last executing test programs: 3m56.277767523s ago: executing program 32 (id=890): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x508) 2m42.270139257s ago: executing program 33 (id=2374): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r1 = memfd_secret(0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x2284, &(0x7f0000000000)) 2m41.258958993s ago: executing program 34 (id=2387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ftruncate(r1, 0x81ff) recvmmsg(0xffffffffffffffff, &(0x7f0000008dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000a030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r2, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c3400000000001090224"], 0x0) 2m27.498897922s ago: executing program 35 (id=2585): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000900)='kfree\x00', r0, 0x0, 0x6}, 0x18) open(&(0x7f00000005c0)='./bus\x00', 0x143ee2, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 2m22.367322933s ago: executing program 36 (id=2661): r0 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x2e, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x8, 0x400, 0x6, 0xcd, 0x0, 0x4}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x101) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r5, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x40000004, 0x3, 0x4, 0x3}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) 2m18.115005886s ago: executing program 9 (id=2705): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffc}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_pidfd_open(0x0, 0x0) inotify_init1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x42, &(0x7f0000000640)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier}, {@auto_da_alloc}, {@noquota}, {@jqfmt_vfsv1}, {@nogrpid}]}, 0x4, 0x520, &(0x7f0000000e00)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x21885e, &(0x7f0000000280)={[{@nodelalloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x2f}}, {@dioread_lock}]}, 0x5, 0x50a, &(0x7f00000019c0)="$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") open(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) 2m17.541224394s ago: executing program 9 (id=2714): unshare(0x24020400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(0x0, 0x1145042, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0xf4240, r0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000000090102020000000000000000000000240002000c00028005000100000000001400018008000100ac14140008000200ac1ed13408000540000000000900010073797a31000000000c00"], 0x58}}, 0x4000842) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) setns(0xffffffffffffffff, 0x20000000) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x0, 0xfffffffc, 0x8000000, 0x0}) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 2m17.304293073s ago: executing program 9 (id=2720): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000002000000000000000900000000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000200"/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000040)=[{r5}], 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006c0015000000d9fece23b82000000000", @ANYRES32=r6], 0x38}, 0x1, 0x300}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x5707b563827c8365, 0x0, 0x0, {{}, {@void, @val={0x8, 0x12a}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='xen_cpu_write_idt_entry\x00', r10, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000340)={[{@nojournal_checksum}, {}]}, 0x0, 0x4ee, &(0x7f0000000c40)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 2m17.073937613s ago: executing program 9 (id=2723): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@discard}]}, 0xfe, 0x24d, &(0x7f0000000840)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f00000003c0)='kfree\x00'}, 0x18) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff945df3ae2b53b2029d8d653d00"/41], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) 2m16.807824002s ago: executing program 9 (id=2730): unshare(0x24020400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(0x0, 0x1145042, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0xf4240, r0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000000090102020000000000000000000000240002000c00028005000100000000001400018008000100ac14140008000200ac1ed13408000540000000000900010073797a31000000000c0004"], 0x58}}, 0x4000842) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setns(0xffffffffffffffff, 0x20000000) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x0, 0xfffffffc, 0x8000000, 0x0}) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 2m16.216569289s ago: executing program 9 (id=2733): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3d4a46ee6da8fa8}}, {{&(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20004000}}], 0x2, 0x40) 2m16.206793909s ago: executing program 37 (id=2733): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3d4a46ee6da8fa8}}, {{&(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20004000}}], 0x2, 0x40) 2m9.627118645s ago: executing program 1 (id=2810): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) socket(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffa}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2m9.617419725s ago: executing program 1 (id=2811): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x9}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0x5}, 0x18) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) capset(&(0x7f0000000c00)={0x19980330}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x40, 0x8b}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) 2m9.525949175s ago: executing program 1 (id=2812): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) capget(&(0x7f0000000200)={0x20080522}, 0x0) 2m9.493550484s ago: executing program 1 (id=2813): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@discard}]}, 0xfe, 0x24d, &(0x7f0000000840)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f00000003c0)='kfree\x00'}, 0x18) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) 2m9.435234694s ago: executing program 5 (id=2814): socket$inet6(0xa, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f0000002140)=""/4080, 0xff0}, {&(0x7f0000005680)=""/4100, 0x1004}], 0x3}, 0x0) recvmmsg(r2, &(0x7f00000067c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x120, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2}) sendmsg$key(r0, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(r4, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180000001e002303dd000000ddffffff07"], 0x18}], 0x1}, 0x0) connect$can_bcm(r3, &(0x7f0000000200), 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x0, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2m9.260245594s ago: executing program 1 (id=2815): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000012140100000000000000000008004b0013000000080003000000000008000180"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) creat(&(0x7f0000000080)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x22801, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1b00"/14], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) semtimedop(0xffffffffffffffff, &(0x7f0000000300)=[{0x1, 0x4f, 0x1000}], 0x1, &(0x7f0000000380)) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d800000018002f25e6924c1b00e6b904021d080006007c09e8fe55a10a0015400400142602600e1208000f0000000401a8001600140003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f180000000000000014d6d930dfe1d9d322303983a475730d16a4683f5aeb4edbb57a5025ccca1e10360000000000000080d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b9f65137743370e97039207", 0xd8}], 0x1}, 0x0) 2m9.174982733s ago: executing program 5 (id=2816): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffc}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_pidfd_open(0x0, 0x0) inotify_init1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x42, &(0x7f0000000640)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier}, {@auto_da_alloc}, {@noquota}, {@jqfmt_vfsv1}, {@nogrpid}]}, 0x4, 0x520, &(0x7f0000000e00)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x21885e, &(0x7f0000000280)={[{@nodelalloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x2f}}, {@dioread_lock}]}, 0x5, 0x50a, &(0x7f00000019c0)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) sendfile(r2, r2, 0x0, 0x800000009) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340), &(0x7f0000000400), 0x2, 0x3) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001418) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="1c0008000600000000003d0000004500002800000000008490783fffffffac1514aa00000000808667c17c1c531413d9efe9a1325e42b4f00c4cbe4790e2a1cb58377415829a4280c64473df20c0e4d8127381804552c3894f31157cfaebd900b74d7e99f602f5777c0df1", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="540000009078001c"], 0x36) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8dd510563492aad4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801f1ff", @ANYRESDEC, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x4, 0x0, 0x10461}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x6cd7}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x44004) 2m8.853908192s ago: executing program 7 (id=2820): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 2m8.785720132s ago: executing program 7 (id=2821): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = accept$nfc_llcp(r0, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="023cad8d030036b1b9f03db529c9768c7b5475541041364b2900000bfe115ade343e7961697f05e9cd7e3cea84b7e2f58ed01fc5bbcfeb18c5b5d53ec1798ea8be3606b38076bb", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf2501000000060002000000000005002100010000000c000f0004000000000000000c000f001c0000000000000005000500000000000500050000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4890}, 0x4880) creat(0x0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) r5 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x7fffeffe, 0x40, 0x1}) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000001900)=[{&(0x7f00000001c0)="4031be", 0x3}], 0x1, 0xb) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=r11, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(r9) splice(r7, 0x0, r9, 0x0, 0xfdef, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x1fb, &(0x7f0000000080)={0x0, 0x0, 0x10101}, &(0x7f0000000440), &(0x7f0000000140)) syz_io_uring_setup(0x5e6, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000840)) 2m8.635089931s ago: executing program 7 (id=2823): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB, @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x4000000000000000}, 0x18) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000002c0)='-\x00', &(0x7f0000000300)='.\x00', 0xffffffffffffff9c) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x4004550d, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) 2m8.588375931s ago: executing program 5 (id=2825): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f0000000d40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES8=r7, @ANYRESHEX=r7, @ANYRESOCT=r0, @ANYRES8=r4, @ANYRES16, @ANYBLOB="4ebde7a82849d64f6ddad5f51efde528c3164532ab96058df71d38638805e03237c2246dc913e2035b49719de9b9f4813c018e"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='mm_collapse_huge_page_swapin\x00', r8, 0x0, 0x4}, 0x18) r10 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(r10, &(0x7f00000001c0)=[{&(0x7f00000004c0)="4d5a641d45c6d176cbe579daa34b04f6d84598f166e294b543d8abe9ae48461ab6d7195bad8ffe174da3921cf5f1fc88840e331d6eb685952699678132929c95a4201044cb88a3f598314a110c8f70a84c66b4cd4b6f6aa991cfdfb70c923587b3a8f25001fd1508c2120e690eae48d91bb7074ecfe4d8aa0ff6a7c53b74c5ce0f3eeda155a6fcf2796a8c975f952820c3c9001b648d5382adc9b9c299c655fbf84fbf1f18b3", 0xa6}], 0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x126a4b5, &(0x7f00000010c0)=ANY=[@ANYRES16=r9, @ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRES16=r5, @ANYRESDEC=r6, @ANYRES16=r3, @ANYRES16, @ANYRES8=r1, @ANYRES8=r2, @ANYRESOCT=0x0], 0x0, 0x0, &(0x7f0000000000)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000002c0)={0x19, 0x4000000007, 0xee8, 0x7, 0x7, 0xd}) epoll_create1(0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r13}, 0x10) r14 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r14, 0x0, 0x5, &(0x7f0000000240)={@local, @multicast2, 0xfffe, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x2, 0x0, 0x80}, 0x3c) setsockopt$MRT_INIT(r14, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xd0}}, 0x0) r15 = epoll_create1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r16 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') mlockall(0x3) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) preadv(r16, &(0x7f0000000040)=[{&(0x7f0000000a00)=""/197, 0xc5}], 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, r15, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 2m8.441411001s ago: executing program 1 (id=2827): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000100000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x0) lstat(&(0x7f0000000440)='./file1\x00', &(0x7f0000000700)) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = gettid() setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$lock(r1, 0x7e1ce6ab9b72aaf, &(0x7f0000000300)={0x1, 0x1, 0x6, 0xfffffffffffffff8}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x10, &(0x7f00000000c0)={[], [{@rootcontext={'rootcontext', 0xa, 'staff_u'}}]}, 0x1, 0x458, &(0x7f0000000980)="$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") r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) preadv(r5, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 2m8.42043951s ago: executing program 38 (id=2827): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000100000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x0) lstat(&(0x7f0000000440)='./file1\x00', &(0x7f0000000700)) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = gettid() setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$lock(r1, 0x7e1ce6ab9b72aaf, &(0x7f0000000300)={0x1, 0x1, 0x6, 0xfffffffffffffff8}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x10, &(0x7f00000000c0)={[], [{@rootcontext={'rootcontext', 0xa, 'staff_u'}}]}, 0x1, 0x458, &(0x7f0000000980)="$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") r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) preadv(r5, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 2m7.736337808s ago: executing program 5 (id=2831): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@discard}]}, 0xfe, 0x24d, &(0x7f0000000840)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) 2m7.521610637s ago: executing program 5 (id=2832): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)}], 0x1}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0xfffffffffffffffd}, 0x18) pidfd_send_signal(0xffffffffffffffff, 0x2e, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) memfd_create(0x0, 0x5) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x101) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000d, 0x0, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) 2m7.466332367s ago: executing program 7 (id=2834): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@discard}]}, 0xfe, 0x24d, &(0x7f0000000840)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) 2m7.245674736s ago: executing program 7 (id=2838): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x9}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0x5}, 0x18) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) capset(&(0x7f0000000c00)={0x19980330}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x40, 0x8b}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) 2m7.070889005s ago: executing program 5 (id=2839): socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x8}}]}, {0x0, [0x6f, 0x2e, 0x5f, 0x0, 0x5f, 0x30, 0x5f, 0x0, 0x30]}}, &(0x7f0000000380)=""/203, 0x3b, 0xcb, 0x1, 0x1, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xd}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000004"], 0x14}, 0x1, 0xfcffffff00000000}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r7 = socket$qrtr(0x2a, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) connect$qrtr(r7, &(0x7f0000000000)={0x2a, 0x3}, 0xc) bind$qrtr(r7, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) 2m7.070630955s ago: executing program 39 (id=2839): socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x8}}]}, {0x0, [0x6f, 0x2e, 0x5f, 0x0, 0x5f, 0x30, 0x5f, 0x0, 0x30]}}, &(0x7f0000000380)=""/203, 0x3b, 0xcb, 0x1, 0x1, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xd}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000004"], 0x14}, 0x1, 0xfcffffff00000000}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r7 = socket$qrtr(0x2a, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) connect$qrtr(r7, &(0x7f0000000000)={0x2a, 0x3}, 0xc) bind$qrtr(r7, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) 2m6.848658064s ago: executing program 7 (id=2842): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@discard}]}, 0xfe, 0x24d, &(0x7f0000000840)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) 2m6.805318724s ago: executing program 40 (id=2842): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@discard}]}, 0xfe, 0x24d, &(0x7f0000000840)="$eJzs3T9o3GYYB+BXuru6Z5vitkuh9A+UUlqDcbdCl3ZpwVCKKaXQFlxK6VTsgmOTzZcpS4ZkToKnLCZki5MxZDFZAlmdxIOzZIjJEJMhGS7odBcu9pkkPvsUrOcBnfRJn/RKoN93WnQXQGmNRcR3EVGJiPGIqEVE0t3h03waazeX62szEc3mLw+TVr+8nevsNxIRjYj4JqLa2ba4+sfm4/Ufvzi1UPv8wurv9UFdX7etzY2fts//fPLy1NeLaXvdaHvefR0HKemxrppEvHcYxd4QSbXoM+BVTB+/dDvL/fsR8Vkr/7VI25E9Pf/W9Vp8dW6vfc88uPXhIM8VOHjNZi37Dmw0gdJJW8/ASToREflymk5M5M/wdyrD6X9z88fG/51bmP2n6JEKOCijERs/XB26MrIj//cref6BoyvL/6/TK3ez5e1K0WcDDMRH+SzL//hfS1+G/EPpyD+Ul/xDeck/HAH7zK78Q3nJP5SX/MMRVussNHpuln8oL/mH8pJ/KK/u/AMA5dIcKvoNZKAoRY8/AAAAAAAAAAAAAAAAAADAbsv1tZnONKiaN85GbH0fEdVe9Sut/yOOeLv1Ofwoybo9l+S79eXPT/o8QJ8uFvz29Tv3iq1/8+PDOe6JF5v1vfotzUY0ss6T1eru+y9p33/79+5Lttf+7rPAa0p2tL/9bbD1d3q6Umz9qfWIa9n4M9lr/Enjg9a89/gz2v0Ty/v0/5M+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDAPAsAAP///YVqDQ==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) 1m58.857013945s ago: executing program 2 (id=2917): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x82, 0xbfd, 0x8424, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x42}, r1, 0xc, 0xffffffffffffffff, 0x0) capset(&(0x7f00000000c0)={0x20080522, r1}, &(0x7f0000000100)={0x9, 0x403, 0x6, 0x5, 0x0, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x25dfdbfb, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r7}, 0x69) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000002c0)=0x9, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000b37bc5b834c149f8deb5920a9a95eb3c9fa8541f54c715f88a0c7510f70bad9bc0ba8ee25fc8008822ceea268250880ee7ad10778cdc338fc996d2571fb3036420f0d81b58f7586ff7ec1490f72ac1e6cf07d91804a0f3b5bcdcea6427f5ed528a31894dcd0553451d04d200636cbe49f03664adcb07f0dff096380a9f6dd8106fc4d5c285d816fc4ac970f9b4e746ba4925a2379dc34ea7a1950310185371a2148739d4c402fdf87415a0643f6d8b4f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYRESOCT=r8, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x10000003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r9}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000140)={0x2a, 0x1, 0x8000}, 0xc) r11 = fspick(r10, &(0x7f0000000180)='./file0\x00', 0x1) membarrier(0x10, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r11, 0x7, 0x0, 0x0, 0x0) 1m58.774159784s ago: executing program 2 (id=2919): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001e00050300000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="070009005b44862b"], 0x24}}, 0x0) 1m58.710418464s ago: executing program 2 (id=2922): socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x8}}]}, {0x0, [0x6f, 0x2e, 0x5f, 0x0, 0x5f, 0x2e, 0x30, 0x5f, 0x0, 0x30]}}, &(0x7f0000000380)=""/203, 0x3c, 0xcb, 0x1, 0x1, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xd}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000004"], 0x14}, 0x1, 0xfcffffff00000000}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r7 = socket$qrtr(0x2a, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) connect$qrtr(r7, &(0x7f0000000000)={0x2a, 0x3}, 0xc) bind$qrtr(r7, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) 1m58.588034973s ago: executing program 2 (id=2924): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) modify_ldt$write(0x1, &(0x7f0000000080)={0x3}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x822, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0xf00) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x1, 0x0, 0x9, 0x62001, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) add_key(&(0x7f0000000100)='ceph\x00', 0x0, &(0x7f00000000c0)="017ead", 0x3, 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', &(0x7f0000000340)=@raw={0x0, 0xf0be004c474e24e0}, &(0x7f00000001c0), 0x200) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) 1m58.249060522s ago: executing program 2 (id=2925): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x759, &(0x7f0000000580)={[], [], 0x2c}, 0x0, 0x4f8, &(0x7f0000000700)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="f0ff10ffff588b00135ad39cfdf90058982e2068f7a4382ef1b29a640d6e85d00100000000000000000000da0bbe002cb306eb0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES8=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98d, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r7, &(0x7f0000000900)="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", 0x45c) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r9, 0x0, 0x0}, 0x10) r10 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x1d, 0x0, 0x3d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}}, 0x20050800) r11 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000004c0)=0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r12) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000002", @ANYRES16=r13, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x4000054) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000500)='./file0/../file0/../file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, 0x0) 1m57.475847749s ago: executing program 2 (id=2932): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001e00050300000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\a\x00\t\x00['], 0x24}}, 0x0) 1m57.438234189s ago: executing program 41 (id=2932): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001e00050300000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\a\x00\t\x00['], 0x24}}, 0x0) 2.75523856s ago: executing program 8 (id=5567): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=r1], 0x50) 2.50991523s ago: executing program 3 (id=5577): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000073565cc196894f4abad2c42a1f606b2be0154e78e733c4a085c50f01398abadc76b2f48e7a305158f9da7941d5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000001a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0xd, 0x0, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000540)) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.968023538s ago: executing program 0 (id=5579): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 1.770393897s ago: executing program 3 (id=5580): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000240)) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000280)=[{}, {}, {}, {}, {}], &(0x7f00000005c0)=0x28) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x9, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x3d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe2(&(0x7f0000000040), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x5, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000700)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0xb}, 0x4000100) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/134, 0x29}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="2900000000000900000000000000000000000400", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf912b5109c00397664fe4dd02793df912f9000000000000b7020000020000008500000085000000b70000f3ea0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) unshare(0x10000) io_uring_setup(0x79b1, &(0x7f00000002c0)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) timer_create(0x3, 0x0, 0x0) creat(0x0, 0xd931d3864d39ddd8) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) 1.769946267s ago: executing program 0 (id=5581): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000240)) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000280)=[{}, {}, {}, {}, {}], &(0x7f00000005c0)=0x28) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x9, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x3d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe2(&(0x7f0000000040), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x5, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000700)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0xb}, 0x4000100) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/134, 0x29}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="2900000000000900000000000000000000000400", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf912b5109c00397664fe4dd02793df912f9000000000000b7020000020000008500000085000000b70000f3ea0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) unshare(0x10000) io_uring_setup(0x79b1, &(0x7f00000002c0)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) timer_create(0x3, 0x0, 0x0) creat(0x0, 0xd931d3864d39ddd8) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) 1.570231106s ago: executing program 8 (id=5584): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x6835, 0x9, 0x15, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) 1.569403426s ago: executing program 0 (id=5585): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 1.553143876s ago: executing program 3 (id=5586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x78}}}}}}}, 0x0) 1.538217556s ago: executing program 0 (id=5587): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4c6, &(0x7f00000012c0)="$eJzs3c1rHGUYAPB3dps0SaP9UKStYAsV6gfN5gNpol48qYeCWPCiUGOyjTWbbMhuahN6SPXWgwdRFMSDd/8CL/ZkEcSz3sWDVLRGUEFYmdndNl+7LprutJnfDyb7zsfu875Znndn3p3ZCUBmHY//RCEMhhC+DSHsr89u3OB4/WHt5uWpeIpCrXb2lyjZLp5vbtp83r4QwmoIoS+E8PLzIbwRbY1bWV6ZnSyViouN+UJ1bqFQWV45dWFucqY4U5wfGT89MTE+PDY6sWNtvfreW1fPfPFi7+d/vHvj+vtffRlXa7Cxbn07dlK96T3h4Lple0IIz96JYCnIN9rTn3ZF+E/i9++BEMKJJP/3h3zybgJZUKvVan/X9rZavVoDdq1csg8c5YZCCPVyLjc0VN+HfzAM5ErlSvXJ8+Wl+en6vvKB0JM7f6FUHG4cKxwIPVE8P5KUb8+PbpofCyHZB/4g35/MD02VS9Pd7eqATfZtyv/f8/X8BzLCIT9kl/yH7JL/kF3yH7JL/kN2yX/Irvb539O1egDd5/Mfskv+Q3bJf8gu+Q+Z9NKZM/FUa17/Pn1xeWm2fPHUdLEyOzS3NDU0VV5cGJopl2eSa3bm/u31SuXywshTYelSoVqsVAuV5ZVzc+Wl+eq55Lr+c0WDiXD3OHjs2vdRCGH16f5kivU21slV2N1qtSikfQ0ykI582h0QkBpDf5BdjvGBzT/Ru3m/oK/VExdujxcC95Zc2hUAUnPyiO//IKuM/0N2Gf+H7LKPD2xzi74N2o3/A/emDsb/B7tRD6D7Blvc/+u+5N5d16Pmvb7uDyF8l+/Z27zXF7Ab5H6KGvv/J/c/uuWzvjf6M/mKoDeE8PYnZz+6NFmtLo7Ey3+9tbz6cWP56LontjxgANLSzNNmHgMA2bV28/JUc+pm3J+fq5+EsDX+nsbYZF/yHeXAWrThXIVoh85dWL0SQji8Xfyocb/z+oHMwFp+S/xDjceo/hJJffck903vTvwj6+I/si7+0f/9X4FsuBb3P8Pb5V8uyelwK/829j+DO3TuROv+L3er/8u36P+OdRjjzU/f+bFl/CshHN02fjNeXxJrc/y4bic7jH/jtVcearWu9ln9dbaL3xSXCtW5hUJleeVU8jtyM8X5kfHTExPjw2OjE4VkjLrQHKne6pnD31xv1/6BFvHbtT9e9niH7f/r4a9fPd4m/mMntn//D7WJ3x9CeKLD+L+N/vB6q3Vx/OkW7c+1iR8vG+swfuXDF/Z2uCkA0AWV5ZXZyVKpuJhSoS+kGV1BIf3ClbujGpsKafdMwJ1WWY4PzeOkT7smAAAAAAAAAAAAQKe6cTpx2m0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgN/gkAAP//wPPUxg==") write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00003f3000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x21498000) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x28000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0xfa2f, 0x10100, 0x0, 0x4}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000480), &(0x7f00000000c0)=0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c00000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000dfff0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x20000000000000f4, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x228bd7f97b0c2b5a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r6}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r7 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) 1.494910936s ago: executing program 8 (id=5590): syz_io_uring_setup(0x7b, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r0, r1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigqueueinfo(0x0, 0x21, 0x0) 1.494356086s ago: executing program 8 (id=5591): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 1.460095606s ago: executing program 8 (id=5593): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000100000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x0) lstat(&(0x7f0000000440)='./file1\x00', &(0x7f0000000700)) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = gettid() setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$lock(r2, 0x7e1ce6ab9b72aaf, &(0x7f0000000300)={0x1, 0x1, 0x6, 0xfffffffffffffff8}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) preadv(r5, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 1.441442956s ago: executing program 3 (id=5594): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES32, @ANYBLOB="00010000000000000000", @ANYRES32=r1], 0x50) 1.181629875s ago: executing program 0 (id=5600): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x6835, 0x9, 0x15, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) 1.166678435s ago: executing program 0 (id=5603): syz_io_uring_setup(0x7b, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r0, r1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigqueueinfo(0x0, 0x21, 0x0) 494.280262ms ago: executing program 4 (id=5612): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) setresuid(0x0, 0xee01, 0x0) syz_clone(0x12000020, 0x0, 0x16, 0x0, 0x0, 0x0) 449.925352ms ago: executing program 8 (id=5613): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ftruncate(r1, 0x81ff) recvmmsg(0xffffffffffffffff, &(0x7f0000008dc0), 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000a030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r2, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c3400000000001090224"], 0x0) 397.640992ms ago: executing program 4 (id=5614): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x40, 0x8, 0x7, 0x0, 0x0, 0xf021, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 396.792922ms ago: executing program 6 (id=5615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000073565cc196894f4abad2c42a1f606b2be0154e78e733c4a085c50f01398abadc76b2f48e7a305158f9da7941d5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000001a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0xd, 0x0, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000540)) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 323.443612ms ago: executing program 6 (id=5616): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000600459e850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000000c0)=0x13) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 316.849442ms ago: executing program 4 (id=5617): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) 217.020401ms ago: executing program 4 (id=5618): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300008385"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) 216.432571ms ago: executing program 3 (id=5619): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r1, 0xc, 0xffffffffffffffff, 0x0) capset(&(0x7f00000000c0)={0x20080522, r1}, &(0x7f0000000100)={0x9, 0x403, 0x6, 0x5, 0x0, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x25dfdbfb, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r6}, 0x69) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000002c0)=0x9, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000b37bc5b834c149f8deb5920a9a95eb3c9fa8541f54c715f88a0c7510f70bad9bc0ba8ee25fc8008822ceea268250880ee7ad10778cdc338fc996d2571fb3036420f0d81b58f7586ff7ec1490f72ac1e6cf07d91804a0f3b5bcdcea6427f5ed528a31894dcd0553451d04d200636cbe49f03664adcb07f0dff096380a9f6dd8106fc4d5c285d816fc4ac970f9b4e746ba4925a2379dc34ea7a1950310185371a2148739d4c402fdf87415a0643f6d8b4f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYRESOCT=r7, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x10000003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r8}, 0x10) connect$qrtr(0xffffffffffffffff, &(0x7f0000000140)={0x2a, 0x1, 0x8000}, 0xc) membarrier(0x10, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 124.776701ms ago: executing program 6 (id=5620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 104.288461ms ago: executing program 6 (id=5621): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000008759a20200"/27, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a0002070000000000ffffffff000005"], 0x38}}, 0x0) 66.655981ms ago: executing program 6 (id=5622): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x6835, 0x9, 0x15, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) 33.720821ms ago: executing program 4 (id=5623): syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4fe, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00@\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) uname(&(0x7f00000004c0)=""/138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r1, 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xffffffffffffffff, "64d50f5a153e4db10df0f5d2f847bbf18007af3ea4e9ff06d71f81f7e318a3f8", 0x2, 0x8362, 0x9, 0x17f979ed}, 0x3c) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x100000}], 0x2, 0x1400, 0x0, 0x3) 33.04242ms ago: executing program 3 (id=5624): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x6835, 0x9, 0x15, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) 6.95844ms ago: executing program 4 (id=5625): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0), 0x1, 0x4f7, &(0x7f0000000540)="$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") ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xfffffffffffffffb) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000c00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r6, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="40020000100013072dbd700000000000fc010000000000000000000000000001e000000200000000000000000000000000000000000000000a0000002e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x240}}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 0s ago: executing program 6 (id=5626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000073565cc196894f4abad2c42a1f606b2be0154e78e733c4a085c50f01398abadc76b2f48e7a305158f9da7941d5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000001a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r3}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0xd, 0x0, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x21, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000540)) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) kernel console output (not intermixed with test programs): _slave_0: hsr_addr_subst_dest: Unknown node [ 265.833935][T18996] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 265.944735][T19007] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 266.049435][T19020] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 266.055891][T19020] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 266.096417][T12040] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.107398][T19016] bridge0: entered promiscuous mode [ 266.223985][T19043] FAULT_INJECTION: forcing a failure. [ 266.223985][T19043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.237219][T19043] CPU: 0 UID: 0 PID: 19043 Comm: syz.0.4250 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 266.248012][T19043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 266.258142][T19043] Call Trace: [ 266.261428][T19043] [ 266.264368][T19043] dump_stack_lvl+0xf2/0x150 [ 266.268988][T19043] dump_stack+0x15/0x1a [ 266.273227][T19043] should_fail_ex+0x223/0x230 [ 266.277926][T19043] should_fail+0xb/0x10 [ 266.282103][T19043] should_fail_usercopy+0x1a/0x20 [ 266.287144][T19043] _copy_to_user+0x20/0xa0 [ 266.291596][T19043] simple_read_from_buffer+0xa0/0x110 [ 266.297048][T19043] proc_fail_nth_read+0xf9/0x140 [ 266.302005][T19043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.307700][T19043] vfs_read+0x1a2/0x700 [ 266.311872][T19043] ? __rcu_read_unlock+0x4e/0x70 [ 266.316870][T19043] ? __fget_files+0x17c/0x1c0 [ 266.321645][T19043] ksys_read+0xe8/0x1b0 [ 266.325885][T19043] __x64_sys_read+0x42/0x50 [ 266.330429][T19043] x64_sys_call+0x2874/0x2dc0 [ 266.335298][T19043] do_syscall_64+0xc9/0x1c0 [ 266.339853][T19043] ? clear_bhb_loop+0x55/0xb0 [ 266.344569][T19043] ? clear_bhb_loop+0x55/0xb0 [ 266.349334][T19043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.355252][T19043] RIP: 0033:0x7fad88c3472c [ 266.359912][T19043] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 266.379530][T19043] RSP: 002b:00007fad872a1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.388006][T19043] RAX: ffffffffffffffda RBX: 00007fad88e25fa0 RCX: 00007fad88c3472c [ 266.396105][T19043] RDX: 000000000000000f RSI: 00007fad872a10a0 RDI: 0000000000000007 [ 266.404082][T19043] RBP: 00007fad872a1090 R08: 0000000000000000 R09: 0000000000000000 [ 266.412060][T19043] R10: 000000002c000011 R11: 0000000000000246 R12: 0000000000000001 [ 266.420037][T19043] R13: 0000000000000000 R14: 00007fad88e25fa0 R15: 00007ffee1f50e68 [ 266.428157][T19043] [ 266.439305][T19047] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 266.457227][T19015] bridge0: left promiscuous mode [ 266.482597][T19051] loop0: detected capacity change from 0 to 128 [ 266.525815][T19051] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.545521][T19051] ext4 filesystem being mounted at /322/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 266.614418][T19051] ext4: Unknown parameter 'ÿÿ000000000000000000040x0000000000000000' [ 266.625887][T19051] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 25 (only 1 groups) [ 266.715619][T19076] netlink: 'syz.6.4256': attribute type 10 has an invalid length. [ 266.845518][T19086] netlink: 'syz.3.4264': attribute type 3 has an invalid length. [ 266.855149][T19086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4264'. [ 267.205558][T12040] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 267.641019][T19120] netlink: 'syz.4.4276': attribute type 3 has an invalid length. [ 267.651328][T19120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4276'. [ 267.753662][T19129] netlink: 'syz.0.4275': attribute type 10 has an invalid length. [ 267.777470][T19129] bond0: (slave bond_slave_0): Releasing backup interface [ 267.810117][T19130] ip6t_rpfilter: unknown options [ 267.834647][T19116] loop0: detected capacity change from 0 to 512 [ 267.841317][T19135] netlink: 'syz.6.4280': attribute type 1 has an invalid length. [ 267.859235][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4281'. [ 267.863283][T19116] EXT4-fs: Ignoring removed orlov option [ 267.881576][T19137] sd 0:0:1:0: device reset [ 267.889074][T19116] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 267.921061][T19116] EXT4-fs (loop0): 1 orphan inode deleted [ 267.926897][T19116] EXT4-fs (loop0): 1 truncate cleaned up [ 267.937229][T19116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.058018][T12040] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.197645][T19154] netlink: 'syz.0.4288': attribute type 3 has an invalid length. [ 268.209265][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4288'. [ 268.499575][T19175] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 268.575828][T19180] netlink: 'syz.4.4299': attribute type 3 has an invalid length. [ 268.599222][T19180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4299'. [ 268.736804][T19192] blktrace: Concurrent blktraces are not allowed on sg0 [ 268.760841][T19194] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4305'. [ 268.841971][T19208] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 268.915373][T19221] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4316'. [ 269.075458][T19234] netlink: 'syz.3.4318': attribute type 10 has an invalid length. [ 269.178397][T19236] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 269.193647][T19236] bridge0: port 4(vlan0) entered blocking state [ 269.200003][T19236] bridge0: port 4(vlan0) entered disabled state [ 269.206660][T19236] vlan0: entered allmulticast mode [ 269.212360][T19236] vlan0: left allmulticast mode [ 269.283088][T19249] syz.8.4323[19249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.283228][T19249] syz.8.4323[19249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.298630][T19249] syz.8.4323[19249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.311413][T19251] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 269.350130][T19254] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 269.364527][T19254] bridge0: port 3(vlan0) entered blocking state [ 269.370901][T19254] bridge0: port 3(vlan0) entered disabled state [ 269.377440][T19254] vlan0: entered allmulticast mode [ 269.383094][T19254] vlan0: left allmulticast mode [ 269.387154][T19241] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 269.395609][T19241] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 269.404241][T19241] netlink: 'syz.8.4323': attribute type 27 has an invalid length. [ 269.414187][T19241] netlink: 33311 bytes leftover after parsing attributes in process `syz.8.4323'. [ 269.444275][T19259] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4331'. [ 269.457395][T19259] sd 0:0:1:0: device reset [ 269.512827][T19264] net_ratelimit: 6 callbacks suppressed [ 269.512849][T19264] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 269.524853][T19264] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 269.569855][T19266] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 269.576320][T19266] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 269.648392][T19278] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 269.663300][T19278] bridge0: port 3(vlan2) entered blocking state [ 269.669671][T19278] bridge0: port 3(vlan2) entered disabled state [ 269.677759][T19278] vlan2: entered allmulticast mode [ 269.683601][T19278] vlan2: left allmulticast mode [ 269.726291][T19285] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 269.835671][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4346'. [ 269.867012][T19297] sd 0:0:1:0: device reset [ 269.892831][T19301] netlink: 'syz.8.4343': attribute type 10 has an invalid length. [ 270.013763][T19314] syzkaller1: entered promiscuous mode [ 270.019399][T19314] syzkaller1: entered allmulticast mode [ 270.029528][T19310] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 270.035990][T19310] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 270.168483][T19330] ªªªªªª: renamed from vlan0 (while UP) [ 270.211633][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4359'. [ 270.224219][T19335] sd 0:0:1:0: device reset [ 270.289093][T19345] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 270.295587][T19345] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 270.622112][T19364] Failed to initialize the IGMP autojoin socket (err -2) [ 270.629577][ T29] kauditd_printk_skb: 1091 callbacks suppressed [ 270.629606][ T29] audit: type=1400 audit(1734404514.360:17797): avc: denied { create } for pid=19351 comm="syz.8.4366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 270.655870][ T29] audit: type=1400 audit(1734404514.370:17798): avc: denied { sys_admin } for pid=19351 comm="syz.8.4366" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 271.214669][ T29] audit: type=1326 audit(1734404514.960:17799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19351 comm="syz.8.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d2785d19 code=0x7ffc0000 [ 271.299256][T19389] Failed to initialize the IGMP autojoin socket (err -2) [ 271.346378][T19391] Failed to initialize the IGMP autojoin socket (err -2) [ 271.426312][ T29] audit: type=1326 audit(1734404515.170:17800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19357 comm="syz.4.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 271.449974][ T29] audit: type=1326 audit(1734404515.170:17801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19357 comm="syz.4.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 271.473705][ T29] audit: type=1326 audit(1734404515.180:17802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19357 comm="syz.4.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 271.497420][ T29] audit: type=1326 audit(1734404515.180:17803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19357 comm="syz.4.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 271.521087][ T29] audit: type=1326 audit(1734404515.180:17804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19357 comm="syz.4.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 271.837352][ T29] audit: type=1326 audit(1734404515.590:17805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19401 comm="syz.0.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 271.903211][ T29] audit: type=1326 audit(1734404515.590:17806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19401 comm="syz.0.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 271.991182][T19411] netlink: 'syz.0.4383': attribute type 10 has an invalid length. [ 272.005244][T19411] loop0: detected capacity change from 0 to 512 [ 272.019513][T19411] EXT4-fs: Ignoring removed orlov option [ 272.035372][T19411] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 272.056989][T19411] EXT4-fs (loop0): 1 orphan inode deleted [ 272.062835][T19411] EXT4-fs (loop0): 1 truncate cleaned up [ 272.080613][T19411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.127571][T12040] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.140702][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4394'. [ 272.149637][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4394'. [ 272.295451][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4403'. [ 272.309401][T19449] sd 0:0:1:0: device reset [ 272.407539][T19460] blktrace: Concurrent blktraces are not allowed on sg0 [ 272.479750][T19468] Failed to initialize the IGMP autojoin socket (err -2) [ 272.637318][T19434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.646653][T19434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.711794][T19501] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19501 comm=syz.6.4425 [ 272.728004][T19501] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19501 comm=syz.6.4425 [ 272.865857][T19515] netlink: 'syz.4.4430': attribute type 21 has an invalid length. [ 272.873831][T19515] netlink: 'syz.4.4430': attribute type 20 has an invalid length. [ 272.881770][T19515] IPv6: NLM_F_CREATE should be specified when creating new route [ 272.892163][T19515] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4430'. [ 272.984752][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4436'. [ 272.993747][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4436'. [ 273.025301][T19530] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19530 comm=syz.4.4437 [ 273.040277][T19530] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19530 comm=syz.4.4437 [ 273.132508][T19545] netlink: 'syz.3.4443': attribute type 3 has an invalid length. [ 273.390659][T19576] sd 0:0:1:0: device reset [ 273.600619][T19618] netlink: 'syz.6.4470': attribute type 10 has an invalid length. [ 273.617505][T19620] sd 0:0:1:0: device reset [ 273.687461][T19625] tipc: Can't bind to reserved service type 1 [ 273.851459][T19586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.862596][T19586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.388988][T19691] wireguard: wireguard0: Could not create IPv4 socket [ 274.395891][T19691] wireguard0: entered promiscuous mode [ 274.401523][T19691] wireguard0: entered allmulticast mode [ 274.589352][T19713] __nla_validate_parse: 10 callbacks suppressed [ 274.589449][T19713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4503'. [ 274.617776][T19715] netlink: 'syz.6.4505': attribute type 21 has an invalid length. [ 274.625827][T19715] netlink: 'syz.6.4505': attribute type 20 has an invalid length. [ 274.633691][T19715] IPv6: NLM_F_CREATE should be specified when creating new route [ 274.664226][T19715] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4505'. [ 274.807652][T19727] netlink: 'syz.4.4509': attribute type 10 has an invalid length. [ 275.089572][T19735] FAULT_INJECTION: forcing a failure. [ 275.089572][T19735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.102753][T19735] CPU: 1 UID: 0 PID: 19735 Comm: syz.4.4513 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 275.112762][T19720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.113587][T19735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 275.123226][T19720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.131958][T19735] Call Trace: [ 275.131971][T19735] [ 275.146070][T19735] dump_stack_lvl+0xf2/0x150 [ 275.150710][T19735] dump_stack+0x15/0x1a [ 275.154966][T19735] should_fail_ex+0x223/0x230 [ 275.159813][T19735] should_fail+0xb/0x10 [ 275.164009][T19735] should_fail_usercopy+0x1a/0x20 [ 275.169072][T19735] _copy_from_user+0x1e/0xb0 [ 275.173799][T19735] copy_msghdr_from_user+0x54/0x2a0 [ 275.179097][T19735] ? __fget_files+0x17c/0x1c0 [ 275.183808][T19735] __sys_sendmsg+0x13e/0x230 [ 275.188493][T19735] __x64_sys_sendmsg+0x46/0x50 [ 275.193284][T19735] x64_sys_call+0x2734/0x2dc0 [ 275.197970][T19735] do_syscall_64+0xc9/0x1c0 [ 275.202490][T19735] ? clear_bhb_loop+0x55/0xb0 [ 275.207171][T19735] ? clear_bhb_loop+0x55/0xb0 [ 275.211874][T19735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.217867][T19735] RIP: 0033:0x7fc54c365d19 [ 275.222358][T19735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.242001][T19735] RSP: 002b:00007fc54a9d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.250497][T19735] RAX: ffffffffffffffda RBX: 00007fc54c555fa0 RCX: 00007fc54c365d19 [ 275.258484][T19735] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003 [ 275.266518][T19735] RBP: 00007fc54a9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 275.274505][T19735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.282485][T19735] R13: 0000000000000000 R14: 00007fc54c555fa0 R15: 00007fffb9d193e8 [ 275.290508][T19735] [ 275.325838][T19738] netlink: 'syz.4.4514': attribute type 13 has an invalid length. [ 275.333764][T19738] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4514'. [ 275.348270][T19738] syz_tun: refused to change device tx_queue_len [ 275.355003][T19738] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 275.393307][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4517'. [ 275.563468][T19780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4524'. [ 275.874926][ T29] kauditd_printk_skb: 1142 callbacks suppressed [ 275.874944][ T29] audit: type=1326 audit(1734404519.630:18949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19800 comm="syz.0.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 275.906994][ T29] audit: type=1326 audit(1734404519.630:18950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19800 comm="syz.0.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 275.930680][ T29] audit: type=1326 audit(1734404519.660:18951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19800 comm="syz.0.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 275.954465][ T29] audit: type=1326 audit(1734404519.660:18952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19800 comm="syz.0.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 275.978447][ T29] audit: type=1326 audit(1734404519.660:18953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19800 comm="syz.0.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 276.002109][ T29] audit: type=1326 audit(1734404519.660:18954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19800 comm="syz.0.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 276.012714][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4528'. [ 276.026289][ T29] audit: type=1326 audit(1734404519.660:18955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19800 comm="syz.0.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 276.058454][ T29] audit: type=1326 audit(1734404519.660:18956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19800 comm="syz.0.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 276.082147][ T29] audit: type=1326 audit(1734404519.660:18957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19800 comm="syz.0.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 276.105749][ T29] audit: type=1326 audit(1734404519.660:18958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19800 comm="syz.0.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 276.133172][T19805] sd 0:0:1:0: device reset [ 276.216803][T19811] netlink: 'syz.3.4531': attribute type 21 has an invalid length. [ 276.224913][T19811] netlink: 'syz.3.4531': attribute type 20 has an invalid length. [ 276.232745][T19811] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.249108][T19811] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4531'. [ 276.467180][T19838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4543'. [ 276.479380][T19838] sd 0:0:1:0: device reset [ 276.734934][T19879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4558'. [ 276.743860][T19879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4558'. [ 277.487173][T19948] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19948 comm=syz.3.4589 [ 277.502416][T19948] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19948 comm=syz.3.4589 [ 277.959346][T19969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.973226][T19969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.044953][T19990] validate_nla: 5 callbacks suppressed [ 278.044975][T19990] netlink: 'syz.3.4604': attribute type 10 has an invalid length. [ 278.104470][T19996] sd 0:0:1:0: device reset [ 278.521993][T20011] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20011 comm=syz.8.4614 [ 278.539302][T20011] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20011 comm=syz.8.4614 [ 278.647515][T20021] FAULT_INJECTION: forcing a failure. [ 278.647515][T20021] name failslab, interval 1, probability 0, space 0, times 0 [ 278.660283][T20021] CPU: 1 UID: 0 PID: 20021 Comm: syz.6.4619 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 278.671207][T20021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 278.681318][T20021] Call Trace: [ 278.684610][T20021] [ 278.687560][T20021] dump_stack_lvl+0xf2/0x150 [ 278.692247][T20021] dump_stack+0x15/0x1a [ 278.696428][T20021] should_fail_ex+0x223/0x230 [ 278.701195][T20021] should_failslab+0x8f/0xb0 [ 278.705822][T20021] kmem_cache_alloc_node_noprof+0x59/0x320 [ 278.711769][T20021] ? __alloc_skb+0x10b/0x310 [ 278.716400][T20021] __alloc_skb+0x10b/0x310 [ 278.720940][T20021] netlink_alloc_large_skb+0xad/0xe0 [ 278.726259][T20021] netlink_sendmsg+0x3b4/0x6e0 [ 278.731144][T20021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.736499][T20021] __sock_sendmsg+0x140/0x180 [ 278.741359][T20021] ____sys_sendmsg+0x312/0x410 [ 278.746153][T20021] __sys_sendmsg+0x19d/0x230 [ 278.750782][T20021] __x64_sys_sendmsg+0x46/0x50 [ 278.755750][T20021] x64_sys_call+0x2734/0x2dc0 [ 278.760462][T20021] do_syscall_64+0xc9/0x1c0 [ 278.765051][T20021] ? clear_bhb_loop+0x55/0xb0 [ 278.769746][T20021] ? clear_bhb_loop+0x55/0xb0 [ 278.774497][T20021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.780494][T20021] RIP: 0033:0x7f2893435d19 [ 278.785029][T20021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.804722][T20021] RSP: 002b:00007f2891aa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.813148][T20021] RAX: ffffffffffffffda RBX: 00007f2893625fa0 RCX: 00007f2893435d19 [ 278.821129][T20021] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 278.829115][T20021] RBP: 00007f2891aa1090 R08: 0000000000000000 R09: 0000000000000000 [ 278.837142][T20021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.845121][T20021] R13: 0000000000000000 R14: 00007f2893625fa0 R15: 00007ffcfbce9438 [ 278.853136][T20021] [ 278.895231][T20029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20029 comm=syz.6.4622 [ 279.073871][T20048] hub 9-0:1.0: USB hub found [ 279.077368][T20050] block device autoloading is deprecated and will be removed. [ 279.082446][T20048] hub 9-0:1.0: 8 ports detected [ 279.102866][T20050] syz.3.4631: attempt to access beyond end of device [ 279.102866][T20050] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 279.131332][T20033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.157254][T20033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.526865][T20096] FAULT_INJECTION: forcing a failure. [ 279.526865][T20096] name failslab, interval 1, probability 0, space 0, times 0 [ 279.539614][T20096] CPU: 1 UID: 0 PID: 20096 Comm: syz.3.4651 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 279.550428][T20096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 279.560579][T20096] Call Trace: [ 279.563946][T20096] [ 279.566898][T20096] dump_stack_lvl+0xf2/0x150 [ 279.571625][T20096] dump_stack+0x15/0x1a [ 279.575933][T20096] should_fail_ex+0x223/0x230 [ 279.580649][T20096] should_failslab+0x8f/0xb0 [ 279.585309][T20096] kmem_cache_alloc_noprof+0x52/0x320 [ 279.590711][T20096] ? mas_alloc_nodes+0x1e3/0x490 [ 279.595773][T20096] mas_alloc_nodes+0x1e3/0x490 [ 279.600713][T20096] mas_preallocate+0x44a/0x650 [ 279.605506][T20096] __split_vma+0x244/0x6a0 [ 279.610100][T20096] vms_gather_munmap_vmas+0x171/0x7a0 [ 279.615529][T20096] ? mas_walk+0x204/0x320 [ 279.619975][T20096] __mmap_region+0x306/0x13f0 [ 279.624901][T20096] ? selinux_file_open+0x34a/0x3b0 [ 279.630254][T20096] ? __rcu_read_unlock+0x4e/0x70 [ 279.635378][T20096] mmap_region+0x18c/0x1e0 [ 279.639889][T20096] do_mmap+0x718/0xb60 [ 279.644163][T20096] __se_sys_remap_file_pages+0x617/0x770 [ 279.649870][T20096] ? fput+0x1c4/0x200 [ 279.653888][T20096] ? ksys_write+0x176/0x1b0 [ 279.658428][T20096] __x64_sys_remap_file_pages+0x67/0x80 [ 279.664053][T20096] x64_sys_call+0x10b2/0x2dc0 [ 279.668780][T20096] do_syscall_64+0xc9/0x1c0 [ 279.673329][T20096] ? clear_bhb_loop+0x55/0xb0 [ 279.678037][T20096] ? clear_bhb_loop+0x55/0xb0 [ 279.682739][T20096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.688752][T20096] RIP: 0033:0x7fd6af445d19 [ 279.693200][T20096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.712888][T20096] RSP: 002b:00007fd6adab1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 279.721386][T20096] RAX: ffffffffffffffda RBX: 00007fd6af635fa0 RCX: 00007fd6af445d19 [ 279.729370][T20096] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020800000 [ 279.737417][T20096] RBP: 00007fd6adab1090 R08: 0000000000000000 R09: 0000000000000000 [ 279.745425][T20096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.753411][T20096] R13: 0000000000000000 R14: 00007fd6af635fa0 R15: 00007fff4d994918 [ 279.761442][T20096] [ 280.041473][T20126] FAULT_INJECTION: forcing a failure. [ 280.041473][T20126] name failslab, interval 1, probability 0, space 0, times 0 [ 280.054193][T20126] CPU: 1 UID: 0 PID: 20126 Comm: syz.4.4662 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 280.064980][T20126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 280.075128][T20126] Call Trace: [ 280.078431][T20126] [ 280.081546][T20126] dump_stack_lvl+0xf2/0x150 [ 280.086192][T20126] dump_stack+0x15/0x1a [ 280.090413][T20126] should_fail_ex+0x223/0x230 [ 280.095121][T20126] ? tcx_link_attach+0xac/0x600 [ 280.099981][T20126] should_failslab+0x8f/0xb0 [ 280.104599][T20126] __kmalloc_cache_noprof+0x4e/0x320 [ 280.109907][T20126] tcx_link_attach+0xac/0x600 [ 280.114618][T20126] ? __fget_files+0x17c/0x1c0 [ 280.119387][T20126] link_create+0x3a2/0x660 [ 280.123847][T20126] __sys_bpf+0x430/0x7a0 [ 280.128215][T20126] __x64_sys_bpf+0x43/0x50 [ 280.132734][T20126] x64_sys_call+0x2914/0x2dc0 [ 280.137560][T20126] do_syscall_64+0xc9/0x1c0 [ 280.142089][T20126] ? clear_bhb_loop+0x55/0xb0 [ 280.146800][T20126] ? clear_bhb_loop+0x55/0xb0 [ 280.151490][T20126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.157570][T20126] RIP: 0033:0x7fc54c365d19 [ 280.162005][T20126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.181667][T20126] RSP: 002b:00007fc54a9d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.190121][T20126] RAX: ffffffffffffffda RBX: 00007fc54c555fa0 RCX: 00007fc54c365d19 [ 280.198219][T20126] RDX: 0000000000000010 RSI: 0000000020000280 RDI: 000000000000001c [ 280.206285][T20126] RBP: 00007fc54a9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 280.214283][T20126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.222281][T20126] R13: 0000000000000000 R14: 00007fc54c555fa0 R15: 00007fffb9d193e8 [ 280.230275][T20126] [ 280.279546][T20134] __nla_validate_parse: 5 callbacks suppressed [ 280.279574][T20134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4666'. [ 280.356891][T20145] blktrace: Concurrent blktraces are not allowed on sg0 [ 280.549228][T20165] FAULT_INJECTION: forcing a failure. [ 280.549228][T20165] name failslab, interval 1, probability 0, space 0, times 0 [ 280.561961][T20165] CPU: 1 UID: 0 PID: 20165 Comm: syz.6.4678 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 280.572870][T20165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 280.582989][T20165] Call Trace: [ 280.586292][T20165] [ 280.589250][T20165] dump_stack_lvl+0xf2/0x150 [ 280.593942][T20165] dump_stack+0x15/0x1a [ 280.598117][T20165] should_fail_ex+0x223/0x230 [ 280.602858][T20165] should_failslab+0x8f/0xb0 [ 280.607468][T20165] kmem_cache_alloc_node_noprof+0x59/0x320 [ 280.613379][T20165] ? __alloc_skb+0x10b/0x310 [ 280.617999][T20165] ? avc_has_perm+0xd4/0x160 [ 280.622663][T20165] __alloc_skb+0x10b/0x310 [ 280.627087][T20165] pfkey_sendmsg+0x10d/0x970 [ 280.631690][T20165] ? avc_has_perm+0xd4/0x160 [ 280.636305][T20165] ? selinux_socket_sendmsg+0x185/0x1c0 [ 280.641935][T20165] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 280.647072][T20165] __sock_sendmsg+0x140/0x180 [ 280.651766][T20165] ____sys_sendmsg+0x312/0x410 [ 280.656553][T20165] __sys_sendmsg+0x19d/0x230 [ 280.661177][T20165] __x64_sys_sendmsg+0x46/0x50 [ 280.665980][T20165] x64_sys_call+0x2734/0x2dc0 [ 280.670739][T20165] do_syscall_64+0xc9/0x1c0 [ 280.675329][T20165] ? clear_bhb_loop+0x55/0xb0 [ 280.680095][T20165] ? clear_bhb_loop+0x55/0xb0 [ 280.684833][T20165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.690836][T20165] RIP: 0033:0x7f2893435d19 [ 280.695476][T20165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.715165][T20165] RSP: 002b:00007f2891aa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.723603][T20165] RAX: ffffffffffffffda RBX: 00007f2893625fa0 RCX: 00007f2893435d19 [ 280.731595][T20165] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 280.739643][T20165] RBP: 00007f2891aa1090 R08: 0000000000000000 R09: 0000000000000000 [ 280.747620][T20165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.755596][T20165] R13: 0000000000000000 R14: 00007f2893625fa0 R15: 00007ffcfbce9438 [ 280.763581][T20165] [ 280.848219][T20175] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20175 comm=syz.0.4683 [ 280.863306][T20169] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4680'. [ 280.878430][T20175] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20175 comm=syz.0.4683 [ 280.891322][T20177] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20177 comm=syz.4.4684 [ 280.904091][ T29] kauditd_printk_skb: 1159 callbacks suppressed [ 280.904109][ T29] audit: type=1326 audit(1734404524.630:20118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.0.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 280.933990][ T29] audit: type=1326 audit(1734404524.640:20119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz.4.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 280.957682][ T29] audit: type=1326 audit(1734404524.640:20120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz.4.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 280.981316][ T29] audit: type=1326 audit(1734404524.650:20121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz.4.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 281.005027][ T29] audit: type=1326 audit(1734404524.690:20122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20180 comm="syz.3.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6af445d19 code=0x7ffc0000 [ 281.028762][ T29] audit: type=1326 audit(1734404524.690:20123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20180 comm="syz.3.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6af445d19 code=0x7ffc0000 [ 281.053609][ T29] audit: type=1326 audit(1734404524.690:20124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20180 comm="syz.3.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6af445d19 code=0x7ffc0000 [ 281.077352][ T29] audit: type=1326 audit(1734404524.690:20125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20180 comm="syz.3.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6af445d19 code=0x7ffc0000 [ 281.100953][ T29] audit: type=1326 audit(1734404524.690:20126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20180 comm="syz.3.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6af445d19 code=0x7ffc0000 [ 281.124691][ T29] audit: type=1326 audit(1734404524.690:20127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20180 comm="syz.3.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6af445d19 code=0x7ffc0000 [ 281.191887][T20190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4688'. [ 281.261010][T20194] netlink: 'syz.6.4690': attribute type 10 has an invalid length. [ 281.292652][T20206] FAULT_INJECTION: forcing a failure. [ 281.292652][T20206] name failslab, interval 1, probability 0, space 0, times 0 [ 281.305459][T20206] CPU: 0 UID: 0 PID: 20206 Comm: syz.0.4696 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 281.316258][T20206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 281.326348][T20206] Call Trace: [ 281.329634][T20206] [ 281.332568][T20206] dump_stack_lvl+0xf2/0x150 [ 281.337229][T20206] dump_stack+0x15/0x1a [ 281.341404][T20206] should_fail_ex+0x223/0x230 [ 281.346133][T20206] should_failslab+0x8f/0xb0 [ 281.350828][T20206] __kmalloc_noprof+0xab/0x3f0 [ 281.355623][T20206] ? security_prepare_creds+0x53/0x120 [ 281.361102][T20206] security_prepare_creds+0x53/0x120 [ 281.366407][T20206] prepare_creds+0x346/0x480 [ 281.371036][T20206] selinux_lsm_setattr+0x198/0x640 [ 281.376181][T20206] selinux_setselfattr+0x31/0x50 [ 281.381143][T20206] security_setselfattr+0x227/0x260 [ 281.386432][T20206] __x64_sys_lsm_set_self_attr+0x51/0x60 [ 281.392156][T20206] x64_sys_call+0x5b0/0x2dc0 [ 281.396833][T20206] do_syscall_64+0xc9/0x1c0 [ 281.401423][T20206] ? clear_bhb_loop+0x55/0xb0 [ 281.406106][T20206] ? clear_bhb_loop+0x55/0xb0 [ 281.410883][T20206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.416798][T20206] RIP: 0033:0x7fad88c35d19 [ 281.421279][T20206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.440908][T20206] RSP: 002b:00007fad872a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 281.449455][T20206] RAX: ffffffffffffffda RBX: 00007fad88e25fa0 RCX: 00007fad88c35d19 [ 281.457435][T20206] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000066 [ 281.465421][T20206] RBP: 00007fad872a1090 R08: 0000000000000000 R09: 0000000000000000 [ 281.473495][T20206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.481510][T20206] R13: 0000000000000000 R14: 00007fad88e25fa0 R15: 00007ffee1f50e68 [ 281.489500][T20206] [ 281.534024][T20210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20210 comm=syz.6.4698 [ 281.583423][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4704'. [ 281.724129][T20244] netlink: 'syz.6.4713': attribute type 4 has an invalid length. [ 281.745566][T20244] netlink: 'syz.6.4713': attribute type 4 has an invalid length. [ 281.784703][T20257] FAULT_INJECTION: forcing a failure. [ 281.784703][T20257] name fail_futex, interval 1, probability 0, space 0, times 1 [ 281.797683][T20257] CPU: 0 UID: 0 PID: 20257 Comm: syz.0.4716 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 281.808472][T20257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 281.818580][T20257] Call Trace: [ 281.821869][T20257] [ 281.824807][T20257] dump_stack_lvl+0xf2/0x150 [ 281.829506][T20257] dump_stack+0x15/0x1a [ 281.833762][T20257] should_fail_ex+0x223/0x230 [ 281.838457][T20257] should_fail+0xb/0x10 [ 281.842706][T20257] get_futex_key+0x135/0x740 [ 281.847321][T20257] futex_lock_pi+0xfd/0x6f0 [ 281.851830][T20257] ? _parse_integer_limit+0x167/0x180 [ 281.857248][T20257] ? __pfx_futex_wake_mark+0x10/0x10 [ 281.862560][T20257] do_futex+0x211/0x370 [ 281.866834][T20257] __se_sys_futex+0x25d/0x3a0 [ 281.871535][T20257] ? fput+0x1c4/0x200 [ 281.875529][T20257] __x64_sys_futex+0x78/0x90 [ 281.880156][T20257] x64_sys_call+0x2d6a/0x2dc0 [ 281.884868][T20257] do_syscall_64+0xc9/0x1c0 [ 281.889378][T20257] ? clear_bhb_loop+0x55/0xb0 [ 281.894135][T20257] ? clear_bhb_loop+0x55/0xb0 [ 281.898901][T20257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.904820][T20257] RIP: 0033:0x7fad88c35d19 [ 281.909237][T20257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.928901][T20257] RSP: 002b:00007fad872a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 281.937324][T20257] RAX: ffffffffffffffda RBX: 00007fad88e25fa0 RCX: 00007fad88c35d19 [ 281.945304][T20257] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000020000080 [ 281.953284][T20257] RBP: 00007fad872a1090 R08: 0000000000000000 R09: 0000000000000000 [ 281.961321][T20257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.969367][T20257] R13: 0000000000000000 R14: 00007fad88e25fa0 R15: 00007ffee1f50e68 [ 281.977356][T20257] [ 282.004209][T20258] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4719'. [ 282.025126][T20262] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4718'. [ 282.042550][T20253] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4718'. [ 282.143378][T20276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4728'. [ 282.213904][T20294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4736'. [ 282.222899][T20294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4736'. [ 282.255379][T20301] FAULT_INJECTION: forcing a failure. [ 282.255379][T20301] name failslab, interval 1, probability 0, space 0, times 0 [ 282.268094][T20301] CPU: 1 UID: 0 PID: 20301 Comm: syz.3.4738 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 282.268128][T20301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 282.268264][T20301] Call Trace: [ 282.268273][T20301] [ 282.268283][T20301] dump_stack_lvl+0xf2/0x150 [ 282.268328][T20301] dump_stack+0x15/0x1a [ 282.268370][T20301] should_fail_ex+0x223/0x230 [ 282.268477][T20301] should_failslab+0x8f/0xb0 [ 282.268517][T20301] kmem_cache_alloc_node_noprof+0x59/0x320 [ 282.268545][T20301] ? __alloc_skb+0x10b/0x310 [ 282.268566][T20301] __alloc_skb+0x10b/0x310 [ 282.268653][T20301] ? audit_log_start+0x34c/0x6b0 [ 282.268705][T20301] audit_log_start+0x368/0x6b0 [ 282.268738][T20301] audit_seccomp+0x4b/0x130 [ 282.268809][T20301] __seccomp_filter+0x6fa/0x1180 [ 282.268840][T20301] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 282.268871][T20301] ? vfs_write+0x596/0x920 [ 282.268921][T20301] ? __schedule+0x6fa/0x930 [ 282.268976][T20301] __secure_computing+0x9f/0x1c0 [ 282.269013][T20301] syscall_trace_enter+0xd1/0x1f0 [ 282.269055][T20301] do_syscall_64+0xaa/0x1c0 [ 282.269080][T20301] ? clear_bhb_loop+0x55/0xb0 [ 282.269112][T20301] ? clear_bhb_loop+0x55/0xb0 [ 282.269136][T20301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.269181][T20301] RIP: 0033:0x7fd6af445d19 [ 282.269201][T20301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.269223][T20301] RSP: 002b:00007fd6adab1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 282.269311][T20301] RAX: ffffffffffffffda RBX: 00007fd6af635fa0 RCX: 00007fd6af445d19 [ 282.269349][T20301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.269365][T20301] RBP: 00007fd6adab1090 R08: 0000000000000000 R09: 0000000000000000 [ 282.269380][T20301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.269393][T20301] R13: 0000000000000000 R14: 00007fd6af635fa0 R15: 00007fff4d994918 [ 282.269412][T20301] [ 282.274365][T20306] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20306 comm=syz.8.4740 [ 282.276615][T20306] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20306 comm=syz.8.4740 [ 282.428602][T20320] netlink: 'syz.4.4747': attribute type 21 has an invalid length. [ 282.551240][T20320] netlink: 'syz.4.4747': attribute type 20 has an invalid length. [ 282.766293][T20362] netlink: 'syz.6.4765': attribute type 21 has an invalid length. [ 282.774178][T20362] netlink: 'syz.6.4765': attribute type 20 has an invalid length. [ 282.830955][T20369] netlink: 'syz.0.4768': attribute type 25 has an invalid length. [ 282.912614][T20379] wireguard: wg0: Could not create IPv4 socket [ 282.919334][T20380] FAULT_INJECTION: forcing a failure. [ 282.919334][T20380] name failslab, interval 1, probability 0, space 0, times 0 [ 282.932116][T20380] CPU: 0 UID: 0 PID: 20380 Comm: syz.6.4772 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 282.942896][T20380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 282.953003][T20380] Call Trace: [ 282.956291][T20380] [ 282.959307][T20380] dump_stack_lvl+0xf2/0x150 [ 282.964092][T20380] dump_stack+0x15/0x1a [ 282.968331][T20380] should_fail_ex+0x223/0x230 [ 282.973119][T20380] ? __hw_addr_add_ex+0x13d/0x360 [ 282.978254][T20380] should_failslab+0x8f/0xb0 [ 282.982934][T20380] __kmalloc_cache_noprof+0x4e/0x320 [ 282.988244][T20380] __hw_addr_add_ex+0x13d/0x360 [ 282.993212][T20380] dev_addr_init+0xb2/0x120 [ 282.997769][T20380] alloc_netdev_mqs+0x1e1/0x9c0 [ 283.002635][T20380] ? __pfx_ppp_setup+0x10/0x10 [ 283.007417][T20380] ppp_ioctl+0x468/0x11b0 [ 283.011801][T20380] ? __fget_files+0x17c/0x1c0 [ 283.016507][T20380] ? __pfx_ppp_ioctl+0x10/0x10 [ 283.021294][T20380] __se_sys_ioctl+0xc9/0x140 [ 283.025973][T20380] __x64_sys_ioctl+0x43/0x50 [ 283.030640][T20380] x64_sys_call+0x1690/0x2dc0 [ 283.035336][T20380] do_syscall_64+0xc9/0x1c0 [ 283.039859][T20380] ? clear_bhb_loop+0x55/0xb0 [ 283.044608][T20380] ? clear_bhb_loop+0x55/0xb0 [ 283.049322][T20380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.055251][T20380] RIP: 0033:0x7f2893435d19 [ 283.059677][T20380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.079393][T20380] RSP: 002b:00007f2891aa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.087836][T20380] RAX: ffffffffffffffda RBX: 00007f2893625fa0 RCX: 00007f2893435d19 [ 283.095825][T20380] RDX: 0000000020000380 RSI: 00000000c004743e RDI: 0000000000000003 [ 283.103825][T20380] RBP: 00007f2891aa1090 R08: 0000000000000000 R09: 0000000000000000 [ 283.111947][T20380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.119940][T20380] R13: 0000000000000000 R14: 00007f2893625fa0 R15: 00007ffcfbce9438 [ 283.127938][T20380] [ 283.247949][T20392] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20392 comm=syz.0.4777 [ 283.321652][T20399] netlink: 'syz.0.4780': attribute type 21 has an invalid length. [ 283.329560][T20399] netlink: 'syz.0.4780': attribute type 20 has an invalid length. [ 283.334901][T20350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.337422][T20399] IPv6: NLM_F_CREATE should be specified when creating new route [ 283.347784][T20350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.492665][T20416] netlink: 'syz.0.4781': attribute type 21 has an invalid length. [ 283.500584][T20416] netlink: 'syz.0.4781': attribute type 20 has an invalid length. [ 283.608769][T20427] Failed to initialize the IGMP autojoin socket (err -2) [ 284.114376][T20469] FAULT_INJECTION: forcing a failure. [ 284.114376][T20469] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 284.127817][T20469] CPU: 1 UID: 0 PID: 20469 Comm: syz.6.4797 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 284.138618][T20469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 284.148762][T20469] Call Trace: [ 284.152056][T20469] [ 284.155004][T20469] dump_stack_lvl+0xf2/0x150 [ 284.159665][T20469] dump_stack+0x15/0x1a [ 284.163983][T20469] should_fail_ex+0x223/0x230 [ 284.168718][T20469] should_fail_alloc_page+0xfd/0x110 [ 284.174152][T20469] __alloc_pages_noprof+0x109/0x340 [ 284.179391][T20469] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 284.184797][T20469] folio_alloc_mpol_noprof+0x36/0x70 [ 284.190140][T20469] shmem_get_folio_gfp+0x3d1/0xd90 [ 284.195285][T20469] shmem_write_begin+0xa2/0x180 [ 284.200226][T20469] generic_perform_write+0x1a8/0x4a0 [ 284.205590][T20469] shmem_file_write_iter+0xc2/0xe0 [ 284.210730][T20469] do_iter_readv_writev+0x394/0x450 [ 284.216000][T20469] vfs_writev+0x2d4/0x880 [ 284.220358][T20469] ? proc_fail_nth_write+0x12a/0x150 [ 284.225757][T20469] __se_sys_pwritev2+0x100/0x1c0 [ 284.230803][T20469] __x64_sys_pwritev2+0x78/0x90 [ 284.235708][T20469] x64_sys_call+0x2afe/0x2dc0 [ 284.240427][T20469] do_syscall_64+0xc9/0x1c0 [ 284.245053][T20469] ? clear_bhb_loop+0x55/0xb0 [ 284.249766][T20469] ? clear_bhb_loop+0x55/0xb0 [ 284.254497][T20469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.260511][T20469] RIP: 0033:0x7f2893435d19 [ 284.265061][T20469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.284746][T20469] RSP: 002b:00007f2891aa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 284.293308][T20469] RAX: ffffffffffffffda RBX: 00007f2893625fa0 RCX: 00007f2893435d19 [ 284.301324][T20469] RDX: 0000000000000002 RSI: 0000000020000240 RDI: 0000000000000004 [ 284.309433][T20469] RBP: 00007f2891aa1090 R08: 0000000000041001 R09: 0000000000000003 [ 284.317430][T20469] R10: 0000000000001200 R11: 0000000000000246 R12: 0000000000000001 [ 284.325581][T20469] R13: 0000000000000000 R14: 00007f2893625fa0 R15: 00007ffcfbce9438 [ 284.333652][T20469] [ 285.399375][T20580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.408163][T20580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.420468][T20616] netlink: 'syz.4.4860': attribute type 10 has an invalid length. [ 285.748492][T20633] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.755767][T20633] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.774137][T20633] 0ªX¹¦À: left allmulticast mode [ 285.806177][T20633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.817189][T20633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.845515][T20633] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.854460][T20633] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.863544][T20633] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.872559][T20633] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.931615][T20620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.944839][T20620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.002549][ T29] kauditd_printk_skb: 881 callbacks suppressed [ 286.002565][ T29] audit: type=1326 audit(1734404529.750:21007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.6.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 286.038374][ T29] audit: type=1326 audit(1734404529.780:21008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.6.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 286.062066][ T29] audit: type=1326 audit(1734404529.790:21009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.6.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 286.085667][ T29] audit: type=1326 audit(1734404529.790:21010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.6.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 286.109293][ T29] audit: type=1326 audit(1734404529.790:21011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.6.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 286.132915][ T29] audit: type=1326 audit(1734404529.790:21012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.6.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 286.146469][T20641] selinux_netlink_send: 1 callbacks suppressed [ 286.146488][T20641] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20641 comm=syz.6.4874 [ 286.160313][ T29] audit: type=1326 audit(1734404529.800:21013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.6.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 286.198928][ T29] audit: type=1326 audit(1734404529.800:21014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.6.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 286.222581][ T29] audit: type=1326 audit(1734404529.890:21015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.6.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 286.246489][ T29] audit: type=1326 audit(1734404529.890:21016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.6.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 286.440336][T20656] __nla_validate_parse: 14 callbacks suppressed [ 286.440350][T20656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4881'. [ 286.455595][T20656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4881'. [ 286.594299][T20666] FAULT_INJECTION: forcing a failure. [ 286.594299][T20666] name failslab, interval 1, probability 0, space 0, times 0 [ 286.607129][T20666] CPU: 1 UID: 0 PID: 20666 Comm: syz.6.4886 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 286.618062][T20666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 286.628191][T20666] Call Trace: [ 286.631476][T20666] [ 286.634407][T20666] dump_stack_lvl+0xf2/0x150 [ 286.639081][T20666] dump_stack+0x15/0x1a [ 286.643257][T20666] should_fail_ex+0x223/0x230 [ 286.647950][T20666] ? audit_log_d_path+0x96/0x250 [ 286.652927][T20666] should_failslab+0x8f/0xb0 [ 286.657600][T20666] __kmalloc_cache_noprof+0x4e/0x320 [ 286.662920][T20666] audit_log_d_path+0x96/0x250 [ 286.667776][T20666] ? __rcu_read_unlock+0x4e/0x70 [ 286.672799][T20666] audit_log_d_path_exe+0x42/0x70 [ 286.677921][T20666] audit_log_task+0x192/0x1c0 [ 286.682607][T20666] audit_seccomp+0x68/0x130 [ 286.687119][T20666] __seccomp_filter+0x6fa/0x1180 [ 286.692122][T20666] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 286.697772][T20666] ? vfs_write+0x596/0x920 [ 286.702211][T20666] __secure_computing+0x9f/0x1c0 [ 286.707188][T20666] syscall_trace_enter+0xd1/0x1f0 [ 286.712230][T20666] ? fpregs_assert_state_consistent+0x83/0xa0 [ 286.718341][T20666] do_syscall_64+0xaa/0x1c0 [ 286.722924][T20666] ? clear_bhb_loop+0x55/0xb0 [ 286.727639][T20666] ? clear_bhb_loop+0x55/0xb0 [ 286.732321][T20666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.738278][T20666] RIP: 0033:0x7f2893435d19 [ 286.742728][T20666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.762537][T20666] RSP: 002b:00007f2891aa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 286.770961][T20666] RAX: ffffffffffffffda RBX: 00007f2893625fa0 RCX: 00007f2893435d19 [ 286.778974][T20666] RDX: 0000000000000006 RSI: 0000000020000140 RDI: 0000000000000004 [ 286.786951][T20666] RBP: 00007f2891aa1090 R08: 0000000000000000 R09: 0000000000000000 [ 286.794989][T20666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.803052][T20666] R13: 0000000000000000 R14: 00007f2893625fa0 R15: 00007ffcfbce9438 [ 286.811049][T20666] [ 286.890186][T20668] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20668 comm=syz.0.4887 [ 287.056078][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4895'. [ 287.127405][T20690] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4896'. [ 287.327971][T20710] netlink: 'syz.8.4905': attribute type 10 has an invalid length. [ 287.406618][T20716] netlink: 'syz.0.4909': attribute type 21 has an invalid length. [ 287.414611][T20716] netlink: 'syz.0.4909': attribute type 20 has an invalid length. [ 287.455996][T20716] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4909'. [ 287.583471][T20695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.602989][T20695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.636145][T20728] netlink: 'syz.0.4914': attribute type 10 has an invalid length. [ 287.752018][T20740] netlink: 'syz.6.4919': attribute type 10 has an invalid length. [ 287.778031][T20726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.786687][T20726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.935669][T20780] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4930'. [ 287.963913][T20782] serio: Serial port ptm0 [ 288.011662][T20796] syz.6.4934[20796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.011734][T20796] syz.6.4934[20796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.026993][T20796] syz.6.4934[20796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.041827][T20796] SELinux: Context system_u:object_r:system_dbusd_var_run_t:s0 is not valid (left unmapped). [ 288.236527][T20803] FAULT_INJECTION: forcing a failure. [ 288.236527][T20803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.249729][T20803] CPU: 0 UID: 0 PID: 20803 Comm: syz.4.4937 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 288.260573][T20803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 288.270727][T20803] Call Trace: [ 288.274076][T20803] [ 288.277035][T20803] dump_stack_lvl+0xf2/0x150 [ 288.281708][T20803] dump_stack+0x15/0x1a [ 288.282607][T20810] Failed to initialize the IGMP autojoin socket (err -2) [ 288.285912][T20803] should_fail_ex+0x223/0x230 [ 288.285947][T20803] should_fail+0xb/0x10 [ 288.285974][T20803] should_fail_usercopy+0x1a/0x20 [ 288.306933][T20803] copy_page_from_iter_atomic+0x228/0xf80 [ 288.312757][T20803] ? shmem_write_begin+0xa2/0x180 [ 288.317799][T20803] ? shmem_write_begin+0xda/0x180 [ 288.322994][T20803] generic_perform_write+0x2f1/0x4a0 [ 288.328298][T20803] shmem_file_write_iter+0xc2/0xe0 [ 288.333431][T20803] do_iter_readv_writev+0x394/0x450 [ 288.338835][T20803] vfs_writev+0x2d4/0x880 [ 288.343258][T20803] ? proc_fail_nth_write+0x12a/0x150 [ 288.348588][T20803] __se_sys_pwritev2+0x100/0x1c0 [ 288.353640][T20803] __x64_sys_pwritev2+0x78/0x90 [ 288.358555][T20803] x64_sys_call+0x2afe/0x2dc0 [ 288.363298][T20803] do_syscall_64+0xc9/0x1c0 [ 288.367817][T20803] ? clear_bhb_loop+0x55/0xb0 [ 288.372510][T20803] ? clear_bhb_loop+0x55/0xb0 [ 288.377197][T20803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.383138][T20803] RIP: 0033:0x7fc54c365d19 [ 288.387558][T20803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.407176][T20803] RSP: 002b:00007fc54a9d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 288.415600][T20803] RAX: ffffffffffffffda RBX: 00007fc54c555fa0 RCX: 00007fc54c365d19 [ 288.423574][T20803] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 288.431593][T20803] RBP: 00007fc54a9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 288.439700][T20803] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000001 [ 288.447742][T20803] R13: 0000000000000000 R14: 00007fc54c555fa0 R15: 00007fffb9d193e8 [ 288.455737][T20803] [ 288.553434][T20820] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4942'. [ 288.731958][T20845] Failed to initialize the IGMP autojoin socket (err -2) [ 288.877474][T20834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.904334][T20834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.501195][T20885] netlink: 'syz.3.4966': attribute type 4 has an invalid length. [ 289.589676][T20891] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20891 comm=syz.3.4968 [ 289.687103][T20899] netlink: 'syz.4.4969': attribute type 10 has an invalid length. [ 289.919254][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4975'. [ 289.928358][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4975'. [ 290.150738][T20925] Failed to initialize the IGMP autojoin socket (err -2) [ 290.219512][T20913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.240035][T20913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.296533][T20937] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4986'. [ 290.386398][T20947] netlink: 'syz.0.4988': attribute type 10 has an invalid length. [ 290.653425][T20985] netlink: 'syz.6.5002': attribute type 10 has an invalid length. [ 290.752230][T20997] Failed to initialize the IGMP autojoin socket (err -2) [ 290.803907][T21001] netlink: 'syz.4.5012': attribute type 21 has an invalid length. [ 290.811794][T21001] netlink: 'syz.4.5012': attribute type 20 has an invalid length. [ 291.029337][T21034] netlink: 'syz.6.5024': attribute type 13 has an invalid length. [ 291.081331][T21034] gretap0: refused to change device tx_queue_len [ 291.087732][T21034] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 291.119327][ T29] kauditd_printk_skb: 913 callbacks suppressed [ 291.119342][ T29] audit: type=1326 audit(1734404534.870:21930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21039 comm="syz.8.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d2785d19 code=0x7ffc0000 [ 291.149488][ T29] audit: type=1326 audit(1734404534.870:21931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21039 comm="syz.8.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d2785d19 code=0x7ffc0000 [ 291.182802][T21029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.191370][T21029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.200694][ T29] audit: type=1326 audit(1734404534.900:21932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21041 comm="syz.0.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 291.224397][ T29] audit: type=1326 audit(1734404534.900:21933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21041 comm="syz.0.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 291.248076][ T29] audit: type=1326 audit(1734404534.900:21934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21041 comm="syz.0.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 291.271704][ T29] audit: type=1326 audit(1734404534.900:21935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21041 comm="syz.0.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 291.295325][ T29] audit: type=1326 audit(1734404534.900:21936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21041 comm="syz.0.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 291.318985][ T29] audit: type=1326 audit(1734404534.900:21937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21041 comm="syz.0.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 291.342571][ T29] audit: type=1326 audit(1734404534.910:21938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21041 comm="syz.0.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 291.366038][ T29] audit: type=1326 audit(1734404534.910:21939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21041 comm="syz.0.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 291.393673][T21053] vlan0: entered promiscuous mode [ 291.399181][T21053] bond0: entered promiscuous mode [ 291.404252][T21053] bond_slave_1: entered promiscuous mode [ 291.410966][T21053] bond0: left promiscuous mode [ 291.415808][T21053] bond_slave_1: left promiscuous mode [ 291.763232][T21094] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5044'. [ 291.847922][T21105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5047'. [ 292.284323][T21104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.292998][T21104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.305325][T21107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.314488][T21107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.399133][T21126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.409624][T21126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.895586][T21176] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5072'. [ 292.965180][T21188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5075'. [ 292.974147][T21188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5075'. [ 293.000539][T21190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5078'. [ 293.031841][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5080'. [ 293.040835][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5080'. [ 293.314648][T21217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5090'. [ 293.414878][T21221] 9pnet_fd: Insufficient options for proto=fd [ 293.447307][T21209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.466657][T21223] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5093'. [ 293.481906][T21209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.686737][T21247] FAULT_INJECTION: forcing a failure. [ 293.686737][T21247] name failslab, interval 1, probability 0, space 0, times 0 [ 293.699545][T21247] CPU: 1 UID: 0 PID: 21247 Comm: syz.6.5103 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 293.710337][T21247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 293.720428][T21247] Call Trace: [ 293.723716][T21247] [ 293.726659][T21247] dump_stack_lvl+0xf2/0x150 [ 293.731311][T21247] dump_stack+0x15/0x1a [ 293.735496][T21247] should_fail_ex+0x223/0x230 [ 293.740203][T21247] should_failslab+0x8f/0xb0 [ 293.744844][T21247] __kmalloc_noprof+0xab/0x3f0 [ 293.749636][T21247] ? copy_splice_read+0xc7/0x5d0 [ 293.754602][T21247] copy_splice_read+0xc7/0x5d0 [ 293.759479][T21247] ? __kmalloc_noprof+0x284/0x3f0 [ 293.764530][T21247] ? alloc_pipe_info+0x1cb/0x360 [ 293.769534][T21247] ? __pfx_copy_splice_read+0x10/0x10 [ 293.774997][T21247] splice_direct_to_actor+0x269/0x670 [ 293.780458][T21247] ? __pfx_direct_splice_actor+0x10/0x10 [ 293.786202][T21247] do_splice_direct+0xd7/0x150 [ 293.791034][T21247] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 293.797031][T21247] do_sendfile+0x398/0x660 [ 293.801621][T21247] __x64_sys_sendfile64+0x110/0x150 [ 293.806851][T21247] x64_sys_call+0xfbd/0x2dc0 [ 293.811521][T21247] do_syscall_64+0xc9/0x1c0 [ 293.816059][T21247] ? clear_bhb_loop+0x55/0xb0 [ 293.820758][T21247] ? clear_bhb_loop+0x55/0xb0 [ 293.825580][T21247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.831594][T21247] RIP: 0033:0x7f2893435d19 [ 293.836110][T21247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.855787][T21247] RSP: 002b:00007f2891aa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 293.864247][T21247] RAX: ffffffffffffffda RBX: 00007f2893625fa0 RCX: 00007f2893435d19 [ 293.872326][T21247] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 293.880323][T21247] RBP: 00007f2891aa1090 R08: 0000000000000000 R09: 0000000000000000 [ 293.888314][T21247] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 293.896312][T21247] R13: 0000000000000000 R14: 00007f2893625fa0 R15: 00007ffcfbce9438 [ 293.904357][T21247] [ 294.256757][T21262] Failed to initialize the IGMP autojoin socket (err -2) [ 294.465906][T21268] vhci_hcd: default hub control req: 4008 v0007 i0000 l0 [ 294.517683][T21270] netlink: 'syz.8.5112': attribute type 21 has an invalid length. [ 294.525618][T21270] netlink: 'syz.8.5112': attribute type 20 has an invalid length. [ 294.533554][T21270] IPv6: NLM_F_CREATE should be specified when creating new route [ 294.581617][ T1037] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 294.600609][ T1037] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 294.631505][T21280] netlink: 'syz.6.5113': attribute type 10 has an invalid length. [ 294.655286][T21280] team0: Device hsr_slave_0 failed to register rx_handler [ 294.889748][T21290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.900557][T21290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.914414][T21304] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 295.004245][T21315] Failed to initialize the IGMP autojoin socket (err -2) [ 295.259300][T21298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.269216][T21298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.280613][T21328] netlink: 'syz.4.5135': attribute type 39 has an invalid length. [ 295.291450][T21328] veth1_macvtap: left promiscuous mode [ 295.468272][T21339] netlink: 'syz.6.5140': attribute type 21 has an invalid length. [ 295.476236][T21339] netlink: 'syz.6.5140': attribute type 20 has an invalid length. [ 295.804083][T21360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.813282][T21360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.026106][T21384] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 296.233619][ T29] kauditd_printk_skb: 733 callbacks suppressed [ 296.233635][ T29] audit: type=1326 audit(1734404539.980:22673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21408 comm="syz.4.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 296.252735][T21411] vhci_hcd: default hub control req: 4008 v0007 i0000 l0 [ 296.264021][ T29] audit: type=1326 audit(1734404539.980:22674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21408 comm="syz.4.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 296.294248][ T29] audit: type=1326 audit(1734404539.980:22675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21408 comm="syz.4.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 296.317875][ T29] audit: type=1326 audit(1734404539.980:22676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21408 comm="syz.4.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 296.341498][ T29] audit: type=1326 audit(1734404539.980:22677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21408 comm="syz.4.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 296.365336][ T29] audit: type=1326 audit(1734404539.980:22678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21408 comm="syz.4.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 296.388924][ T29] audit: type=1326 audit(1734404539.980:22679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21408 comm="syz.4.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 296.412521][ T29] audit: type=1326 audit(1734404539.980:22680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21408 comm="syz.4.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 296.436085][ T29] audit: type=1326 audit(1734404539.990:22681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21408 comm="syz.4.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 296.459689][ T29] audit: type=1326 audit(1734404539.990:22682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21408 comm="syz.4.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54c365d19 code=0x7ffc0000 [ 296.578808][T21430] netlink: 'syz.6.5175': attribute type 10 has an invalid length. [ 296.702433][T21387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.721344][T21387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.764199][T21454] vhci_hcd: default hub control req: 4008 v0007 i0000 l0 [ 296.866076][T21467] __nla_validate_parse: 11 callbacks suppressed [ 296.866096][T21467] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5195'. [ 296.903196][T21472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5197'. [ 297.056383][T21485] netlink: 'syz.8.5202': attribute type 10 has an invalid length. [ 297.132044][T21495] vhci_hcd: default hub control req: 4008 v0007 i0000 l0 [ 297.336873][T21511] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5209'. [ 297.691583][T21532] Failed to initialize the IGMP autojoin socket (err -2) [ 297.749889][T21534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5221'. [ 297.758855][T21534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5221'. [ 297.834164][T21544] vhci_hcd: default hub control req: 4008 v0007 i0000 l0 [ 297.903848][T21547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5226'. [ 298.297161][T21568] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5234'. [ 298.569318][T21588] FAULT_INJECTION: forcing a failure. [ 298.569318][T21588] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.582874][T21588] CPU: 0 UID: 0 PID: 21588 Comm: syz.6.5240 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 298.593665][T21588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 298.603825][T21588] Call Trace: [ 298.607131][T21588] [ 298.610070][T21588] dump_stack_lvl+0xf2/0x150 [ 298.614695][T21588] dump_stack+0x15/0x1a [ 298.618933][T21588] should_fail_ex+0x223/0x230 [ 298.623632][T21588] should_fail_alloc_page+0xfd/0x110 [ 298.628957][T21588] __alloc_pages_noprof+0x109/0x340 [ 298.634186][T21588] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 298.639679][T21588] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 298.645128][T21588] handle_mm_fault+0xdd7/0x2ac0 [ 298.649998][T21588] exc_page_fault+0x3b9/0x650 [ 298.654800][T21588] asm_exc_page_fault+0x26/0x30 [ 298.659858][T21588] RIP: 0033:0x7f2893301b1b [ 298.664319][T21588] Code: 00 00 00 48 8d 3d fd 33 19 00 48 89 c1 31 c0 e8 6b 44 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 31 34 19 00 48 89 34 24 48 8b 14 24 48 8b [ 298.683953][T21588] RSP: 002b:00007f2891a9ffb0 EFLAGS: 00010202 [ 298.690200][T21588] RAX: 0000000000000000 RBX: 00007f2893625fa0 RCX: 0000000000000000 [ 298.698213][T21588] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000400 [ 298.706223][T21588] RBP: 00007f2891aa1090 R08: 0000000000000000 R09: 0000000000000000 [ 298.714194][T21588] R10: 0000000020000400 R11: 0000000000000000 R12: 0000000000000001 [ 298.722240][T21588] R13: 0000000000000000 R14: 00007f2893625fa0 R15: 00007ffcfbce9438 [ 298.730302][T21588] [ 298.733445][T21588] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 298.854037][T21608] vxlan0: entered promiscuous mode [ 298.859362][T21608] vxlan0: entered allmulticast mode [ 299.230460][T21642] FAULT_INJECTION: forcing a failure. [ 299.230460][T21642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.243650][T21642] CPU: 0 UID: 0 PID: 21642 Comm: syz.0.5263 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 299.254521][T21642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 299.264664][T21642] Call Trace: [ 299.267953][T21642] [ 299.270910][T21642] dump_stack_lvl+0xf2/0x150 [ 299.275771][T21642] dump_stack+0x15/0x1a [ 299.280017][T21642] should_fail_ex+0x223/0x230 [ 299.284792][T21642] should_fail+0xb/0x10 [ 299.288974][T21642] should_fail_usercopy+0x1a/0x20 [ 299.294106][T21642] _copy_to_user+0x20/0xa0 [ 299.298561][T21642] __x64_sys_sigaltstack+0x128/0x180 [ 299.303871][T21642] x64_sys_call+0x298c/0x2dc0 [ 299.308566][T21642] do_syscall_64+0xc9/0x1c0 [ 299.313080][T21642] ? clear_bhb_loop+0x55/0xb0 [ 299.317870][T21642] ? clear_bhb_loop+0x55/0xb0 [ 299.322559][T21642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.328493][T21642] RIP: 0033:0x7fad88c35d19 [ 299.333020][T21642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.352757][T21642] RSP: 002b:00007fad872a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 299.361214][T21642] RAX: ffffffffffffffda RBX: 00007fad88e25fa0 RCX: 00007fad88c35d19 [ 299.369191][T21642] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000020000100 [ 299.377171][T21642] RBP: 00007fad872a1090 R08: 0000000000000000 R09: 0000000000000000 [ 299.385221][T21642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.393198][T21642] R13: 0000000000000000 R14: 00007fad88e25fa0 R15: 00007ffee1f50e68 [ 299.401210][T21642] [ 299.464627][T21647] veth5: entered promiscuous mode [ 299.541889][T21657] vhci_hcd: default hub control req: 4008 v0007 i0000 l0 [ 299.657709][T21667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5275'. [ 299.666717][T21667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5275'. [ 299.759224][T21684] vhci_hcd: default hub control req: 4008 v0007 i0000 l0 [ 299.769767][T21688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5285'. [ 299.788700][T21687] netlink: 'syz.6.5284': attribute type 153 has an invalid length. [ 299.803326][T21693] syz.3.5287[21693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.803437][T21693] syz.3.5287[21693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.807261][T21691] sd 0:0:1:0: device reset [ 299.816155][T21693] syz.3.5287[21693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.831488][T21693] FAULT_INJECTION: forcing a failure. [ 299.831488][T21693] name failslab, interval 1, probability 0, space 0, times 0 [ 299.855678][T21693] CPU: 0 UID: 0 PID: 21693 Comm: syz.3.5287 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 299.866544][T21693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 299.876658][T21693] Call Trace: [ 299.879950][T21693] [ 299.882951][T21693] dump_stack_lvl+0xf2/0x150 [ 299.887559][T21693] dump_stack+0x15/0x1a [ 299.891798][T21693] should_fail_ex+0x223/0x230 [ 299.896493][T21693] should_failslab+0x8f/0xb0 [ 299.901173][T21693] kmem_cache_alloc_noprof+0x52/0x320 [ 299.906582][T21693] ? security_inode_alloc+0x37/0x100 [ 299.911925][T21693] security_inode_alloc+0x37/0x100 [ 299.917094][T21693] inode_init_always_gfp+0x4a2/0x4f0 [ 299.922474][T21693] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 299.928009][T21693] alloc_inode+0x82/0x160 [ 299.932342][T21693] new_inode+0x1e/0x100 [ 299.936523][T21693] shmem_get_inode+0x24e/0x730 [ 299.941323][T21693] __shmem_file_setup+0x127/0x1f0 [ 299.946478][T21693] shmem_file_setup+0x3b/0x50 [ 299.951255][T21693] __se_sys_memfd_create+0x31d/0x5c0 [ 299.956584][T21693] __x64_sys_memfd_create+0x31/0x40 [ 299.961870][T21693] x64_sys_call+0x2d4c/0x2dc0 [ 299.966561][T21693] do_syscall_64+0xc9/0x1c0 [ 299.971120][T21693] ? clear_bhb_loop+0x55/0xb0 [ 299.975835][T21693] ? clear_bhb_loop+0x55/0xb0 [ 299.980570][T21693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.986493][T21693] RIP: 0033:0x7fd6af445d19 [ 299.990927][T21693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.010542][T21693] RSP: 002b:00007fd6adab0e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 300.019022][T21693] RAX: ffffffffffffffda RBX: 000000000000050a RCX: 00007fd6af445d19 [ 300.027057][T21693] RDX: 00007fd6adab0ef0 RSI: 0000000000000000 RDI: 00007fd6af4c2381 [ 300.035080][T21693] RBP: 0000000020000200 R08: 00007fd6adab0bb7 R09: 00007fd6adab0e40 [ 300.043094][T21693] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200001c0 [ 300.051099][T21693] R13: 00007fd6adab0ef0 R14: 00007fd6adab0eb0 R15: 0000000020000080 [ 300.059232][T21693] [ 300.238844][T21718] Failed to initialize the IGMP autojoin socket (err -2) [ 300.249887][T21722] sd 0:0:1:0: device reset [ 300.306314][T21725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.315385][T21725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.333229][T21730] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21730 comm=syz.3.5303 [ 300.571326][T21738] FAULT_INJECTION: forcing a failure. [ 300.571326][T21738] name failslab, interval 1, probability 0, space 0, times 0 [ 300.584024][T21738] CPU: 1 UID: 0 PID: 21738 Comm: syz.3.5307 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 300.594846][T21738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 300.604924][T21738] Call Trace: [ 300.608206][T21738] [ 300.611141][T21738] dump_stack_lvl+0xf2/0x150 [ 300.615925][T21738] dump_stack+0x15/0x1a [ 300.620169][T21738] should_fail_ex+0x223/0x230 [ 300.624967][T21738] ? sdev_prefix_printk+0x7a/0x170 [ 300.630123][T21738] should_failslab+0x8f/0xb0 [ 300.634737][T21738] __kmalloc_cache_noprof+0x4e/0x320 [ 300.640037][T21738] sdev_prefix_printk+0x7a/0x170 [ 300.645067][T21738] ? scsi_ioctl_reset+0xda/0x4b0 [ 300.650023][T21738] ? read_tsc+0x9/0x20 [ 300.654191][T21738] ? ktime_get+0x1e5/0x210 [ 300.658672][T21738] virtscsi_device_reset+0x42/0x140 [ 300.663883][T21738] scsi_ioctl_reset+0x29c/0x4b0 [ 300.668818][T21738] scsi_ioctl+0x7b6/0x1540 [ 300.673256][T21738] ? scsi_block_when_processing_errors+0x18e/0x1c0 [ 300.679789][T21738] sg_ioctl+0xd00/0x1870 [ 300.684071][T21738] ? __fget_files+0x17c/0x1c0 [ 300.688831][T21738] ? __pfx_sg_ioctl+0x10/0x10 [ 300.693588][T21738] __se_sys_ioctl+0xc9/0x140 [ 300.698191][T21738] __x64_sys_ioctl+0x43/0x50 [ 300.702834][T21738] x64_sys_call+0x1690/0x2dc0 [ 300.707581][T21738] do_syscall_64+0xc9/0x1c0 [ 300.712104][T21738] ? clear_bhb_loop+0x55/0xb0 [ 300.716790][T21738] ? clear_bhb_loop+0x55/0xb0 [ 300.721528][T21738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.727583][T21738] RIP: 0033:0x7fd6af445d19 [ 300.732025][T21738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.751661][T21738] RSP: 002b:00007fd6adab1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.760103][T21738] RAX: ffffffffffffffda RBX: 00007fd6af635fa0 RCX: 00007fd6af445d19 [ 300.768077][T21738] RDX: 0000000020000000 RSI: 0000000000002284 RDI: 0000000000000006 [ 300.776070][T21738] RBP: 00007fd6adab1090 R08: 0000000000000000 R09: 0000000000000000 [ 300.784060][T21738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.792032][T21738] R13: 0000000000000000 R14: 00007fd6af635fa0 R15: 00007fff4d994918 [ 300.800014][T21738] [ 301.007258][T21772] netlink: 'syz.6.5319': attribute type 10 has an invalid length. [ 301.033882][T21774] FAULT_INJECTION: forcing a failure. [ 301.033882][T21774] name failslab, interval 1, probability 0, space 0, times 0 [ 301.046606][T21774] CPU: 1 UID: 0 PID: 21774 Comm: syz.4.5323 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 301.057576][T21774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 301.062748][T21777] syz.6.5325[21777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.067647][T21774] Call Trace: [ 301.067659][T21774] [ 301.079357][T21777] syz.6.5325[21777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.082330][T21774] dump_stack_lvl+0xf2/0x150 [ 301.094676][T21777] syz.6.5325[21777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.096626][T21774] dump_stack+0x15/0x1a [ 301.116890][T21774] should_fail_ex+0x223/0x230 [ 301.121650][T21774] should_failslab+0x8f/0xb0 [ 301.126263][T21774] __kmalloc_noprof+0xab/0x3f0 [ 301.131039][T21774] ? __se_sys_memfd_create+0x230/0x5c0 [ 301.136544][T21774] __se_sys_memfd_create+0x230/0x5c0 [ 301.141866][T21774] __x64_sys_memfd_create+0x31/0x40 [ 301.147096][T21774] x64_sys_call+0x2d4c/0x2dc0 [ 301.151809][T21774] do_syscall_64+0xc9/0x1c0 [ 301.156403][T21774] ? clear_bhb_loop+0x55/0xb0 [ 301.161197][T21774] ? clear_bhb_loop+0x55/0xb0 [ 301.165880][T21774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.171809][T21774] RIP: 0033:0x7fc54c365d19 [ 301.176230][T21774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.196055][T21774] RSP: 002b:00007fc54a9d6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 301.204544][T21774] RAX: ffffffffffffffda RBX: 0000000000000a82 RCX: 00007fc54c365d19 [ 301.212689][T21774] RDX: 00007fc54a9d6ef0 RSI: 0000000000000000 RDI: 00007fc54c3e2381 [ 301.220672][T21774] RBP: 0000000020000180 R08: 00007fc54a9d6bb7 R09: 00007fc54a9d6e40 [ 301.228652][T21774] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000000 [ 301.236631][T21774] R13: 00007fc54a9d6ef0 R14: 00007fc54a9d6eb0 R15: 0000000020000080 [ 301.244619][T21774] [ 301.301394][ T29] kauditd_printk_skb: 691 callbacks suppressed [ 301.301410][ T29] audit: type=1400 audit(1734404545.050:23372): avc: denied { mount } for pid=21783 comm="syz.4.5326" name="/" dev="configfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 301.332311][ T29] audit: type=1400 audit(1734404545.090:23373): avc: denied { unmount } for pid=12746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 301.384397][ T29] audit: type=1326 audit(1734404545.130:23374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 301.408225][ T29] audit: type=1326 audit(1734404545.130:23375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 301.431835][ T29] audit: type=1326 audit(1734404545.130:23376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 301.433339][T21798] FAULT_INJECTION: forcing a failure. [ 301.433339][T21798] name failslab, interval 1, probability 0, space 0, times 0 [ 301.455487][ T29] audit: type=1326 audit(1734404545.130:23377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 301.468060][T21798] CPU: 0 UID: 0 PID: 21798 Comm: syz.0.5332 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 301.491537][ T29] audit: type=1326 audit(1734404545.130:23378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 301.502201][T21798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 301.525891][ T29] audit: type=1326 audit(1734404545.130:23379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 301.535887][T21798] Call Trace: [ 301.535898][T21798] [ 301.535908][T21798] dump_stack_lvl+0xf2/0x150 [ 301.535952][T21798] dump_stack+0x15/0x1a [ 301.536017][T21798] should_fail_ex+0x223/0x230 [ 301.536049][T21798] should_failslab+0x8f/0xb0 [ 301.559700][ T29] audit: type=1326 audit(1734404545.130:23380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad88c35d19 code=0x7ffc0000 [ 301.562774][T21798] kmem_cache_alloc_noprof+0x52/0x320 [ 301.565787][ T29] audit: type=1326 audit(1734404545.130:23381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fad88c37bac code=0x7ffc0000 [ 301.570286][T21798] ? audit_log_start+0x34c/0x6b0 [ 301.570321][T21798] audit_log_start+0x34c/0x6b0 [ 301.570353][T21798] audit_seccomp+0x4b/0x130 [ 301.570410][T21798] __seccomp_filter+0x6fa/0x1180 [ 301.570476][T21798] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 301.661435][T21798] ? vfs_write+0x596/0x920 [ 301.665873][T21798] ? putname+0xcf/0xf0 [ 301.669993][T21798] __secure_computing+0x9f/0x1c0 [ 301.674999][T21798] syscall_trace_enter+0xd1/0x1f0 [ 301.680054][T21798] ? fpregs_assert_state_consistent+0x83/0xa0 [ 301.686236][T21798] do_syscall_64+0xaa/0x1c0 [ 301.690775][T21798] ? clear_bhb_loop+0x55/0xb0 [ 301.695501][T21798] ? clear_bhb_loop+0x55/0xb0 [ 301.700238][T21798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.706231][T21798] RIP: 0033:0x7fad88c35d19 [ 301.710653][T21798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.730357][T21798] RSP: 002b:00007fad872a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.738780][T21798] RAX: ffffffffffffffda RBX: 00007fad88e25fa0 RCX: 00007fad88c35d19 [ 301.746758][T21798] RDX: 0000000020002800 RSI: 0000000000008982 RDI: 0000000000000008 [ 301.754774][T21798] RBP: 00007fad872a1090 R08: 0000000000000000 R09: 0000000000000000 [ 301.762748][T21798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.770723][T21798] R13: 0000000000000000 R14: 00007fad88e25fa0 R15: 00007ffee1f50e68 [ 301.778737][T21798] [ 301.845861][T21811] FAULT_INJECTION: forcing a failure. [ 301.845861][T21811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.859027][T21811] CPU: 1 UID: 0 PID: 21811 Comm: syz.6.5338 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 301.869851][T21811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 301.879917][T21811] Call Trace: [ 301.883274][T21811] [ 301.886261][T21811] dump_stack_lvl+0xf2/0x150 [ 301.890959][T21811] dump_stack+0x15/0x1a [ 301.895134][T21811] should_fail_ex+0x223/0x230 [ 301.899825][T21811] should_fail+0xb/0x10 [ 301.903993][T21811] should_fail_usercopy+0x1a/0x20 [ 301.909074][T21811] _copy_from_user+0x1e/0xb0 [ 301.913682][T21811] move_addr_to_kernel+0x82/0x120 [ 301.918729][T21811] __sys_bind+0x9e/0x190 [ 301.923009][T21811] __x64_sys_bind+0x41/0x50 [ 301.927591][T21811] x64_sys_call+0x20ab/0x2dc0 [ 301.932276][T21811] do_syscall_64+0xc9/0x1c0 [ 301.936866][T21811] ? clear_bhb_loop+0x55/0xb0 [ 301.941661][T21811] ? clear_bhb_loop+0x55/0xb0 [ 301.946348][T21811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.952295][T21811] RIP: 0033:0x7f2893435d19 [ 301.956722][T21811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.976373][T21811] RSP: 002b:00007f2891aa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 301.984799][T21811] RAX: ffffffffffffffda RBX: 00007f2893625fa0 RCX: 00007f2893435d19 [ 301.992780][T21811] RDX: 0000000000000014 RSI: 0000000020000980 RDI: 0000000000000007 [ 302.000806][T21811] RBP: 00007f2891aa1090 R08: 0000000000000000 R09: 0000000000000000 [ 302.008790][T21811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.016817][T21811] R13: 0000000000000000 R14: 00007f2893625fa0 R15: 00007ffcfbce9438 [ 302.024803][T21811] [ 302.047618][T21813] __nla_validate_parse: 8 callbacks suppressed [ 302.047689][T21813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5339'. [ 302.062899][T21813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5339'. [ 302.131539][T21827] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5346'. [ 302.160268][T21832] netlink: 'syz.6.5344': attribute type 10 has an invalid length. [ 302.177975][T21831] FAULT_INJECTION: forcing a failure. [ 302.177975][T21831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.191225][T21831] CPU: 0 UID: 0 PID: 21831 Comm: syz.0.5348 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 302.202023][T21831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 302.212096][T21831] Call Trace: [ 302.215385][T21831] [ 302.218330][T21831] dump_stack_lvl+0xf2/0x150 [ 302.222945][T21831] dump_stack+0x15/0x1a [ 302.227120][T21831] should_fail_ex+0x223/0x230 [ 302.231900][T21831] should_fail+0xb/0x10 [ 302.236068][T21831] should_fail_usercopy+0x1a/0x20 [ 302.241104][T21831] _copy_from_user+0x1e/0xb0 [ 302.245738][T21831] __se_sys_mount+0x119/0x2d0 [ 302.250455][T21831] ? ksys_write+0x176/0x1b0 [ 302.254980][T21831] __x64_sys_mount+0x67/0x80 [ 302.259627][T21831] x64_sys_call+0x2c84/0x2dc0 [ 302.264376][T21831] do_syscall_64+0xc9/0x1c0 [ 302.268887][T21831] ? clear_bhb_loop+0x55/0xb0 [ 302.273625][T21831] ? clear_bhb_loop+0x55/0xb0 [ 302.278311][T21831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.284257][T21831] RIP: 0033:0x7fad88c35d19 [ 302.288696][T21831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.308319][T21831] RSP: 002b:00007fad872a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 302.316907][T21831] RAX: ffffffffffffffda RBX: 00007fad88e25fa0 RCX: 00007fad88c35d19 [ 302.324948][T21831] RDX: 00000000200002c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 302.332923][T21831] RBP: 00007fad872a1090 R08: 0000000020000400 R09: 0000000000000000 [ 302.340973][T21831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.348950][T21831] R13: 0000000000000000 R14: 00007fad88e25fa0 R15: 00007ffee1f50e68 [ 302.356979][T21831] [ 302.414644][T21841] vxlan0: entered promiscuous mode [ 302.419842][T21841] vxlan0: entered allmulticast mode [ 302.553242][T21866] FAULT_INJECTION: forcing a failure. [ 302.553242][T21866] name failslab, interval 1, probability 0, space 0, times 0 [ 302.566045][T21866] CPU: 0 UID: 0 PID: 21866 Comm: syz.3.5361 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 302.576842][T21866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 302.586975][T21866] Call Trace: [ 302.590330][T21866] [ 302.593278][T21866] dump_stack_lvl+0xf2/0x150 [ 302.597992][T21866] dump_stack+0x15/0x1a [ 302.602272][T21866] should_fail_ex+0x223/0x230 [ 302.607127][T21866] should_failslab+0x8f/0xb0 [ 302.611787][T21866] kmem_cache_alloc_noprof+0x52/0x320 [ 302.617184][T21866] ? getname_flags+0x81/0x3b0 [ 302.621935][T21866] getname_flags+0x81/0x3b0 [ 302.626487][T21866] getname_uflags+0x24/0x30 [ 302.631017][T21866] __x64_sys_execveat+0x5e/0x90 [ 302.636072][T21866] x64_sys_call+0x291e/0x2dc0 [ 302.640943][T21866] do_syscall_64+0xc9/0x1c0 [ 302.645533][T21866] ? clear_bhb_loop+0x55/0xb0 [ 302.650270][T21866] ? clear_bhb_loop+0x55/0xb0 [ 302.654997][T21866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.660916][T21866] RIP: 0033:0x7fd6af445d19 [ 302.665421][T21866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.685046][T21866] RSP: 002b:00007fd6adab1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 302.693510][T21866] RAX: ffffffffffffffda RBX: 00007fd6af635fa0 RCX: 00007fd6af445d19 [ 302.701555][T21866] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 302.709529][T21866] RBP: 00007fd6adab1090 R08: 0000000000000000 R09: 0000000000000000 [ 302.717568][T21866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.725559][T21866] R13: 0000000000000000 R14: 00007fd6af635fa0 R15: 00007fff4d994918 [ 302.733578][T21866] [ 303.572187][T21976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21976 comm=syz.8.5369 [ 303.616120][T21979] vxlan0: entered promiscuous mode [ 303.621302][T21979] vxlan0: entered allmulticast mode [ 303.685761][T21992] Failed to initialize the IGMP autojoin socket (err -2) [ 303.919287][T22009] netlink: 'syz.0.5377': attribute type 3 has an invalid length. [ 303.933625][T22009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5377'. [ 304.050445][T22002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.062204][T22002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.120974][T22030] hub 9-0:1.0: USB hub found [ 304.127471][T22030] hub 9-0:1.0: 8 ports detected [ 304.266037][T22040] netlink: 'syz.6.5389': attribute type 39 has an invalid length. [ 304.275080][T22040] veth1_macvtap: left promiscuous mode [ 304.300164][T22044] FAULT_INJECTION: forcing a failure. [ 304.300164][T22044] name failslab, interval 1, probability 0, space 0, times 0 [ 304.312869][T22044] CPU: 0 UID: 0 PID: 22044 Comm: syz.0.5391 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 304.323746][T22044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 304.333885][T22044] Call Trace: [ 304.337171][T22044] [ 304.340110][T22044] dump_stack_lvl+0xf2/0x150 [ 304.344752][T22044] dump_stack+0x15/0x1a [ 304.348951][T22044] should_fail_ex+0x223/0x230 [ 304.353646][T22044] should_failslab+0x8f/0xb0 [ 304.358331][T22044] __kmalloc_noprof+0xab/0x3f0 [ 304.363108][T22044] ? __se_sys_memfd_create+0x230/0x5c0 [ 304.368592][T22044] __se_sys_memfd_create+0x230/0x5c0 [ 304.373962][T22044] __x64_sys_memfd_create+0x31/0x40 [ 304.379245][T22044] x64_sys_call+0x2d4c/0x2dc0 [ 304.383988][T22044] do_syscall_64+0xc9/0x1c0 [ 304.388541][T22044] ? clear_bhb_loop+0x55/0xb0 [ 304.393221][T22044] ? clear_bhb_loop+0x55/0xb0 [ 304.397897][T22044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.403812][T22044] RIP: 0033:0x7fad88c35d19 [ 304.408255][T22044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.428003][T22044] RSP: 002b:00007fad872a0e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 304.436421][T22044] RAX: ffffffffffffffda RBX: 00000000000004eb RCX: 00007fad88c35d19 [ 304.444427][T22044] RDX: 00007fad872a0ef0 RSI: 0000000000000000 RDI: 00007fad88cb2381 [ 304.452401][T22044] RBP: 0000000020000a40 R08: 00007fad872a0bb7 R09: 00007fad872a0e40 [ 304.460428][T22044] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000500 [ 304.468403][T22044] R13: 00007fad872a0ef0 R14: 00007fad872a0eb0 R15: 0000000020000000 [ 304.476455][T22044] [ 304.602118][T22070] FAULT_INJECTION: forcing a failure. [ 304.602118][T22070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.615287][T22070] CPU: 0 UID: 0 PID: 22070 Comm: syz.8.5401 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 304.626118][T22070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 304.636186][T22070] Call Trace: [ 304.639468][T22070] [ 304.642408][T22070] dump_stack_lvl+0xf2/0x150 [ 304.647040][T22070] dump_stack+0x15/0x1a [ 304.651291][T22070] should_fail_ex+0x223/0x230 [ 304.655999][T22070] should_fail+0xb/0x10 [ 304.660184][T22070] should_fail_usercopy+0x1a/0x20 [ 304.665344][T22070] _copy_to_user+0x20/0xa0 [ 304.669813][T22070] simple_read_from_buffer+0xa0/0x110 [ 304.675246][T22070] proc_fail_nth_read+0xf9/0x140 [ 304.680261][T22070] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.685847][T22070] vfs_read+0x1a2/0x700 [ 304.690091][T22070] ? __rcu_read_unlock+0x4e/0x70 [ 304.695050][T22070] ? __fget_files+0x17c/0x1c0 [ 304.699781][T22070] ksys_read+0xe8/0x1b0 [ 304.703952][T22070] __x64_sys_read+0x42/0x50 [ 304.708467][T22070] x64_sys_call+0x2874/0x2dc0 [ 304.713173][T22070] do_syscall_64+0xc9/0x1c0 [ 304.717690][T22070] ? clear_bhb_loop+0x55/0xb0 [ 304.722379][T22070] ? clear_bhb_loop+0x55/0xb0 [ 304.727067][T22070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.733043][T22070] RIP: 0033:0x7f79d278472c [ 304.737460][T22070] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 304.757155][T22070] RSP: 002b:00007f79d0df1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 304.765638][T22070] RAX: ffffffffffffffda RBX: 00007f79d2975fa0 RCX: 00007f79d278472c [ 304.773611][T22070] RDX: 000000000000000f RSI: 00007f79d0df10a0 RDI: 0000000000000003 [ 304.781590][T22070] RBP: 00007f79d0df1090 R08: 0000000000000000 R09: 0000000000000000 [ 304.789592][T22070] R10: 0000000000044090 R11: 0000000000000246 R12: 0000000000000001 [ 304.797566][T22070] R13: 0000000000000000 R14: 00007f79d2975fa0 R15: 00007fff62221d48 [ 304.805609][T22070] [ 304.825505][T22074] Failed to initialize the IGMP autojoin socket (err -2) [ 304.834063][T22065] vxlan0: entered promiscuous mode [ 304.839468][T22065] vxlan0: entered allmulticast mode [ 304.875700][T22078] Failed to initialize the IGMP autojoin socket (err -2) [ 305.221758][T22097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.245044][T22097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.245296][T22062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.268976][T22112] Failed to initialize the IGMP autojoin socket (err -2) [ 305.274835][T22062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.350467][T22116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5416'. [ 305.359459][T22116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5416'. [ 305.518736][T22135] vxlan0: entered promiscuous mode [ 305.523962][T22135] vxlan0: entered allmulticast mode [ 305.725883][T22145] netlink: 'syz.6.5428': attribute type 10 has an invalid length. [ 306.039959][T22170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5434'. [ 306.067018][T22174] vhci_hcd: default hub control req: 4008 v0007 i0000 l0 [ 306.084858][T22171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5439'. [ 306.093755][T22171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5439'. [ 306.187656][T22182] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5438'. [ 306.230056][T22185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.251410][T22185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.296632][T22179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.305969][T22179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.387484][T22191] FAULT_INJECTION: forcing a failure. [ 306.387484][T22191] name failslab, interval 1, probability 0, space 0, times 0 [ 306.400232][T22191] CPU: 1 UID: 0 PID: 22191 Comm: syz.4.5445 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 306.411030][T22191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 306.421108][T22191] Call Trace: [ 306.424402][T22191] [ 306.427345][T22191] dump_stack_lvl+0xf2/0x150 [ 306.431998][T22191] dump_stack+0x15/0x1a [ 306.436189][T22191] should_fail_ex+0x223/0x230 [ 306.440961][T22191] should_failslab+0x8f/0xb0 [ 306.445584][T22191] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 306.451948][T22191] ? sel_write_enforce+0x9d/0x2e0 [ 306.457053][T22191] memdup_user_nul+0x2c/0xd0 [ 306.461684][T22191] sel_write_enforce+0x9d/0x2e0 [ 306.466619][T22191] ? __pfx_sel_write_enforce+0x10/0x10 [ 306.472187][T22191] vfs_write+0x281/0x920 [ 306.476491][T22191] ? __fget_files+0x17c/0x1c0 [ 306.481238][T22191] ksys_write+0xe8/0x1b0 [ 306.485535][T22191] __x64_sys_write+0x42/0x50 [ 306.490158][T22191] x64_sys_call+0x287e/0x2dc0 [ 306.494934][T22191] do_syscall_64+0xc9/0x1c0 [ 306.499477][T22191] ? clear_bhb_loop+0x55/0xb0 [ 306.504159][T22191] ? clear_bhb_loop+0x55/0xb0 [ 306.508874][T22191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.514885][T22191] RIP: 0033:0x7fc54c365d19 [ 306.519305][T22191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.538952][T22191] RSP: 002b:00007fc54a9d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 306.547488][T22191] RAX: ffffffffffffffda RBX: 00007fc54c555fa0 RCX: 00007fc54c365d19 [ 306.555474][T22191] RDX: 0000000000000012 RSI: 00000000200031c0 RDI: 0000000000000006 [ 306.563462][T22191] RBP: 00007fc54a9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 306.571433][T22191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.579504][T22191] R13: 0000000000000000 R14: 00007fc54c555fa0 R15: 00007fffb9d193e8 [ 306.587569][T22191] [ 306.685206][T22203] Failed to initialize the IGMP autojoin socket (err -2) [ 306.858484][T22219] vhci_hcd: default hub control req: 4008 v0007 i0000 l0 [ 307.007023][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 307.007045][ T29] audit: type=1326 audit(1734404550.760:23691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22231 comm="syz.8.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d2785d19 code=0x7ffc0000 [ 307.074404][ T29] audit: type=1326 audit(1734404550.760:23692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22231 comm="syz.8.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79d2785d19 code=0x7ffc0000 [ 307.098240][ T29] audit: type=1326 audit(1734404550.760:23693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22231 comm="syz.8.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d2785d19 code=0x7ffc0000 [ 307.122163][ T29] audit: type=1326 audit(1734404550.760:23694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22231 comm="syz.8.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79d2785d19 code=0x7ffc0000 [ 307.145892][ T29] audit: type=1326 audit(1734404550.760:23695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22231 comm="syz.8.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d2785d19 code=0x7ffc0000 [ 307.169775][ T29] audit: type=1326 audit(1734404550.760:23696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22231 comm="syz.8.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f79d2785d19 code=0x7ffc0000 [ 307.193476][ T29] audit: type=1326 audit(1734404550.760:23697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22231 comm="syz.8.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d2785d19 code=0x7ffc0000 [ 307.268911][T22222] __nla_validate_parse: 1 callbacks suppressed [ 307.268934][T22222] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5457'. [ 307.284436][T22222] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5457'. [ 307.293395][T22243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5463'. [ 307.293585][T22222] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5457'. [ 307.350556][T22222] netlink: 'syz.6.5457': attribute type 39 has an invalid length. [ 307.558942][T22262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.584912][T22247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.597943][T22262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.622442][T22247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.754635][ T29] audit: type=1326 audit(1734404551.480:23698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22269 comm="syz.6.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 307.778305][ T29] audit: type=1326 audit(1734404551.480:23699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22269 comm="syz.6.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 307.801968][ T29] audit: type=1326 audit(1734404551.480:23700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22269 comm="syz.6.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 308.224293][T22333] netlink: 'syz.3.5494': attribute type 10 has an invalid length. [ 308.308850][T22342] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5496'. [ 308.471249][T22353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5508'. [ 308.480493][T22353] IPVS: Error during creation of socket; terminating [ 308.495998][T22359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5508'. [ 308.508512][T22359] IPVS: Error during creation of socket; terminating [ 308.537405][T22350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.547248][T22350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.121269][T22392] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=22392 comm=syz.3.5523 [ 309.494096][T22429] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5540'. [ 309.503294][T22429] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5540'. [ 309.512428][T22429] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5540'. [ 309.525773][T22429] netlink: 'syz.0.5540': attribute type 39 has an invalid length. [ 309.534157][T22429] veth1_macvtap: left promiscuous mode [ 309.556745][T22440] FAULT_INJECTION: forcing a failure. [ 309.556745][T22440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.569906][T22440] CPU: 1 UID: 0 PID: 22440 Comm: syz.4.5544 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 309.580767][T22440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 309.590838][T22440] Call Trace: [ 309.594118][T22440] [ 309.597163][T22440] dump_stack_lvl+0xf2/0x150 [ 309.601836][T22440] dump_stack+0x15/0x1a [ 309.606087][T22440] should_fail_ex+0x223/0x230 [ 309.610794][T22440] should_fail+0xb/0x10 [ 309.615005][T22440] should_fail_usercopy+0x1a/0x20 [ 309.620058][T22440] _copy_from_user+0x1e/0xb0 [ 309.624738][T22440] __sys_bpf+0x14e/0x7a0 [ 309.629431][T22440] __x64_sys_bpf+0x43/0x50 [ 309.633859][T22440] x64_sys_call+0x2914/0x2dc0 [ 309.638598][T22440] do_syscall_64+0xc9/0x1c0 [ 309.643166][T22440] ? clear_bhb_loop+0x55/0xb0 [ 309.647880][T22440] ? clear_bhb_loop+0x55/0xb0 [ 309.652693][T22440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.658649][T22440] RIP: 0033:0x7fc54c365d19 [ 309.663060][T22440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.682742][T22440] RSP: 002b:00007fc54a9d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.691213][T22440] RAX: ffffffffffffffda RBX: 00007fc54c555fa0 RCX: 00007fc54c365d19 [ 309.699192][T22440] RDX: 0000000000000090 RSI: 00000000200007c0 RDI: 0000000000000005 [ 309.707168][T22440] RBP: 00007fc54a9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 309.715139][T22440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.723107][T22440] R13: 0000000000000000 R14: 00007fc54c555fa0 R15: 00007fffb9d193e8 [ 309.731102][T22440] [ 309.916052][T22462] netlink: 'syz.0.5552': attribute type 10 has an invalid length. [ 310.137486][T22486] netlink: 'syz.3.5562': attribute type 3 has an invalid length. [ 310.490608][T22516] netlink: 'syz.0.5576': attribute type 3 has an invalid length. [ 310.560895][T22519] FAULT_INJECTION: forcing a failure. [ 310.560895][T22519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.574159][T22519] CPU: 0 UID: 0 PID: 22519 Comm: syz.0.5578 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 310.585069][T22519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 310.595673][T22519] Call Trace: [ 310.598977][T22519] [ 310.601933][T22519] dump_stack_lvl+0xf2/0x150 [ 310.606576][T22519] dump_stack+0x15/0x1a [ 310.610832][T22519] should_fail_ex+0x223/0x230 [ 310.615673][T22519] should_fail+0xb/0x10 [ 310.619872][T22519] should_fail_usercopy+0x1a/0x20 [ 310.625038][T22519] _copy_from_iter+0xd5/0xd00 [ 310.629765][T22519] ? kmalloc_reserve+0x16e/0x190 [ 310.634740][T22519] ? __build_skb_around+0x196/0x1f0 [ 310.639968][T22519] ? __alloc_skb+0x21f/0x310 [ 310.644627][T22519] ? __virt_addr_valid+0x1ed/0x250 [ 310.649880][T22519] ? __check_object_size+0x364/0x520 [ 310.655247][T22519] netlink_sendmsg+0x460/0x6e0 [ 310.660055][T22519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.665413][T22519] __sock_sendmsg+0x140/0x180 [ 310.670240][T22519] ____sys_sendmsg+0x312/0x410 [ 310.675064][T22519] __sys_sendmsg+0x19d/0x230 [ 310.679783][T22519] __x64_sys_sendmsg+0x46/0x50 [ 310.684589][T22519] x64_sys_call+0x2734/0x2dc0 [ 310.689295][T22519] do_syscall_64+0xc9/0x1c0 [ 310.693826][T22519] ? clear_bhb_loop+0x55/0xb0 [ 310.698594][T22519] ? clear_bhb_loop+0x55/0xb0 [ 310.703359][T22519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.709309][T22519] RIP: 0033:0x7fad88c35d19 [ 310.713748][T22519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.733383][T22519] RSP: 002b:00007fad872a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.741875][T22519] RAX: ffffffffffffffda RBX: 00007fad88e25fa0 RCX: 00007fad88c35d19 [ 310.749916][T22519] RDX: 0000000000000040 RSI: 0000000020000140 RDI: 0000000000000003 [ 310.757970][T22519] RBP: 00007fad872a1090 R08: 0000000000000000 R09: 0000000000000000 [ 310.766055][T22519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.768667][T11190] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 310.774069][T22519] R13: 0000000000000000 R14: 00007fad88e25fa0 R15: 00007ffee1f50e68 [ 310.774098][T22519] [ 310.796180][T11190] CPU: 1 UID: 0 PID: 11190 Comm: syz-executor Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 310.807134][T11190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 310.817232][T11190] Call Trace: [ 310.820522][T11190] [ 310.823493][T11190] dump_stack_lvl+0xf2/0x150 [ 310.828152][T11190] dump_stack+0x15/0x1a [ 310.832396][T11190] dump_header+0x83/0x2d0 [ 310.836777][T11190] oom_kill_process+0x341/0x4c0 [ 310.841651][T11190] out_of_memory+0x9af/0xbe0 [ 310.846277][T11190] ? css_next_descendant_pre+0x11c/0x140 [ 310.851967][T11190] mem_cgroup_out_of_memory+0x13e/0x190 [ 310.857564][T11190] try_charge_memcg+0x508/0x7f0 [ 310.862483][T11190] charge_memcg+0x50/0xc0 [ 310.866907][T11190] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 310.872971][T11190] __read_swap_cache_async+0x236/0x480 [ 310.878486][T11190] swap_cluster_readahead+0x279/0x3f0 [ 310.883969][T11190] swapin_readahead+0xe4/0x6f0 [ 310.888866][T11190] ? update_load_avg+0x1f7/0x7c0 [ 310.893940][T11190] ? swap_cache_get_folio+0x77/0x210 [ 310.899273][T11190] do_swap_page+0x31b/0x2550 [ 310.903902][T11190] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 310.909446][T11190] ? __rcu_read_lock+0x36/0x50 [ 310.914267][T11190] ? __pfx_default_wake_function+0x10/0x10 [ 310.920180][T11190] handle_mm_fault+0x8e4/0x2ac0 [ 310.925109][T11190] exc_page_fault+0x3b9/0x650 [ 310.929882][T11190] asm_exc_page_fault+0x26/0x30 [ 310.934767][T11190] RIP: 0033:0x7f79d27b8585 [ 310.939185][T11190] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d be 3f 19 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 310.958941][T11190] RSP: 002b:00007fff62222098 EFLAGS: 00010246 [ 310.965093][T11190] RAX: 0000000000000000 RBX: 00000000000004bf RCX: 00007f79d27b8583 [ 310.973073][T11190] RDX: 00007fff622220b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.981067][T11190] RBP: 00007fff6222210c R08: 0000000028798414 R09: 7fffffffffffffff [ 310.989098][T11190] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 310.997115][T11190] R13: 000000000004bbc0 R14: 00007fff62222160 R15: 0000000000000bb8 [ 311.005099][T11190] [ 311.008364][T11190] memory: usage 307200kB, limit 307200kB, failcnt 2157 [ 311.015356][T11190] memory+swap: usage 298596kB, limit 9007199254740988kB, failcnt 0 [ 311.023346][T11190] kmem: usage 286576kB, limit 9007199254740988kB, failcnt 0 [ 311.030767][T11190] Memory cgroup stats for /syz8: [ 311.032238][T11190] cache 0 [ 311.040291][T11190] rss 4096 [ 311.043316][T11190] shmem 0 [ 311.046468][T11190] mapped_file 0 [ 311.050007][T11190] dirty 0 [ 311.052948][T11190] writeback 4096 [ 311.056528][T11190] workingset_refault_anon 12 [ 311.061125][T11190] workingset_refault_file 32 [ 311.065783][T11190] swap 241664 [ 311.069073][T11190] swapcached 16384 [ 311.072795][T11190] pgpgin 184787 [ 311.076315][T11190] pgpgout 184783 [ 311.079863][T11190] pgfault 228012 [ 311.083424][T11190] pgmajfault 5 [ 311.086858][T11190] inactive_anon 0 [ 311.090496][T11190] active_anon 16384 [ 311.094331][T11190] inactive_file 0 [ 311.098002][T11190] active_file 0 [ 311.101480][T11190] unevictable 0 [ 311.105026][T11190] hierarchical_memory_limit 314572800 [ 311.110449][T11190] hierarchical_memsw_limit 9223372036854771712 [ 311.116843][T11190] total_cache 0 [ 311.120336][T11190] total_rss 4096 [ 311.123883][T11190] total_shmem 0 [ 311.127443][T11190] total_mapped_file 0 [ 311.131443][T11190] total_dirty 0 [ 311.134928][T11190] total_writeback 4096 [ 311.139017][T11190] total_workingset_refault_anon 12 [ 311.144144][T11190] total_workingset_refault_file 32 [ 311.149296][T11190] total_swap 241664 [ 311.153108][T11190] total_swapcached 16384 [ 311.157495][T11190] total_pgpgin 184787 [ 311.161503][T11190] total_pgpgout 184783 [ 311.165596][T11190] total_pgfault 228012 [ 311.169698][T11190] total_pgmajfault 5 [ 311.173607][T11190] total_inactive_anon 0 [ 311.177817][T11190] total_active_anon 16384 [ 311.182148][T11190] total_inactive_file 0 [ 311.186413][T11190] total_active_file 0 [ 311.190434][T11190] total_unevictable 0 [ 311.194497][T11190] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.5567,pid=22492,uid=0 [ 311.209286][T11190] Memory cgroup out of memory: Killed process 22492 (syz.8.5567) total-vm:93384kB, anon-rss:788kB, file-rss:22236kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 311.346194][T22529] blktrace: Concurrent blktraces are not allowed on sg0 [ 311.370651][T22531] vxlan0: entered promiscuous mode [ 311.375847][T22531] vxlan0: entered allmulticast mode [ 311.383670][T22535] usb usb5: usbfs: process 22535 (syz.6.5583) did not claim interface 0 before use [ 311.598882][T22564] tipc: Started in network mode [ 311.603821][T22564] tipc: Node identity 7, cluster identity 4711 [ 311.610056][T22564] tipc: Node number set to 7 [ 311.750652][T22577] vxlan0: entered promiscuous mode [ 311.756013][T22577] vxlan0: entered allmulticast mode [ 312.192966][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 312.192984][ T29] audit: type=1326 audit(1734404555.940:24026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22599 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 312.206932][T22589] Failed to initialize the IGMP autojoin socket (err -2) [ 312.234571][ T29] audit: type=1326 audit(1734404555.980:24027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22599 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 312.258305][ T29] audit: type=1326 audit(1734404555.980:24028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22599 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 312.281923][ T29] audit: type=1326 audit(1734404555.980:24029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22599 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 312.305559][ T29] audit: type=1326 audit(1734404555.980:24030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22599 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 312.329186][ T29] audit: type=1326 audit(1734404555.980:24031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22599 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 312.352789][ T29] audit: type=1326 audit(1734404555.980:24032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22599 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 312.376421][ T29] audit: type=1326 audit(1734404555.980:24033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22599 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 312.400005][ T29] audit: type=1326 audit(1734404555.980:24034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22599 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 312.423698][ T29] audit: type=1326 audit(1734404555.980:24035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22599 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893435d19 code=0x7ffc0000 [ 312.604042][T22625] vhci_hcd: default hub control req: 4008 v0007 i0000 l0 [ 312.621402][T22629] __nla_validate_parse: 8 callbacks suppressed [ 312.621417][T22629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5615'. [ 312.636628][T22629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5615'. [ 312.657563][T22589] chnl_net:caif_netlink_parms(): no params data found [ 312.790234][T22589] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.795944][T22621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.797473][T22589] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.817050][T22589] bridge_slave_0: entered allmulticast mode [ 312.823644][T22589] bridge_slave_0: entered promiscuous mode [ 312.830448][T22589] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.837602][T22589] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.844841][T22589] bridge_slave_1: entered allmulticast mode [ 312.851395][T22589] bridge_slave_1: entered promiscuous mode [ 312.864707][T22621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.920386][T22589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.941710][T22589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.013349][ T4575] ================================================================== [ 313.021498][ T4575] BUG: KCSAN: data-race in set_nlink / set_nlink [ 313.027882][ T4575] [ 313.030216][ T4575] write to 0xffff88810645aeb8 of 4 bytes by task 2999 on cpu 0: [ 313.037861][ T4575] set_nlink+0x98/0xb0 [ 313.041953][ T4575] kernfs_iop_permission+0x1c8/0x210 [ 313.047263][ T4575] inode_permission+0x18c/0x300 [ 313.052129][ T4575] link_path_walk+0x14b/0x820 [ 313.056821][ T4575] path_openat+0x1af/0x1fa0 [ 313.061343][ T4575] do_filp_open+0x107/0x230 [ 313.065863][ T4575] do_sys_openat2+0xab/0x120 [ 313.070464][ T4575] __x64_sys_openat+0xf3/0x120 [ 313.075234][ T4575] x64_sys_call+0x2b30/0x2dc0 [ 313.079920][ T4575] do_syscall_64+0xc9/0x1c0 [ 313.084431][ T4575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.090352][ T4575] [ 313.092675][ T4575] read to 0xffff88810645aeb8 of 4 bytes by task 4575 on cpu 1: [ 313.100216][ T4575] set_nlink+0x2b/0xb0 [ 313.104298][ T4575] kernfs_iop_permission+0x1c8/0x210 [ 313.109596][ T4575] inode_permission+0x18c/0x300 [ 313.114455][ T4575] link_path_walk+0x14b/0x820 [ 313.119138][ T4575] path_openat+0x1af/0x1fa0 [ 313.123654][ T4575] do_filp_open+0x107/0x230 [ 313.128192][ T4575] do_sys_openat2+0xab/0x120 [ 313.132788][ T4575] __x64_sys_openat+0xf3/0x120 [ 313.137568][ T4575] x64_sys_call+0x2b30/0x2dc0 [ 313.142248][ T4575] do_syscall_64+0xc9/0x1c0 [ 313.146757][ T4575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.152667][ T4575] [ 313.154992][ T4575] value changed: 0x000001db -> 0x000001dc [ 313.160711][ T4575] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 313.163031][ T4575] Reported by Kernel Concurrency Sanitizer on: [ 313.169178][ T4575] CPU: 1 UID: 0 PID: 4575 Comm: udevd Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 313.179440][ T4575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 313.189512][ T4575] ================================================================== [ 313.225037][T22589] team0: Port device team_slave_0 added [ 313.237740][T22589] team0: Port device team_slave_1 added [ 313.261898][T22659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5626'. [ 313.270899][T22659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5626'. [ 317.371369][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 317.371384][ T29] audit: type=1400 audit(1734404561.120:24129): avc: denied { sys_chroot } for pid=23150 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 317.398977][ T29] audit: type=1400 audit(1734404561.120:24130): avc: denied { setgid } for pid=23150 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 317.420172][ T29] audit: type=1400 audit(1734404561.120:24131): avc: denied { setuid } for pid=23150 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 317.441317][ T29] audit: type=1400 audit(1734404561.120:24132): avc: denied { setrlimit } for pid=23150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1