ T6627] loop5: detected capacity change from 0 to 1024 [ 83.049390][ T6627] EXT4-fs: inline encryption not supported [ 83.064722][ T6622] loop6: detected capacity change from 0 to 512 [ 83.071611][ T6622] EXT4-fs: inline encryption not supported [ 83.083350][ T6627] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.096921][ T6627] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 83.106873][ T6627] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 83.120209][ T6627] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 83.131327][ T6627] EXT4-fs error (device loop5): ext4_get_journal_inode:5809: inode #5: comm syz.5.727: unexpected bad inode w/o EXT4_IGET_BAD [ 83.147444][ T6610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.154125][ T6627] EXT4-fs (loop5): no journal found [ 83.165314][ T6627] EXT4-fs (loop5): can't get journal size [ 83.170212][ T6610] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.172379][ T6622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.189967][ T6627] EXT4-fs (loop5): failed to initialize system zone (-117) [ 83.201650][ T6627] EXT4-fs (loop5): mount failed [ 83.215681][ T6637] netlink: 'syz.7.728': attribute type 4 has an invalid length. [ 83.227500][ T6622] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.239656][ T6637] netlink: 'syz.7.728': attribute type 4 has an invalid length. [ 83.240659][ T6622] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.285455][ T6622] netlink: 'syz.6.725': attribute type 4 has an invalid length. [ 83.313414][ T6639] loop5: detected capacity change from 0 to 512 [ 83.366964][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.382665][ T6639] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 83.411570][ T6642] netlink: 'syz.6.730': attribute type 13 has an invalid length. [ 83.431882][ T6639] EXT4-fs (loop5): orphan cleanup on readonly fs [ 83.445065][ T6642] gretap0: refused to change device tx_queue_len [ 83.451691][ T6642] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 83.489551][ T6639] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.538359][ T6639] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 83.578410][ T6639] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.729: bg 0: block 40: padding at end of block bitmap is not set [ 83.619332][ T6656] loop2: detected capacity change from 0 to 128 [ 83.651383][ T6639] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 83.661083][ T6659] syz.6.735[6659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.661187][ T6659] syz.6.735[6659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.668774][ T6662] FAULT_INJECTION: forcing a failure. [ 83.668774][ T6662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.696773][ T6662] CPU: 1 UID: 0 PID: 6662 Comm: syz.1.736 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 83.707543][ T6662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.717645][ T6662] Call Trace: [ 83.721000][ T6662] [ 83.724002][ T6662] dump_stack_lvl+0xf2/0x150 [ 83.728627][ T6662] dump_stack+0x15/0x1a [ 83.732813][ T6662] should_fail_ex+0x223/0x230 [ 83.737513][ T6662] should_fail+0xb/0x10 [ 83.741760][ T6662] should_fail_usercopy+0x1a/0x20 [ 83.746824][ T6662] _copy_from_user+0x1e/0xb0 [ 83.751435][ T6662] move_addr_to_kernel+0x82/0x120 [ 83.756498][ T6662] __sys_connect+0x67/0x1b0 [ 83.761069][ T6662] __x64_sys_connect+0x41/0x50 [ 83.765923][ T6662] x64_sys_call+0x22a7/0x2dc0 [ 83.770665][ T6662] do_syscall_64+0xc9/0x1c0 [ 83.775231][ T6662] ? clear_bhb_loop+0x55/0xb0 [ 83.779918][ T6662] ? clear_bhb_loop+0x55/0xb0 [ 83.784604][ T6662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.790530][ T6662] RIP: 0033:0x7f09c6665d29 [ 83.794966][ T6662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.814660][ T6662] RSP: 002b:00007f09c4cd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 83.823106][ T6662] RAX: ffffffffffffffda RBX: 00007f09c6855fa0 RCX: 00007f09c6665d29 [ 83.831083][ T6662] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000006 [ 83.839120][ T6662] RBP: 00007f09c4cd1090 R08: 0000000000000000 R09: 0000000000000000 [ 83.847101][ T6662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.855270][ T6662] R13: 0000000000000000 R14: 00007f09c6855fa0 R15: 00007ffcd5056268 [ 83.863258][ T6662] [ 83.871457][ T6639] EXT4-fs (loop5): 1 truncate cleaned up [ 83.877520][ T6659] syz.6.735[6659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.878792][ T6639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.946921][ T6659] lo speed is unknown, defaulting to 1000 [ 83.960010][ T3547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.007893][ T6667] loop2: detected capacity change from 0 to 512 [ 84.033089][ T6670] dvmrp0: entered allmulticast mode [ 84.036258][ T6667] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.079554][ T6678] syz.1.741[6678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.084337][ T6667] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 84.104874][ T6667] System zones: 1-12 [ 84.128698][ T6667] EXT4-fs (loop2): 1 truncate cleaned up [ 84.135259][ T6667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.158729][ T6683] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 84.232714][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.245731][ T6693] __nla_validate_parse: 4 callbacks suppressed [ 84.245750][ T6693] netlink: 28 bytes leftover after parsing attributes in process `syz.6.750'. [ 84.261113][ T6693] netlink: 28 bytes leftover after parsing attributes in process `syz.6.750'. [ 84.273388][ T6689] gretap0: refused to change device tx_queue_len [ 84.273408][ T6689] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 84.304981][ T6693] team0: entered promiscuous mode [ 84.327878][ T6693] team_slave_0: entered promiscuous mode [ 84.328304][ T6693] team_slave_1: entered promiscuous mode [ 84.350578][ T6693] batadv_slave_1: entered promiscuous mode [ 84.353656][ T6693] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 84.353676][ T6693] Cannot create hsr debugfs directory [ 84.393699][ T6705] FAULT_INJECTION: forcing a failure. [ 84.393699][ T6705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.393732][ T6705] CPU: 0 UID: 0 PID: 6705 Comm: syz.6.752 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 84.393831][ T6705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.393847][ T6705] Call Trace: [ 84.393856][ T6705] [ 84.393865][ T6705] dump_stack_lvl+0xf2/0x150 [ 84.393911][ T6705] dump_stack+0x15/0x1a [ 84.393942][ T6705] should_fail_ex+0x223/0x230 [ 84.393992][ T6705] should_fail+0xb/0x10 [ 84.394018][ T6705] should_fail_usercopy+0x1a/0x20 [ 84.394055][ T6705] _copy_from_user+0x1e/0xb0 [ 84.394084][ T6705] do_ipv6_setsockopt+0x1ef/0x2250 [ 84.394196][ T6705] ? _parse_integer+0x27/0x30 [ 84.394220][ T6705] ? kstrtouint+0x77/0xc0 [ 84.394239][ T6705] ? avc_has_perm_noaudit+0x1cc/0x210 [ 84.394273][ T6705] ? selinux_netlbl_socket_setsockopt+0xe5/0x2d0 [ 84.394308][ T6705] ipv6_setsockopt+0x57/0x130 [ 84.394395][ T6705] tcp_setsockopt+0x93/0xb0 [ 84.394437][ T6705] sock_common_setsockopt+0x64/0x80 [ 84.394493][ T6705] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 84.394534][ T6705] __sys_setsockopt+0x187/0x200 [ 84.394563][ T6705] __x64_sys_setsockopt+0x66/0x80 [ 84.394615][ T6705] x64_sys_call+0x282e/0x2dc0 [ 84.394636][ T6705] do_syscall_64+0xc9/0x1c0 [ 84.394656][ T6705] ? clear_bhb_loop+0x55/0xb0 [ 84.394682][ T6705] ? clear_bhb_loop+0x55/0xb0 [ 84.394707][ T6705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.394780][ T6705] RIP: 0033:0x7f219b955d29 [ 84.394798][ T6705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.394851][ T6705] RSP: 002b:00007f2199fc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 84.394876][ T6705] RAX: ffffffffffffffda RBX: 00007f219bb45fa0 RCX: 00007f219b955d29 [ 84.394892][ T6705] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000003 [ 84.394906][ T6705] RBP: 00007f2199fc7090 R08: 0000000000000038 R09: 0000000000000000 [ 84.394919][ T6705] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000001 [ 84.394932][ T6705] R13: 0000000000000000 R14: 00007f219bb45fa0 R15: 00007ffc7b97b9a8 [ 84.394964][ T6705] [ 84.477509][ T6707] loop2: detected capacity change from 0 to 512 [ 84.513977][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.6.755'. [ 84.540045][ T6713] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 84.586411][ T6707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 84.700027][ T6707] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.776339][ T6729] loop7: detected capacity change from 0 to 512 [ 84.783940][ T6729] EXT4-fs: Ignoring removed orlov option [ 84.790447][ T6729] journal_path: Non-blockdev passed as './file0' [ 84.797058][ T6729] EXT4-fs: error: could not find journal device path [ 84.843620][ T6707] wireguard0: entered promiscuous mode [ 84.849274][ T6707] wireguard0: entered allmulticast mode [ 84.871488][ T6732] lo speed is unknown, defaulting to 1000 [ 84.905222][ T6742] loop6: detected capacity change from 0 to 1024 [ 84.935761][ T6748] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 84.948534][ T6742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.950156][ T6744] gretap0: refused to change device tx_queue_len [ 84.967094][ T6744] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 84.983144][ T6742] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.098671][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 85.163153][ T4179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.275136][ T6773] loop6: detected capacity change from 0 to 512 [ 85.290397][ T6773] EXT4-fs: Ignoring removed orlov option [ 85.320562][ T6773] journal_path: Non-blockdev passed as './file0' [ 85.326951][ T6773] EXT4-fs: error: could not find journal device path [ 85.418456][ T6767] loop2: detected capacity change from 0 to 1024 [ 85.423936][ T6785] gretap0: refused to change device tx_queue_len [ 85.427710][ T6783] loop6: detected capacity change from 0 to 512 [ 85.431297][ T6785] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 85.470584][ T6767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.487505][ T6791] loop7: detected capacity change from 0 to 512 [ 85.489109][ T6767] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.505342][ T6783] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.520533][ T6767] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.772: bg 0: block 393: padding at end of block bitmap is not set [ 85.524716][ T6783] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.537620][ T6767] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 85.551079][ T6783] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.783: Failed to acquire dquot type 1 [ 85.557964][ T6767] EXT4-fs (loop2): This should not happen!! Data will be lost [ 85.557964][ T6767] [ 85.581449][ T6791] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.594092][ T6791] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.607039][ T6791] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.785: Failed to acquire dquot type 1 [ 85.642449][ T6797] netlink: 72 bytes leftover after parsing attributes in process `syz.7.787'. [ 85.697719][ T6802] loop7: detected capacity change from 0 to 512 [ 85.723070][ T6802] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.739780][ T6802] FAULT_INJECTION: forcing a failure. [ 85.739780][ T6802] name failslab, interval 1, probability 0, space 0, times 0 [ 85.752513][ T6802] CPU: 0 UID: 0 PID: 6802 Comm: syz.7.789 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 85.763206][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 85.773351][ T6802] Call Trace: [ 85.776691][ T6802] [ 85.779641][ T6802] dump_stack_lvl+0xf2/0x150 [ 85.784333][ T6802] dump_stack+0x15/0x1a [ 85.788538][ T6802] should_fail_ex+0x223/0x230 [ 85.793252][ T6802] should_failslab+0x8f/0xb0 [ 85.797992][ T6802] kmem_cache_alloc_noprof+0x52/0x320 [ 85.803397][ T6802] ? getname_flags+0x81/0x3b0 [ 85.808107][ T6802] getname_flags+0x81/0x3b0 [ 85.812645][ T6802] __x64_sys_rename+0x33/0x70 [ 85.817409][ T6802] x64_sys_call+0x2b1c/0x2dc0 [ 85.822136][ T6802] do_syscall_64+0xc9/0x1c0 [ 85.826727][ T6802] ? clear_bhb_loop+0x55/0xb0 [ 85.831432][ T6802] ? clear_bhb_loop+0x55/0xb0 [ 85.836140][ T6802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.842096][ T6802] RIP: 0033:0x7fb7db685d29 [ 85.846590][ T6802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.866237][ T6802] RSP: 002b:00007fb7d9cf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 85.874696][ T6802] RAX: ffffffffffffffda RBX: 00007fb7db875fa0 RCX: 00007fb7db685d29 [ 85.882704][ T6802] RDX: 0000000000000000 RSI: 0000000020000740 RDI: 00000000200003c0 [ 85.890711][ T6802] RBP: 00007fb7d9cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.898784][ T6802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.906841][ T6802] R13: 0000000000000000 R14: 00007fb7db875fa0 R15: 00007ffc078f8f88 [ 85.914938][ T6802] [ 85.958935][ T6826] loop7: detected capacity change from 0 to 512 [ 85.969632][ T6826] EXT4-fs: Ignoring removed orlov option [ 85.977097][ T6825] gretap0: refused to change device tx_queue_len [ 85.983600][ T6825] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 85.989207][ T6826] journal_path: Non-blockdev passed as './file0' [ 86.005571][ T6826] EXT4-fs: error: could not find journal device path [ 86.219081][ T6849] lo speed is unknown, defaulting to 1000 [ 86.270337][ T6861] FAULT_INJECTION: forcing a failure. [ 86.270337][ T6861] name failslab, interval 1, probability 0, space 0, times 0 [ 86.271488][ T6863] validate_nla: 4 callbacks suppressed [ 86.271510][ T6863] netlink: 'syz.7.809': attribute type 13 has an invalid length. [ 86.283042][ T6861] CPU: 1 UID: 0 PID: 6861 Comm: syz.2.808 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 86.307036][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 86.317099][ T6861] Call Trace: [ 86.320393][ T6861] [ 86.323330][ T6861] dump_stack_lvl+0xf2/0x150 [ 86.327963][ T6861] dump_stack+0x15/0x1a [ 86.332151][ T6861] should_fail_ex+0x223/0x230 [ 86.336834][ T6861] ? __hw_addr_add_ex+0x13d/0x360 [ 86.341912][ T6861] should_failslab+0x8f/0xb0 [ 86.343372][ T6865] netlink: 'syz.6.807': attribute type 10 has an invalid length. [ 86.346529][ T6861] __kmalloc_cache_noprof+0x4e/0x320 [ 86.359590][ T6861] __hw_addr_add_ex+0x13d/0x360 [ 86.359652][ T6861] dev_addr_init+0xb2/0x120 [ 86.359701][ T6861] alloc_netdev_mqs+0x1e1/0x9c0 [ 86.359721][ T6861] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 86.359761][ T6861] ip6gre_tunnel_locate+0x14e/0x480 [ 86.359812][ T6861] ? should_fail_ex+0xd7/0x230 [ 86.359853][ T6861] ? gre_flags_to_tnl_flags+0x1bf/0x1f0 [ 86.359890][ T6861] ip6gre_tunnel_siocdevprivate+0x583/0x6f0 [ 86.359994][ T6861] ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 86.360036][ T6861] dev_ifsioc+0x84e/0xa10 [ 86.360083][ T6861] dev_ioctl+0x8e9/0xab0 [ 86.360116][ T6861] sock_ioctl+0x57d/0x600 [ 86.360158][ T6861] ? __pfx_sock_ioctl+0x10/0x10 [ 86.360188][ T6861] __se_sys_ioctl+0xc9/0x140 [ 86.360216][ T6861] __x64_sys_ioctl+0x43/0x50 [ 86.360264][ T6861] x64_sys_call+0x1690/0x2dc0 [ 86.360286][ T6861] do_syscall_64+0xc9/0x1c0 [ 86.360306][ T6861] ? clear_bhb_loop+0x55/0xb0 [ 86.360408][ T6861] ? clear_bhb_loop+0x55/0xb0 [ 86.360428][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.360468][ T6861] RIP: 0033:0x7ff7423e5d29 [ 86.360487][ T6861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.360512][ T6861] RSP: 002b:00007ff740a51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.360537][ T6861] RAX: ffffffffffffffda RBX: 00007ff7425d5fa0 RCX: 00007ff7423e5d29 [ 86.360600][ T6861] RDX: 0000000020000040 RSI: 00000000000089f1 RDI: 0000000000000008 [ 86.360617][ T6861] RBP: 00007ff740a51090 R08: 0000000000000000 R09: 0000000000000000 [ 86.360633][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.360646][ T6861] R13: 0000000000000000 R14: 00007ff7425d5fa0 R15: 00007fff5f40c7f8 [ 86.360666][ T6861] [ 86.365893][ T6863] gretap0: refused to change device tx_queue_len [ 86.440107][ T6865] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 86.448992][ T6870] bpf_get_probe_write_proto: 5 callbacks suppressed [ 86.449011][ T6870] syz.1.811[6870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.523782][ T6874] syz.6.812[6874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.534415][ T6870] syz.1.811[6870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.544602][ T6874] syz.6.812[6874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.547443][ T6870] syz.1.811[6870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.562429][ T6874] syz.6.812[6874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.676940][ T6878] x_tables: duplicate underflow at hook 1 [ 86.819021][ T6876] loop6: detected capacity change from 0 to 512 [ 86.820831][ T6895] loop7: detected capacity change from 0 to 2048 [ 86.857261][ T6876] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.858339][ T6902] serio: Serial port ptm0 [ 86.924273][ T6907] loop2: detected capacity change from 0 to 512 [ 86.961441][ T6907] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.989723][ T6897] loop2: detected capacity change from 0 to 512 [ 87.020050][ T6897] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.048689][ T6897] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.821: bad orphan inode 16 [ 87.055968][ T6919] syz.1.824[6919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.058973][ T6919] syz.1.824[6919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.071169][ T6919] syz.1.824[6919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.084053][ T6917] netlink: 'syz.5.825': attribute type 13 has an invalid length. [ 87.105318][ T6917] gretap0: refused to change device tx_queue_len [ 87.111734][ T6917] net_ratelimit: 1 callbacks suppressed [ 87.111749][ T6917] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 87.135841][ T6897] ext4_test_bit(bit=15, block=4) = 0 [ 87.141228][ T6897] EXT4-fs (loop2): 1 orphan inode deleted [ 87.145786][ T36] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 87.161998][ T36] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 87.174338][ T36] EXT4-fs (loop7): This should not happen!! Data will be lost [ 87.174338][ T36] [ 87.184010][ T36] EXT4-fs (loop7): Total free blocks count 0 [ 87.190050][ T36] EXT4-fs (loop7): Free/Dirty block details [ 87.195973][ T36] EXT4-fs (loop7): free_blocks=2415919104 [ 87.201762][ T36] EXT4-fs (loop7): dirty_blocks=8224 [ 87.207143][ T36] EXT4-fs (loop7): Block reservation details [ 87.213200][ T36] EXT4-fs (loop7): i_reserved_data_blocks=514 [ 87.235294][ T28] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 87.247972][ T28] EXT4-fs (loop7): This should not happen!! Data will be lost [ 87.247972][ T28] [ 87.265452][ T6925] netlink: 36 bytes leftover after parsing attributes in process `syz.5.829'. [ 87.288479][ T6925] netlink: 'syz.5.829': attribute type 1 has an invalid length. [ 87.303111][ T6927] syz.2.828[6927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.318168][ T6927] loop2: detected capacity change from 0 to 512 [ 87.349441][ T6925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.354332][ T6927] EXT4-fs: Ignoring removed orlov option [ 87.371603][ T6927] journal_path: Non-blockdev passed as './file0' [ 87.378002][ T6927] EXT4-fs: error: could not find journal device path [ 87.409378][ T6934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.425434][ T6934] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 87.437255][ T6934] bond0: (slave vcan1): Error -95 calling set_mac_address [ 87.519237][ T6948] FAULT_INJECTION: forcing a failure. [ 87.519237][ T6948] name failslab, interval 1, probability 0, space 0, times 0 [ 87.531992][ T6948] CPU: 1 UID: 0 PID: 6948 Comm: syz.6.832 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 87.542643][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.552796][ T6948] Call Trace: [ 87.556110][ T6948] [ 87.559058][ T6948] dump_stack_lvl+0xf2/0x150 [ 87.563704][ T6948] dump_stack+0x15/0x1a [ 87.567900][ T6948] should_fail_ex+0x223/0x230 [ 87.572613][ T6948] should_failslab+0x8f/0xb0 [ 87.577249][ T6948] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 87.583633][ T6948] ? kvasprintf_const+0x5d/0x100 [ 87.588623][ T6948] kvasprintf+0x8c/0x110 [ 87.592912][ T6948] ? string+0x1ee/0x210 [ 87.597113][ T6948] kvasprintf_const+0x5d/0x100 [ 87.601926][ T6948] kobject_set_name_vargs+0x44/0xe0 [ 87.607213][ T6948] dev_set_name+0x84/0xb0 [ 87.611583][ T6948] ? hrtimer_init+0x104/0x1f0 [ 87.616281][ T6948] ? swiotlb_dev_init+0x19/0x30 [ 87.621174][ T6948] ? swiotlb_dev_init+0x19/0x30 [ 87.626052][ T6948] ? device_initialize+0x1fe/0x210 [ 87.631283][ T6948] __serio_register_port+0xfb/0x1d0 [ 87.636522][ T6948] serport_ldisc_read+0x1e4/0x2e0 [ 87.641566][ T6948] tty_read+0x155/0x460 [ 87.645747][ T6948] do_iter_readv_writev+0x394/0x450 [ 87.651006][ T6948] vfs_readv+0x1df/0x660 [ 87.655267][ T6948] ? proc_fail_nth_write+0x12a/0x150 [ 87.660578][ T6948] do_readv+0xf4/0x220 [ 87.664701][ T6948] __x64_sys_readv+0x45/0x50 [ 87.669309][ T6948] x64_sys_call+0x2c34/0x2dc0 [ 87.673995][ T6948] do_syscall_64+0xc9/0x1c0 [ 87.678560][ T6948] ? clear_bhb_loop+0x55/0xb0 [ 87.683251][ T6948] ? clear_bhb_loop+0x55/0xb0 [ 87.687949][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.693930][ T6948] RIP: 0033:0x7f219b955d29 [ 87.698351][ T6948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.718027][ T6948] RSP: 002b:00007f2199fc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 87.726499][ T6948] RAX: ffffffffffffffda RBX: 00007f219bb45fa0 RCX: 00007f219b955d29 [ 87.734597][ T6948] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000006 [ 87.742661][ T6948] RBP: 00007f2199fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.750652][ T6948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.758638][ T6948] R13: 0000000000000000 R14: 00007f219bb45fa0 R15: 00007ffc7b97b9a8 [ 87.766687][ T6948] [ 87.769823][ T6948] serio: Serial port ptm1 [ 87.774186][ T6951] FAULT_INJECTION: forcing a failure. [ 87.774186][ T6951] name failslab, interval 1, probability 0, space 0, times 0 [ 87.774988][ T24] serio (null): device_add() failed for ptm1/serio0 (Serial port), error: -22 [ 87.786859][ T6951] CPU: 0 UID: 0 PID: 6951 Comm: syz.1.836 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 87.806265][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.816377][ T6951] Call Trace: [ 87.819677][ T6951] [ 87.822611][ T6951] dump_stack_lvl+0xf2/0x150 [ 87.827318][ T6951] dump_stack+0x15/0x1a [ 87.831493][ T6951] should_fail_ex+0x223/0x230 [ 87.836237][ T6951] should_failslab+0x8f/0xb0 [ 87.840906][ T6951] kmem_cache_alloc_noprof+0x52/0x320 [ 87.846325][ T6951] ? getname_flags+0x81/0x3b0 [ 87.851017][ T6951] getname_flags+0x81/0x3b0 [ 87.855528][ T6951] __x64_sys_unlinkat+0x75/0xb0 [ 87.860410][ T6951] x64_sys_call+0x28d8/0x2dc0 [ 87.865176][ T6951] do_syscall_64+0xc9/0x1c0 [ 87.869795][ T6951] ? clear_bhb_loop+0x55/0xb0 [ 87.874551][ T6951] ? clear_bhb_loop+0x55/0xb0 [ 87.879234][ T6951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.885153][ T6951] RIP: 0033:0x7f09c6665d29 [ 87.889577][ T6951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.909213][ T6951] RSP: 002b:00007f09c4cd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 87.917636][ T6951] RAX: ffffffffffffffda RBX: 00007f09c6855fa0 RCX: 00007f09c6665d29 [ 87.925668][ T6951] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 87.933644][ T6951] RBP: 00007f09c4cd1090 R08: 0000000000000000 R09: 0000000000000000 [ 87.941676][ T6951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.949695][ T6951] R13: 0000000000000000 R14: 00007f09c6855fa0 R15: 00007ffcd5056268 [ 87.957681][ T6951] [ 87.995160][ T29] kauditd_printk_skb: 695 callbacks suppressed [ 87.995179][ T29] audit: type=1400 audit(1735239018.240:5041): avc: denied { create } for pid=6953 comm="syz.7.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.021574][ T29] audit: type=1400 audit(1735239018.240:5042): avc: denied { setopt } for pid=6953 comm="syz.7.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.041931][ T29] audit: type=1400 audit(1735239018.420:5043): avc: denied { create } for pid=6953 comm="syz.7.837" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.063212][ T29] audit: type=1400 audit(1735239018.420:5044): avc: denied { map } for pid=6953 comm="syz.7.837" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.087370][ T29] audit: type=1400 audit(1735239018.420:5045): avc: denied { read write } for pid=6953 comm="syz.7.837" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.112241][ T29] audit: type=1400 audit(1735239018.420:5046): avc: denied { shutdown } for pid=6942 comm="syz.2.835" laddr=fe80::b lport=43835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.134115][ T29] audit: type=1400 audit(1735239018.430:5047): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 88.147194][ T6955] loop7: detected capacity change from 0 to 2048 [ 88.156139][ T29] audit: type=1400 audit(1735239018.430:5048): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.184124][ T29] audit: type=1400 audit(1735239018.430:5049): avc: denied { open } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.206907][ T29] audit: type=1400 audit(1735239018.430:5050): avc: denied { getattr } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.235053][ T6963] loop6: detected capacity change from 0 to 512 [ 88.242666][ T6964] netlink: 'syz.1.839': attribute type 1 has an invalid length. [ 88.271632][ T6965] netlink: 'syz.2.840': attribute type 13 has an invalid length. [ 88.299154][ T6965] gretap0: refused to change device tx_queue_len [ 88.305606][ T6965] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 88.347623][ T6963] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.378006][ T6963] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.838: Failed to acquire dquot type 1 [ 88.410158][ T6977] loop5: detected capacity change from 0 to 512 [ 88.427626][ T6977] EXT4-fs: Ignoring removed orlov option [ 88.442833][ T6977] journal_path: Non-blockdev passed as './file0' [ 88.449284][ T6977] EXT4-fs: error: could not find journal device path [ 88.711618][ T7008] loop2: detected capacity change from 0 to 512 [ 88.734152][ T7008] ext4: Unknown parameter 'fsuuid' [ 88.747925][ T7013] loop5: detected capacity change from 0 to 512 [ 88.749259][ T7008] loop2: detected capacity change from 0 to 512 [ 88.759065][ T7013] EXT4-fs: Ignoring removed orlov option [ 88.766799][ T7010] loop6: detected capacity change from 0 to 512 [ 88.776748][ T7013] journal_path: Non-blockdev passed as './file0' [ 88.783232][ T7013] EXT4-fs: error: could not find journal device path [ 88.790516][ T7010] EXT4-fs: Ignoring removed oldalloc option [ 88.796219][ T7008] EXT4-fs: Ignoring removed nobh option [ 88.796471][ T7010] EXT4-fs: Ignoring removed i_version option [ 88.802110][ T7008] EXT4-fs: Ignoring removed nobh option [ 88.813752][ T7008] ext4: Unknown parameter 'i_version.grpquota' [ 88.860268][ T7010] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.6.857: corrupted xattr block 95: invalid header [ 88.884292][ T7010] EXT4-fs (loop6): Remounting filesystem read-only [ 88.890888][ T7010] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 88.907034][ T7010] EXT4-fs (loop6): 1 orphan inode deleted [ 88.914303][ T7010] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 88.933519][ T7023] FAULT_INJECTION: forcing a failure. [ 88.933519][ T7023] name failslab, interval 1, probability 0, space 0, times 0 [ 88.946373][ T7023] CPU: 0 UID: 0 PID: 7023 Comm: syz.2.861 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 88.957074][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.967145][ T7023] Call Trace: [ 88.970457][ T7023] [ 88.973517][ T7023] dump_stack_lvl+0xf2/0x150 [ 88.978158][ T7023] dump_stack+0x15/0x1a [ 88.982430][ T7023] should_fail_ex+0x223/0x230 [ 88.987210][ T7023] should_failslab+0x8f/0xb0 [ 88.991843][ T7023] kmem_cache_alloc_noprof+0x52/0x320 [ 88.997288][ T7023] ? audit_log_start+0x34c/0x6b0 [ 89.002241][ T7023] ? memcg_list_lru_alloc+0xce/0x4e0 [ 89.007538][ T7023] audit_log_start+0x34c/0x6b0 [ 89.012332][ T7023] ? mod_objcg_state+0x2ea/0x4f0 [ 89.017287][ T7023] audit_seccomp+0x4b/0x130 [ 89.021950][ T7023] __seccomp_filter+0x6fa/0x1180 [ 89.026909][ T7023] ? security_file_alloc+0x63/0x100 [ 89.032120][ T7023] ? percpu_counter_add_batch+0xc6/0x140 [ 89.037767][ T7023] ? errseq_sample+0x2f/0x40 [ 89.042456][ T7023] ? file_init_path+0x267/0x290 [ 89.047356][ T7023] __secure_computing+0x9f/0x1c0 [ 89.052314][ T7023] syscall_trace_enter+0xd1/0x1f0 [ 89.057391][ T7023] ? fpregs_assert_state_consistent+0x83/0xa0 [ 89.063545][ T7023] do_syscall_64+0xaa/0x1c0 [ 89.068055][ T7023] ? clear_bhb_loop+0x55/0xb0 [ 89.073874][ T7023] ? clear_bhb_loop+0x55/0xb0 [ 89.078559][ T7023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.084483][ T7023] RIP: 0033:0x7ff7423e473c [ 89.088902][ T7023] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 89.108534][ T7023] RSP: 002b:00007ff740a51030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.117020][ T7023] RAX: ffffffffffffffda RBX: 00007ff7425d5fa0 RCX: 00007ff7423e473c [ 89.125058][ T7023] RDX: 000000000000000f RSI: 00007ff740a510a0 RDI: 0000000000000006 [ 89.133034][ T7023] RBP: 00007ff740a51090 R08: 0000000000000000 R09: 0000000000000000 [ 89.141110][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.149124][ T7023] R13: 0000000000000000 R14: 00007ff7425d5fa0 R15: 00007fff5f40c7f8 [ 89.157135][ T7023] [ 89.304081][ T7029] loop6: detected capacity change from 0 to 1024 [ 89.477967][ T7037] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 89.490417][ T7040] netlink: 132 bytes leftover after parsing attributes in process `syz.5.868'. [ 89.503222][ T7045] xt_nfacct: accounting object `syz0' does not exists [ 89.513794][ T7047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=7047 comm=syz.1.870 [ 89.594893][ T7054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'. [ 89.597502][ T7051] loop6: detected capacity change from 0 to 512 [ 89.617700][ T7051] EXT4-fs: Ignoring removed orlov option [ 89.636779][ T7051] journal_path: Non-blockdev passed as './file0' [ 89.643265][ T7051] EXT4-fs: error: could not find journal device path [ 89.883591][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.7.880'. [ 89.926056][ T7081] loop5: detected capacity change from 0 to 512 [ 89.942085][ T7081] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 89.955760][ T7081] EXT4-fs (loop5): 1 truncate cleaned up [ 89.991756][ T7085] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 90.036733][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.6.885'. [ 90.045594][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.885'. [ 90.054527][ T7088] netlink: 'syz.6.885': attribute type 12 has an invalid length. [ 90.062318][ T7088] netlink: 'syz.6.885': attribute type 11 has an invalid length. [ 90.149621][ T7096] loop5: detected capacity change from 0 to 164 [ 90.164192][ T7096] Unable to read rock-ridge attributes [ 90.192161][ T3547] Unable to read rock-ridge attributes [ 90.201116][ T3547] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 90.222121][ T3547] Unable to read rock-ridge attributes [ 90.232473][ T3547] Unable to read rock-ridge attributes [ 90.246327][ T3547] Unable to read rock-ridge attributes [ 90.254717][ T3547] Unable to read rock-ridge attributes [ 90.262508][ T3547] Unable to read rock-ridge attributes [ 90.269233][ T3547] ISOFS: unable to read i-node block [ 90.274906][ T3547] Unable to read rock-ridge attributes [ 90.281553][ T3547] ISOFS: unable to read i-node block [ 90.386563][ T7106] loop6: detected capacity change from 0 to 8192 [ 90.393406][ T7106] vfat: Unknown parameter 'ÿÿÿÿ18446744073709551615' [ 90.536417][ T7109] FAULT_INJECTION: forcing a failure. [ 90.536417][ T7109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.549839][ T7109] CPU: 0 UID: 0 PID: 7109 Comm: syz.1.895 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 90.560471][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.570584][ T7109] Call Trace: [ 90.573896][ T7109] [ 90.576930][ T7109] dump_stack_lvl+0xf2/0x150 [ 90.581572][ T7109] dump_stack+0x15/0x1a [ 90.585770][ T7109] should_fail_ex+0x223/0x230 [ 90.590481][ T7109] should_fail+0xb/0x10 [ 90.594663][ T7109] should_fail_usercopy+0x1a/0x20 [ 90.599710][ T7109] _copy_from_user+0x1e/0xb0 [ 90.604413][ T7109] copy_msghdr_from_user+0x54/0x2a0 [ 90.609653][ T7109] ? __fget_files+0x17c/0x1c0 [ 90.614380][ T7109] __sys_sendmsg+0x13e/0x230 [ 90.619128][ T7109] __x64_sys_sendmsg+0x46/0x50 [ 90.624034][ T7109] x64_sys_call+0x2734/0x2dc0 [ 90.628821][ T7109] do_syscall_64+0xc9/0x1c0 [ 90.633398][ T7109] ? clear_bhb_loop+0x55/0xb0 [ 90.638100][ T7109] ? clear_bhb_loop+0x55/0xb0 [ 90.642811][ T7109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.648755][ T7109] RIP: 0033:0x7f09c6665d29 [ 90.653631][ T7109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.673470][ T7109] RSP: 002b:00007f09c4cd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.681957][ T7109] RAX: ffffffffffffffda RBX: 00007f09c6855fa0 RCX: 00007f09c6665d29 [ 90.689966][ T7109] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000007 [ 90.698018][ T7109] RBP: 00007f09c4cd1090 R08: 0000000000000000 R09: 0000000000000000 [ 90.706067][ T7109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.714108][ T7109] R13: 0000000000000000 R14: 00007f09c6855fa0 R15: 00007ffcd5056268 [ 90.722549][ T7109] [ 90.725993][ C1] ================================================================== [ 90.734135][ C1] BUG: KCSAN: data-race in can_receive / can_stat_update [ 90.741231][ C1] [ 90.743569][ C1] read to 0xffff888113e8c068 of 8 bytes by interrupt on cpu 0: [ 90.748292][ T7113] netlink: 'syz.6.898': attribute type 13 has an invalid length. [ 90.751114][ C1] can_stat_update+0x444/0x6b0 [ 90.759173][ T7113] gretap0: refused to change device tx_queue_len [ 90.763747][ C1] call_timer_fn+0x3a/0x300 [ 90.770151][ T7113] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 90.774657][ C1] __run_timer_base+0x417/0x640 [ 90.795108][ C1] run_timer_softirq+0x31/0x70 [ 90.799909][ C1] handle_softirqs+0xbf/0x280 [ 90.804632][ C1] __irq_exit_rcu+0x3a/0xc0 [ 90.809262][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 90.814975][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 90.815004][ C1] dump_stack_lvl+0x133/0x150 [ 90.815036][ C1] dump_stack+0x15/0x1a [ 90.815079][ C1] should_fail_ex+0x223/0x230 [ 90.815100][ C1] should_fail+0xb/0x10 [ 90.815120][ C1] should_fail_usercopy+0x1a/0x20 [ 90.815145][ C1] _copy_from_user+0x1e/0xb0 [ 90.815179][ C1] copy_msghdr_from_user+0x54/0x2a0 [ 90.815218][ C1] __sys_sendmsg+0x13e/0x230 [ 90.815246][ C1] __x64_sys_sendmsg+0x46/0x50 [ 90.815275][ C1] x64_sys_call+0x2734/0x2dc0 [ 90.815301][ C1] do_syscall_64+0xc9/0x1c0 [ 90.815320][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.815360][ C1] [ 90.815366][ C1] read-write to 0xffff888113e8c068 of 8 bytes by interrupt on cpu 1: [ 90.815389][ C1] can_receive+0x62/0x1f0 [ 90.815428][ C1] canfd_rcv+0xe7/0x180 [ 90.815465][ C1] __netif_receive_skb+0x123/0x280 [ 90.815494][ C1] process_backlog+0x22e/0x440 [ 90.815521][ C1] __napi_poll+0x63/0x3c0 [ 90.815546][ C1] net_rx_action+0x3a1/0x7f0 [ 90.815570][ C1] handle_softirqs+0xbf/0x280 [ 90.815604][ C1] __irq_exit_rcu+0x3a/0xc0 [ 90.815641][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 90.924596][ T7111] lo speed is unknown, defaulting to 1000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 90.925562][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 90.925594][ C1] __sanitizer_cov_trace_const_cmp4+0x2f/0x90 [ 90.949047][ C1] __skb_to_sgvec+0x4a/0x660 [ 90.949086][ C1] skb_to_sgvec+0x2d/0x80 [ 90.949125][ C1] wg_packet_encrypt_worker+0x5c8/0xbb0 [ 90.949152][ C1] process_scheduled_works+0x483/0x9a0 [ 90.949187][ C1] worker_thread+0x51d/0x6f0 [ 90.949214][ C1] kthread+0x1d1/0x210 [ 90.949231][ C1] ret_from_fork+0x4b/0x60 [ 90.949249][ C1] ret_from_fork_asm+0x1a/0x30 [ 90.949272][ C1] [ 90.949277][ C1] value changed: 0x000000000000195c -> 0x0000000000000000 [ 90.949293][ C1] [ 90.949297][ C1] Reported by Kernel Concurrency Sanitizer on: [ 90.949307][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 90.949341][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.949360][ C1] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker [ 90.949388][ C1] ================================================================== [ 90.986877][ T7121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.899'. [ 91.519498][ T36] bond0 (unregistering): Released all slaves [ 91.681280][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.751539][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.800685][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.841590][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.948100][ T36] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.956813][ T36] bond_slave_0: left promiscuous mode [ 91.964271][ T36] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.973697][ T36] bond_slave_1: left promiscuous mode [ 91.980503][ T36] $Hÿ (unregistering): Released all slaves [ 92.029400][ T36] tipc: Disabling bearer [ 92.034686][ T36] tipc: Left network mode [ 92.040767][ T36] batadv_slave_1: left promiscuous mode [ 92.048055][ T36] hsr_slave_0: left promiscuous mode [ 92.053876][ T36] hsr_slave_1: left promiscuous mode [ 92.059858][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.067289][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.075057][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.082704][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.091737][ T36] veth1_macvtap: left promiscuous mode [ 92.097211][ T36] veth0_macvtap: left promiscuous mode [ 92.102828][ T36] veth1_vlan: left promiscuous mode [ 92.108176][ T36] veth0_vlan: left promiscuous mode [ 92.166396][ T36] team0 (unregistering): Port device team_slave_1 removed [ 92.177347][ T36] team0 (unregistering): Port device team_slave_0 removed