last executing test programs: 4m41.312963199s ago: executing program 1 (id=4585): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100100, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$packet(0x11, 0x2, 0x300) 4m41.25011917s ago: executing program 1 (id=4587): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20010004, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x1, 'veth1_to_team\x00', {}, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010010"], 0x1c}}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 4m41.21626256s ago: executing program 1 (id=4589): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24000001}, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 4m41.17620521s ago: executing program 1 (id=4591): socket$packet(0x11, 0x3, 0x300) r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff0000), &(0x7f0000000140)) (async) r2 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff0000), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYRES8=0x0], &(0x7f00000002c0)=""/145, 0x190, 0x91, 0x1, 0xf, 0x10000, @value}, 0x28) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYRES8=0x0], &(0x7f00000002c0)=""/145, 0x190, 0x91, 0x1, 0xf, 0x10000, @value}, 0x28) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4da}}, 0x0, 0xf}, &(0x7f00000000c0)=0x90) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4da}}, 0x0, 0xf}, &(0x7f00000000c0)=0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="42fa080fb029f2132f3f6abcf58d8a2afedecf84e4672bc56a76339fb9046bbe6f7e79e2668f24e68e7e6f2dd31a6346d838141a1edce1e3fe0ee11836df819268354d04a3090ddfd5c60ec56a5cafe7f1622429541e12eae4592c82a6e9a12d8ec41e2ef7929176638f9610f281aa7a7cfa037095c97b092d0e03be10eb6fb535252697ec7a1fab7729214dc9414d60d98b4c01d2a1418af64ed9c78600de791690ac09154a5aaba4bde0fa667cda4f7c603a3d69159c9dd0c6c321ac3f9873802886e9", @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1f, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) creat(&(0x7f0000000100)='./file0/../file0\x00', 0x140) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) dup(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x2a020400) (async) unshare(0x2a020400) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 4m41.014658371s ago: executing program 1 (id=4596): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12, &(0x7f0000000000), 0xfd, 0x244, &(0x7f0000000680)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) creat(&(0x7f0000000040)='./bus\x00', 0x98) statfs(&(0x7f0000000180)='./bus\x00', &(0x7f0000000280)=""/132) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0xc8, 0x20002a, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa6c"], 0xfdef) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 4m40.973173361s ago: executing program 1 (id=4598): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 4m40.972976461s ago: executing program 32 (id=4598): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1m56.404374136s ago: executing program 2 (id=7573): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b000005318a280016250f28760000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_context(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff85000000040000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 1m56.304117527s ago: executing program 2 (id=7575): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x371, &(0x7f0000001400)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x64000600) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x40, @remote}, {0x2, 0x4e27, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 1m55.993253359s ago: executing program 2 (id=7577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x201, 0x0, 0x1000000, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 1m55.825901279s ago: executing program 2 (id=7580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x3, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1m54.885682324s ago: executing program 2 (id=7585): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2={0xff, 0x5}}]}}}]}, 0x4c}}, 0x240008c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1a, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x54fa, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x50}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x1000, &(0x7f00000019c0)=""/4096, 0x1f00, 0x20, '\x00', r8, 0x0, r6, 0x8, &(0x7f0000000200)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xe, 0xa647, 0x81}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r5, r1, r5, r5, r1, r5], &(0x7f0000000400)=[{0x5, 0x5, 0x4, 0x1}, {0x2, 0x5, 0xf}], 0x10, 0x9, @void, @value}, 0x94) r9 = eventfd(0x800a6) r10 = dup(r9) r11 = getpgrp(0xffffffffffffffff) r12 = syz_clone(0x0, 0x0, 0x44, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r11, r12, 0x7, r10, &(0x7f0000000340)={r10, 0xffffffffffffffff, 0xa86}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}}, 0x0) 1m54.668635475s ago: executing program 2 (id=7588): write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f4071f0904001f000000fe00000000000000", 0x1c) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100100, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) close(r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@typedef={0x5, 0x0, 0x0, 0x8, 0x5}, @fwd={0x3}]}, {0x0, [0x2e, 0x30, 0x6f]}}, &(0x7f00000003c0)=""/249, 0x35, 0xf9, 0x0, 0x4, 0x10000, @value=r0}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7, 0x4, 0x3ec00000, 0x28041, r0, 0xf607, '\x00', r2, r3, 0x3, 0x0, 0x2, 0xb, @value=r0, @void, @void, @value}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000c80)='map_files\x00') getdents(r5, &(0x7f00000001c0)=""/35, 0x23) getdents64(r5, 0x0, 0x43) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ee, &(0x7f0000000880)="$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") 1m38.546780776s ago: executing program 33 (id=7588): write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f4071f0904001f000000fe00000000000000", 0x1c) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100100, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) close(r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@typedef={0x5, 0x0, 0x0, 0x8, 0x5}, @fwd={0x3}]}, {0x0, [0x2e, 0x30, 0x6f]}}, &(0x7f00000003c0)=""/249, 0x35, 0xf9, 0x0, 0x4, 0x10000, @value=r0}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7, 0x4, 0x3ec00000, 0x28041, r0, 0xf607, '\x00', r2, r3, 0x3, 0x0, 0x2, 0xb, @value=r0, @void, @void, @value}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000c80)='map_files\x00') getdents(r5, &(0x7f00000001c0)=""/35, 0x23) getdents64(r5, 0x0, 0x43) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ee, &(0x7f0000000880)="$eJzs3cFuG1sZAOB/Jja3SXNxLrC4XInbihYlFdRJGtpGLApICFaVgLIvIXGjKE5cJU7bRBWk4gGQEAIkNrBig8QDIKE+AkKqBHsECFRBCwsWhUG2xyFN7SSljg3x90mnc8547P/8tXw8Z2biCWBonY+IqYjIsiy7FBGlfH2al9htlcZ2z589XGyUJLLs1l+SSPJ17dd6K1+ezZ92JiK++qWIbySvxt3c3lldqFYrG3l7ur6WvMiyncsrawvLleXK+tzc7LX56/NX52d6kudERNz4wh+//52ffvHGLz91/3e3/zz1zVaCLfvz6KVW6sXm/0VbISI2TiLYgBSaGbZcHXBfAAA4XGN//0MR8fGIuBSlGGnuzQEAAACnSfbZ8XiRtM7/AQAAAKdTGhHjkaTl/Hrf8UjTcrl1De9HYiyt1jbrn8xKe8cLJqKY3lmpVmbyawcmopg02rP5Nbbt9pUD7bmIeCcivlcabbbLi7Xq0kCPfAAAAMDwOHtg/v/3Umv+DwAAAJwyE4PuAAAAAHDizP8BAADg9DP/BwAAgFPtyzdvNkrWvv/10r3trdXavctLlc3V8trWYnmxtnG3vFyrLTd/s2/tqNer1mp3Px3rWw+m65XN+vTm9s7ttdrWev32yku3wAYAAAD66J1zj3+bRMTuZ0bTiMiSfY8VI7KR/RsX+t8/4OSkr7PxH06uH0D/jQy6A8DA2KWH4VUcdAeAgTtqHOh68c6vet8XAADgZEx+dO/8f7MAw+Px0+YiSQbdEaDvnP+H4eX8Hwyv4mF7ACYFcOqlh3zU238Q9Obn/7Ps9XsGAAD00nizJGk5nweMR5qWyxFvN28LUEzurFQrMxHxwYj4Tan4VqM923xm4vAAAAAAAAAAAAAAAAAAAAAAAAAAABxTliWRdTG6tw0AAADw/ywi/VOS3/9rsnRx/ODxgQ8k/yg1lxFx/0e3fvBgoV7fmG2s/+ve+voP8/VX+n30AgAAAOikPU9vz+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJeeP3u42C79jPv08xEx0Sl+Ic40l2eiGBFjf0uisO95SUSM9CD+7lhEvNspftLoVkzkvTgYP42I0V7Ef/Tfxz/bg/gwzB43xp/Pdfr8pXG+uez8+Svk5U11H//SvfFvpMv493anF0xfXfXek59Pd43/KOK9Qufxpx0/6RL/wjFz/PrXdna6PZb9JGKy4/dP8lKs6aRwd3pze+fyytrCcmW5sj43N3tt/vr81fmZ6Tsr1Ur+b8cY3/3YL/51WP5jXeJPHJH/xWPm/88nD559uFUtHnioGD/OsqkLnd//d7vEb3/3fSJ/uxvtyXZ9t1Xf7/2f/fr9c4fkv9Ql/6Pe/6lj5n/pK9/+/TE3BQD6YHN7Z3WhWq1sqKicWGU0+hh0IQ7bpr0T24f+fCsP9T/xFrx2ZYCDEgAAcCL+s9M/6J4AAAAAAAAAAAAAAAAAAADA8DrqZ8CiBz8ndjDm7mBSBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA41L8DAAD//y7szXE=") 51.409141223s ago: executing program 0 (id=8300): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x20ec, 0x1, r2}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xf, 0x0, 0x0, 0x32c1, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x109800, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000100)=r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa20000000000000702f3fff8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) 51.298448124s ago: executing program 0 (id=8301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0x49920d862a92153b}, 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='svcrdma_decode_rqst\x00', r1, 0x0, 0x1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0xb9e8, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='mm_page_alloc\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdb", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x9}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', 0x0, r6, 0x5, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) 50.583672687s ago: executing program 0 (id=8307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000007c0)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x600, 0x360, 0x11, 0x148, 0x0, 0x10, 0x568, 0x2a8, 0x2a8, 0x568, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {}, 0xa8}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x8, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x660) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000ff0000001438b536be507f75767e127e6c0000001000"/35, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) socket(0x10, 0x3, 0x9) socket(0x11, 0x800000003, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000480), &(0x7f0000000500)) r7 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x21, &(0x7f0000000000)=r7, 0x1) pipe2(&(0x7f0000000280), 0x4800) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2eaa00000000000071104300000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) 50.459082957s ago: executing program 0 (id=8309): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES8, @ANYRES16], 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES8=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff05) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000002000000000000000000000000c2deb4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) gettid() ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x297881, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r7 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 50.103262269s ago: executing program 0 (id=8316): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000741000/0x4000)=nil, 0x4000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, &(0x7f0000000140), 0x0, 0x4) 49.757857961s ago: executing program 0 (id=8318): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0xd7, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 49.757696091s ago: executing program 34 (id=8318): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0xd7, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 32.873463706s ago: executing program 5 (id=8576): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0x49920d862a92153b}, 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='svcrdma_decode_rqst\x00', r1, 0x0, 0x1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0xb9e8, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='mm_page_alloc\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdb", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x9}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', 0x0, r6, 0x5, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) 32.679386057s ago: executing program 5 (id=8580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x34, r2, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r2, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000000000000000000000000000cb5acaaa5ed05f767a250f2602189490bcc02afcb302b62a4302aeda13233370a057ef768a6a52ab318e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x2, 0x0, 0x4}, 0x0, 0x1ff}}, @TCA_TBF_RATE64={0xc, 0x4, 0xd209785ee1aca5b5}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r11, &(0x7f0000000600), 0x4) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x1c004, &(0x7f0000000280)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@access_any}, {@noextend}, {@access_uid={'access', 0x3d, r14}}, {@uname={'uname', 0x3d, 'tmpfs\x00'}}, {@cache_none}, {@privport}, {@access_client}, {@version_L}, {@ignoreqv}], [{@flag='async'}, {@euid_lt={'euid<', r13}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '-,\xe6^]/@'}}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r3, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r11, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r3, {r12, r15}}, './file1\x00'}) sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r16}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x232c864, &(0x7f00000003c0)={[{@discard}, {@debug}], [{@fowner_lt={'fowner<', r13}}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") llistxattr(&(0x7f0000000bc0)='./file1\x00', 0x0, 0x0) 32.609322647s ago: executing program 5 (id=8583): bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000008abb0000000000000800000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000000), 0x80000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000200000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) symlink(&(0x7f0000001780)='./file0\x00', &(0x7f00000005c0)='./file0\x00') lsetxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400), &(0x7f0000000540)='system_u:object_r:crond_initrc_exec_t:s0\x00', 0x29, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 32.562838867s ago: executing program 5 (id=8586): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x22) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3E0XlSfvX/7ga402VXR+v9Xh3nfuPXm3TbLJeZ+/Mh3ffZDE2dMnkaZJdI7iKM6T2I9ONL6JbgAA/x/neR6/5mWY5JUNM7udGy0MALgx1ef/X/rgBwD+4z78+JP3B8fHdz7IsjRe6j+eDZOImD6eDav5wf34MiZxL25HPy4i8oUqfve94zvRzQr78fp0PhsWmdPPfqzXH/wSUeYfRj/22/MPs8pK/nw23I3nI4vB/d2m1H682J7/Zkt+DHvxxmsr9R9EP376Ih7EJO5GkbvM//owy97Jv3361afFNkV+0onhXnldKfcFCQAAAAAAAAAAAAAAAAAAAACA7TrIsqRq31P27ymG6v47Oxfl/EHW2F/vz1PlJ81CVX+gvOmWM8/ju6a/zu0sy/L6wmV+N17uerAAAAAAAAAAAAAAAAAAAAAAFE4ePbk1mkzuPTx5dDq+dtB0A2h+1v931zlaGXk1TsejncsX3Nt8r9VuA0WtV14c3W5s6ba0B2eLkeeKera+xV4sRj6KKmgOZqt7vfB2tejpeJTVU81NHo+SP9srbQ7u+9WpXly3sLz8k7jI1880XZS6ntXb0t3o3Wqd+i3P883Weevn6ozqkaRssbHZ7rt10PoCiyAtziJd/OMXUz9cvuClbxk7137TAQAAAAAAAAAAAAAAAAAAWi1/9NsyeXZlaufGigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9jy+f9NkEbE+sgfgnmdfNU1ddCLhyf/8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfB7AAAA//8rlFqg") r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r2, &(0x7f0000001400)="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", 0x200) sendfile(r2, r3, 0x0, 0xe065) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000100)={0x1d, r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES64=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpgrp(0xffffffffffffffff) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 32.426627778s ago: executing program 5 (id=8591): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000480), &(0x7f0000000500)) r3 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x21, &(0x7f0000000000)=r3, 0x1) 32.396031728s ago: executing program 5 (id=8592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0xfe, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000980)=ANY=[@ANYBLOB="28009c29822a7e88440fd728f630a8fec69cbc4a28b15dccd09fa3c4a4f1746d840b7447545ba13f2abdceceef61d42b232d33ff9f9572269ecbd4e71b735a18cd9c85a905046ff60854", @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf251a00000c040022ffffffff41620000000500920009000000ec4dbc090000000000000091eb1a"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x800) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000124bd7000fcdbdf25820000000c009900008000003f000000"], 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x121000, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0xa) r4 = inotify_init1(0x800) inotify_add_watch(r4, 0x0, 0x4000010) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, &(0x7f00000002c0)={0x1, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) sync() openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffe000) r6 = getpgrp(0x0) capget(&(0x7f0000000440)={0x0, r6}, &(0x7f0000000540)={0x2, 0x80000000, 0x2d1b, 0x9, 0x1, 0x7}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x100000001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRES8=r3, @ANYRESHEX=r7, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000010001000000000000000000000000000000000000000000290e000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000e300"/240], 0x138}, 0x1, 0x0, 0x0, 0x20040045}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 32.356582068s ago: executing program 35 (id=8592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0xfe, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000980)=ANY=[@ANYBLOB="28009c29822a7e88440fd728f630a8fec69cbc4a28b15dccd09fa3c4a4f1746d840b7447545ba13f2abdceceef61d42b232d33ff9f9572269ecbd4e71b735a18cd9c85a905046ff60854", @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf251a00000c040022ffffffff41620000000500920009000000ec4dbc090000000000000091eb1a"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x800) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000124bd7000fcdbdf25820000000c009900008000003f000000"], 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x121000, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0xa) r4 = inotify_init1(0x800) inotify_add_watch(r4, 0x0, 0x4000010) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, &(0x7f00000002c0)={0x1, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) sync() openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffe000) r6 = getpgrp(0x0) capget(&(0x7f0000000440)={0x0, r6}, &(0x7f0000000540)={0x2, 0x80000000, 0x2d1b, 0x9, 0x1, 0x7}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x100000001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRES8=r3, @ANYRESHEX=r7, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000010001000000000000000000000000000000000000000000290e000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000e300"/240], 0x138}, 0x1, 0x0, 0x0, 0x20040045}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.949703856s ago: executing program 6 (id=9097): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b000005318a280016250f28760000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_context(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x202000, 0x0) mq_timedreceive(r6, &(0x7f0000000300)=""/222, 0xde, 0x5f, &(0x7f0000000280)) mq_open(&(0x7f0000000100)='\x00', 0x40, 0x20, &(0x7f0000000180)={0x59dd, 0x7fffffffffffffff, 0x4, 0x5}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001090000", @ANYRES32, @ANYBLOB="0000000000007400000000000000000000fe5b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000032db100000018", @ANYRES32, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000005c0)={0x0, @multicast1, @private}, &(0x7f0000000600)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 2.931727336s ago: executing program 6 (id=9098): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r1) 2.873661446s ago: executing program 6 (id=9099): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x3, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.513937808s ago: executing program 3 (id=9101): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) syz_usb_connect$cdc_ecm(0xa, 0x4d, &(0x7f0000001280)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.926572181s ago: executing program 3 (id=9110): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x4300, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x0, 0xd0}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.907593501s ago: executing program 6 (id=9112): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000200000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c5258735b467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1080084c46ea7e2b347a36f5662403e1b2be4284322a4908a0d41649872971c7c56f0979bd10b97163c066d0e1903002f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a1173ba09087f1beb5418618bc83a3becf9bb5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000209a028044ede964362cfb2f30a246c3b2f60000fc4ddd91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfab6b39baf879a14d4172f1d67c83795eae0d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c401d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef22b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc8679534f6b0505c7d728326d666f39e82cfcf7e7a85df288529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4dd60642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda649d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f58d419b3f4687bf0c06700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb65fda86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd25e778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086e76bfe3174e808abd82286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8ecc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace2f6396a2398d7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x3200010, &(0x7f0000000c00)=ANY=[], 0x3, 0x7b9, &(0x7f0000001d80)="$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") r4 = open$dir(&(0x7f0000000100)='./file1\x00', 0x0, 0x51) sendfile(0xffffffffffffffff, r4, 0x0, 0xe065) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000004200)=ANY=[@ANYBLOB="23875d960b4b07a77d3d70779267e79caa58d6defcf62af9d02c4f5ed63d52a801bdcece2c9f72bf60da61182262e61933eecd5d1a7242f2dc673d214e2689c4ad826e74160e2e66186536a836607795602040f85767fe440e5ccaa5551526f361114b409cc6ab71f70dd9ad536ee4372dedf0f04915a800d29781f4ed8757eae28fb18a83a924b813761216476984899ab23c980cacb087e9062f090cdeb9e6fb2efc9f7412fea1fa77b9f653cd3606dcdbc0f23daed7a68d7d82492855ad073925da11b8e1cb5315ff8ead27e587466a353df860646581bc6f2e4ee0ce6429071d432884b32c92d96347f6845ebb786daab2caa9b503c15d7c2fbb5178bf0d56421b3fd71c920e848dd3a12e42b5dae15eabca15a83ae9c3cf577f4d35006a36ddfa90d25fc624132956374516897032058742abf160355388567746bc535c1bcb7df61547d6160a68842d72964b24e56af86a5b1b8650957001009aef6522942b94120f55a58d8043ba769fed170d53c05c1887314ca6515234029bcd3585dd0eac9c621afe85c94a135fbc67c618edf5ed893852edb564e3daa62a5d9ac4ca6cdedc42e069740696e0186326fe9e5d9c353460c3b8adb7351d1713eec2b23edef5ef728972af501f43f310e25ba73df514ad4ef52ad79a7ef70620b8fb6e86e0d785b39219a91f88057229a8bcbef8cd66843f2829554b7bae737890c2ed985d033e8540e236b996cb6135816bca4a1296e27bde5978a93d5cf4d86dc18a05ff95137b438560d10328c85bbe3c31f16009849e858ceb8604363d3671832fda4d7a828657fe8ae2e7190d45669277edc5a8b5682259013dc33466d5a17c6fac430103b563c2048d06e89468818b0f7a6b0a9108394e75b9cfa191b3f19619ca228e89b7f9f1ac81b36a576481e66974aa6cc70fa50cdaed066b6286452c739b5c6a049867b9061a9b8c1006a1f3fae50a653644402577d0d03b362e891a60b0a9ddd1fb0c35afba90e37185f726f09f2fcf3f041a894446d213307b68cd3e36ef80975672ad3e4dad953e6fa4429621c278e331641a03af4e911250e38fb8ecf56cda963dca24cc04710240ae979fc8594f41ec5de670b43ce0f4b7e288a4ef24244ec347326f7738eb83d95fb42bbf42f8f577e0c542cfff510897c0e7434e34888d37ca17664ecdfabb9cf1eaf0da8d17243889185c0612a36a850474e9b908057fd1fb30de8e116463a88b7c5ecd570d16acf04c86d3e48635c968ecc2ec74fcdcf0ce5e629e1007e7a83d62c81f52653a7b172f4435d72ab113b8de0134f1a0810fe5bb17437134def9d16912de93c6c5201fb74e761c9b26006bc487257a1d758be9cea6bb8b47db2446966e210dc2640347b28702ef937e3ebb7c03fe4ccb315a02a0528f5a31d0984180ba342479b9e9432712222853c09c09690d03ff9fbbc49bd9219a9067f4384f81ed55212acd9e4eeb8159e91b84f10360d67ebe48c1ca5e0c378ff730f0d61389c69903d27244ee1eccee6f3e0b3cd4ce3b0c96c8ac88918ae4cbd5727bb1537edf11b5b8c7b6602063e1fc41734b5fdf824ddecb9d651bbfd2f2d274d8ebf0cebefb50eb815e2b73da1bea053dd16a15815e636a885931501e8afbade1f3069add22f6f99a627db9e467d54e3d592b6c3d169ad5eb9279a1122c4ee46f18a630cbc7dca609a369e6f9db78d70a8076411655df977b29e32345545eb003a78c7b3ef3300b25aed95f88765d1dfbcdba5f6190b096795ef4f4343a6d46f8ff2524f0ad6a14dad667dd8d59fbbdb715c5b51b169f291220a24942adae3959628f034e186835e4fbea13aaf2d5c6957e53af329732f325d9d4fea6123c5ba17b17f300054dfe4cdc54a3520aa328ab59a451bfb5199b28e4f22d6c7a84aeadaf7f6beffd847afa10a39539335ce7c25e400c6ad57e904f058185ec6752fe8221e3fea7dc9d1fb7fa4c8b740ed3c62bba7494bee31f9fafc8919aeb12066dde9c8696d5c35759e2691e74201edc0444a2da49e812ab84306579e308b26290ea2f431c47ca2dbe0e75aad5a824cfb96a748c90ead4cd5c7805d347750a3fdb8096fcd50f6d62f6436c7569f72adb937a6c934e68b3ef0cfcf40d3cfd987d44c5382f837eb4f6ea11918d39290c651e5ab0dd2659e24eec23c0927e20ff8edab7897fd793afdd644931d8f1c05f49d539c4261729c835ddc1ceca90ce3639b1eadb15c1d03f5996f66d8c5c0196a5bb995df81af24dd17f584f7ca733ad3b73c1ecda5e86e42ed2856c0c044f94cd444ab6188c6eef9d403e95e9c42fc99a511f11e02e618c004b2e9ef003ded683d6ef8582b97c65245fe91606841b6b3fc39d3e443a2ec2b591e39de75e895a5012aab36bc1a26c8b03e174f30340f59057b59821ba5b9eca733b9185ddc404f3d5dc490ec66a2595ca2429357cc87a99a8a55b424a8b3abf4ebba378ae635f0f7dadeaab7d3472d8eb5075bd94f3f3d7bc87800671715eac8a6f79aef2a4d3e6ba9df1a46c99198ae17c8b339f6578f0d53601e1a9ee3688588f8ca78b5998d7985a2dca962c7346598e2d541e461f104d7dc540650a59d35a8c9b2d52062b53347ea53b765280d6d2f4ea61c0966edd9ebabe82e9c75d61ac55bf2d0a002e6bf38986a2f575250d40f327b64fb1fece26a6dab967a4d725823b28a894b705902fcf73c112c5947f2524039c97151b322552067983bec963713c3db9598ebf93ea1d419004f0485dde76d5ca53d80d09fec1291e5abf27e6851385092d369ddc53b5f6a48b90d92e1a78bc167245170375f7bf47b5a208454dc570b5a98b9b41c4621af0012dabd96e174d3e63c16acdee1a338081418bcbbb556eeaddb2d0f71b5f61caef831ce2ddefe95db6a40664d1eae10eec36c7d898572761dbc435315b49c391cb7dbc92015d63d41c969974572e5602da048f6989c504964c4821b28ab91014a819fa66d04f9ad72bea8370186cad29ba2b486be86382238bccfc8d374e98e5dbcb1549846ce83e4e098f08227d095d35a4538a5771cb1977aefbd307ebcdf1e230d9b5e65006b977caf0b67a0be53591521e2b7692b15f9e2dbbd6cb824b216cd08f48bcc1b8e4ed07ca3355d7f7a016e81e1ae24b82da1ae8a55154b4dab68d4a5c67251bfd4a38f6d0eefc649624061890255db869bff449c8edf3fb7a79c41bc7672f63ccf4d014cb5fdf03a7551ec3e23dbd0cfeabc7be117c77a185f422edcd8ead2f48722ad24227adb3801b258d4e8f1e6e74c622bb98dc411af8a87812cc92fcc18ca42a565dddd7b78c0d1d053c0b4ea5d511377ca6162141dad4374cdc7bb9fe82988a3f1fde390bc0828507c584d54afd8c7cffd13e0e0a111ac2d3b52ae87396228903bdd1c4392f41d411546ed911137397e7e027624f489f8aa8ebac1884c6e95f96be4850cd2b32fc3c033441817e58bfa31d243420465c871128f02061f471f60d0a5991890434e8ca323c9e7beec3e51b72bdbcdb7aed163cf65e0e0a01d18c18b7ccf82e6e425b646fdfa34ec491013d8600be6f25a8ea9b98b54a605500d5107bee40f975fd388e7f38a36d1d25838fa8b67c2094ab456721c1b393d65283d5c7103da1c0e0b349d452a2323876a8c7af95dda4580cacffbb6808da84e60b39be0ed40162ae4b805719576d77352fc6972240f1a78d3bc8dfab229be339d2a149943055c25b15c21898d028e9604a5b373b3d9bd5af05a2e9a373bea7b3318263a228f018fe518aab4d810fd572e6bf35181a87cafabe90a455cb3ce53009315b3856b95222a3191175721c1b12328149490261e1d44bf7a2d483dc59a94343133691e2490087cf7d1054a2857f3ef29a42a8296ee000fe13b7a886b93ccc7424943ac638af9169c64dd0da24798087ecbeb7c52051723419562fa9073b5bf1f3010ca3a5b7fa08c60e48fbc0f32e91e746708b1ae1cec8d63bfa5c520a2d4dc3fd8e74c1ab936381040c356df03b28261bc518574d2a10b1f96e9f7d706c79b5abfa73c95f243c241820729a792fd427b10a4e7a26ca12e8877c23624749fb257626e746c6511d059db72046abf8e41dc136b649e449e250c6c7199a13328d82e4efbeb7fb3c53310711e784ca6fca5fa4bd219890101d1ca70f0db3ffc8449d0ccfa794e700fb9bf2faa04d1cacb0487d79318d896f8094cb74f5b4a651515f8354c2e366db117b781e8069d5a814822240a3fc0cd33cf96584ebc50e82fbc45e7bd86b43f1546cecc8bcfa5124ad9c87e38266c2587d16dfd297c4830f3ecf3d8be3f71c8d76695bd8ad01c7de7916272252ff2cc923f9e6703c6db60038eb78d075bf03ab000475b6e81f37269f0b80d80861d8e789c2900e0d07fa09f2f51f4a335ab2b19aef544832317eaef37a741b201cb3fabdf16e7975726f89aac267ab7f4cb3b4494b8cf49949e5d7f2b1a297ba938b2d72dfb8308e72ca80bff45b62f696fd2e1d35f3f9008f43dae123608848ca63faf8bc3ae296ce90042dd833a61fd0e311683673158642e3c65f67defd7734d0b0e0a7be8ddeda20bef54479d23b8da24b881865f35d55ff01888d9d1e2a71e908c5b4ef36c6349a580cb6ab1259a14d967f8a7b74595dacceb714dfe646d329d395aa3729aeed04837fe5f34036a509dc6af289fbedaaf6055888d19f6db74314304aed373157450bf2afa8096b5387fc46334d89f5bbaba99b7a93a23f55c002bfb8acfc7025ecac4a34454611b7f341aed7936a32868781f5b1ace46a84cde7cbf11ffe4f6d8d6fa1f58618c0d717bbc1cb3a693969a10170f133f2c6611a7b8b8445e846a476339aef3f16586526efaf76ebee9e7eaef2a7dbb974ba44c10ee016a3927671fcbc908d1ed351a8ef9f1e11dcac7c0ffe642cdfe28220469af6f9efb29677ce8cdeebd68dc6443e85eeb57d5eded48ad205dcb67a2f1c20d6859c4ee07f8e70888d846d7c5bd625ae3d3accc6d7bb90a364b8b173ccaaeab16ab2279a88285925f06bc3e4867b2ed3256f88a5d877cb99b4cbfd5f24cdbf148a7135667eb094fb4865dcdd9483d392548fa8686da00700598d14f04b067827c4f6abb7394e043da76dfaf66c0d8247146fac8069f6c2499948d117c8acd41070588da92a2eb696c651333c8fdc8712435126c9cdff174c0686c917d917eda03ab5a73c77d6ef6ad9ece9c1a8b2ca0c1b7f013b2e087eca163e1ac84777304db0b23f85f8f69888a0e8c726edcf6df55bfe345ed5c3f41ff03705a93ef005a2ac918c8a521fec99a826948a62ced3fbe34185e34ce05da57e908e6d4859d06bf8cd6eaeed519e0b92fa381971c51a4ff3ba8f48e10ed14b6ab0e4f6c5263920a7f974af5ca54c95d13dec57939d8efb1aa0253c20cb0b1f855849c15cba4bdeb4cc2d1583b297898ff944d09bb1700b9ca3d629c3d4af9584d503fa08056cdc57097fdf2ea23b600c10382649ec530ea64e711f1196fad2f5bc4ce03c3f3656dcbea7d52f56fb45c97f3b124e6eb6b07a62e28897d425bcef4e23d2aa47209b438d3e5efb2544223fb62ed2832c9fe9e76e0230313282990554808b01fd72ccccd32cfdac53f52a154a8461daff6a72fb8745aab87f7e1a7e5194ac90729c55c04c1d32ae435164c0e5bd1d691607c06378ccf6c3bbc0ed0a9a598651c3e94f8768876e29f05790406ecfa5c6ae7fbf1b6eb85d4d6c0091b36eb4acd3b586282f0a5d22bf520b8edbf7ceb8486d15d93eb8d5202b6ca3b0c1b0206e78da3784f509", @ANYRES32=r1, @ANYRESOCT=r6, @ANYBLOB="e716eb32c68f57ea89fd973556b742750bb443cdb32599d9f35c02391bd004ce88a3b577a8bb6dce5a36171df7fb2f715bf3b153e5f4a0797a94a17c40abe227646933e6b471fbc5e0a00da84d10c16acb43284018064cd7553b823d4cd51bc67bed9f9d1195d57a9aca2e68d505380603e0195e881917979e5fe539060b7cb037346564887fc6edfee818850a4e5ba28bd32cfce75517dd041517a25f2fb85ee6090ac5538a", @ANYRESOCT=r3, @ANYBLOB="312b0cea0e859d65467474ecbc88f5a8eb8456b7345c3d19f2525ed12eb4a91624cf569bbf46a018be8305d1339ebec0cde9fa486bbbeb3db8a0d35b6b135cc56463804cfaf0af11c6de60e00d824121b0c960392bd06d21cb2cb7557dd9752bebf5acff02259eaf54a679d9fb5363df92263c7f35702906ff4aec988344873c785496f46e9d8f73e7624d0dae10dbcb883170d9"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00'}, 0x10) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket(0x15, 0x5, 0x0) recvmsg$can_raw(r9, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000d40)={[{@mb_optimize_scan}, {@stripe={'stripe', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@norecovery}, {@debug}, {@data_journal}, {@nodelalloc}, {@acl}, {@nodioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000001540)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000b40)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000b80)=0x2c) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r11}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.855160331s ago: executing program 3 (id=9114): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)="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", 0x3ea}], 0x1}, 0x80) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001500)=ANY=[@ANYBLOB="44000000f008b7707c094db4a99572367c2f69d99bec47e9d7e56228c1a32282d9b229942bb82af18e5ad68394aa25e821661834313206ee2fba1c45f1f94b42efe784ddcc60f0bf09d3c2f70b9608c1b834fa9717c2d5cec2ad34a83a09ec92cd17ea6e32025e719e510991b0fbda0cdf674439a32cb792cf581d1b0169c3556a2d0982456c97ae", @ANYRES16=r0, @ANYBLOB="10002cbd7000fcdbdf25730000000c00990004000000160000000800ef00060000000500ee00030000000800ef00090000000800ef00050000000800ef00040000000800ef0002000000"], 0x50}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x9d, @dev}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x10000) sendmmsg(r2, &(0x7f0000000fc0)=[{}], 0x1, 0x48815) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r4, &(0x7f0000000300), 0x0}, 0x20) r5 = dup(r3) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000000000000000000095000000024ec8dc"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r7, &(0x7f00000001c0)={@val={0x2000, 0x88fb}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x600, 0x0, 0xcd, 0x0, @wg=@data={0x4, 0x9, 0xf59, "85b8e6665d890582126b83824ec5eabb03a01fcf153a3646ecf39707b92f780837084c4cc8a19acf27b70180327f6abf78820fc7874ee8774d5b70f2e9f184db67007ec1be931e3dc74d973d2e9f6f23571bebe1d1b1fbb3efc0e8ebf0e49c43d86afabb8d481fc31ddcb37cce1c21feb3af6ee3d9b411a3bfc800465412292f36d5f103e723d7c1903dfb50f380ddba1d723abb6c5b5d8c0682b2bcbdeeac1003e2a1a7c61321e3e7d2b82c3b9492b8533f316f98"}}}}}}}, 0xf3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.067320845s ago: executing program 8 (id=9132): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x20ec, 0x1}}, 0x40) 1.058905435s ago: executing program 8 (id=9134): syz_open_dev$usbmon(&(0x7f00000005c0), 0xf, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x10}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendto$unix(r3, &(0x7f0000000680)="364d15a81c5690ceb93bf2995688fdc175aeed13430a8cb17561969d917ef99a946deef5c3db421cda019ee30e6b7edd1a215c22bd6fe5ba81060a0dd7a36be9fc333ca7e037365775664e204ec4ee8e7b53612efee106360222f424a17ddb4e6f6344ece51a0a4dbed79e0dbf5a306871be2521fa73248d7b758e891d140a51ea7614fa74d51dc2bb0a31f6783d04a1d730aeabed4537a323ce0b65e0dc34cb143f707a08a5b364a23061f8d0ee1a8527920e73c541f504c9f85d59a5af561fd3e2a214747c9cf9a06b6dece57cc00b638190bf2606400929401045600eec6aad3a34c6514421c785a5b4ab570b30c3c1e7aeb1e3c7e42f809a", 0xfa, 0x48011, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r9) 1.035612185s ago: executing program 8 (id=9136): setgid(0x0) 1.011778835s ago: executing program 8 (id=9137): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x48) r0 = gettid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f0000000140)=""/192, 0x20000057) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0xfffffffffffffee3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000050c0)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x44, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f2, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fff, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40000001, 0x0, 0x8, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa369, 0x0, 0x8, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5f5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7e2, 0x0, 0x0, 0xd5, 0x7, 0x96e4, 0x0, 0x0, 0xa, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0xfffffffd, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x19, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x4, 0x0, 0x0, 0x1000, 0x0, 0xa6, 0x80, 0x0, 0x0, 0x800, 0xfffff0e7, 0xfffffffd, 0xfff, 0x0, 0x0, 0x0, 0x1ff]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x6, 0x0, 0x1, 0x4, {0x3, 0x0, 0x1, 0x2, 0x4, 0x4}, {0x5, 0x2, 0x80a0, 0x4, 0x6, 0x1}, 0x8, 0xc457, 0x40f4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x400d4) 1.011174195s ago: executing program 3 (id=9138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000480), &(0x7f0000000500)) eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x21, 0x0, 0x1) 977.432555ms ago: executing program 3 (id=9139): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000001008a4bfa1de06893429700000600000708000b4000000003000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200cc051) syz_io_uring_complete(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0xa5f, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) pause() r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x20c000, &(0x7f0000000600), 0x1, 0x584, &(0x7f0000009ec0)="$eJzs3U1vFVUcB+D/md6Wl4ItxkSRhU1IhERtacFojIkQcefCFxJXJta2EMIFGloTQYyQ4DfQD2Dizo1xSYwh6satOxM/gCESA924q5nbmXKBe0tfbhnsPE9y6Zw5nZwzvflxZs6dmRtAbY3k/2QReyNiNkUMtdU1oqgcWfq9O7cvTy3cvjyVYnHx/X9SpGJd+fup+DlYbLw9In7/OcWTfQ+2O3fx0pnJZnPmQlEemz87OzZ38dJLp89Onpo5NXNuYvyV8ZePHJ44cqgn+7k7In4dPd64dvLNfd9Pfbvnix+/u57iaOwq6tv3o1dGYmT5b9Iu/7u+2uvGKtJX7E/7W5waFXaINSnfv/6IeDqGoi/uvnlD8eW7lXYO2FSLKWIRqKkk/1BT5XFAfv5bvqo9IgEelVvHliYA7qSlub2F5fw3luYGY3trbmDnQor2aZ0UEb2YmcvbmH0+DeWv2KR5OKCzK1cj4plO439qZXO4NYuf5z+7J/9ZRLxT/MzXv7fO9kfuK8s/PDobyf9Hbfn/eJ3tyz8AAAAAAAD0zo1jEfFip8//suXrf6LD9T+DEXG0B+0//PO/7GYPmgE6uHUs4vWIKK/9W2jLf2G4ryjtbl0P0J9Onm7OHIqIJyLiYPRvy8vjK7Qxsu+3/q51bdf/5a+8/fJawKIfNxvb7t1menJ+ciP7DCy5dTXi2Uan/Kfl8T91GP/zsX92lW0sHn/jl251D88/sFkWv4k40HH8v/vkirTy8znGWscDY+VRwYM++/D6D93al3+oTj7+71w5/8Op/Xk9c2tv4/O//9xA/jsf/w+kE61HzgwU6z6dnJ+/MB4xkN5+cP3E2vsMW1GZhzIvef4P7u98/r/S8f+OiLiyyjZP/PTWtW51xn+oTp7/6TWN/2tf2P/B1/92a3914/+R1ph+sFhj/g9WttqAVt1PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg/yiJiV6RsdHk5y0ZHIwYj4qnYmTXPz82/cPL8J+em87rW9/9n5Tf9Di2VU/n9/8Nt5Yn7yocjYk9EfNW3o1UenTrfnK565wEAAAAAAAAAAAAAAAAAAOAxMdjl/v/cX31V9w7YdI2qOwBURv6hvuQf6kv+ob7kH+pL/qG+5B/qS/6hvuQf6kv+AQAAAABgS9nz3I0/UkRceW1H65UbKOr6K+0ZsNmOVt0BoDIe8QP15dIfqC/n+EB6SP32dW8JAAAAAAAAAAAAAPTKgb3u/4e6yqruAFCZ7vf/ezIAbHXu/4f6co4PuP8fAAAAAAAAAAAAAB5/cxcvnZlsNmcurHdh28Y2t2ChPguRepC4R7RQ9f9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA6b8AAAD//29y9rY=") creat(0x0, 0x0) creat(0x0, 0x0) 976.678105ms ago: executing program 8 (id=9140): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r2) 975.655206ms ago: executing program 6 (id=9141): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000001008a4bfa1de06893429700000600000708000b4000000003000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200cc051) syz_io_uring_complete(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0xa5f, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) pause() r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x20c000, &(0x7f0000000600), 0x1, 0x584, &(0x7f0000009ec0)="$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") creat(0x0, 0x0) creat(0x0, 0x0) 868.902986ms ago: executing program 7 (id=9146): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x800000000000000}, 0x18) statx(0xffffffffffffffff, &(0x7f0000003e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x40, 0x0) 799.533506ms ago: executing program 7 (id=9147): syz_open_dev$usbmon(&(0x7f00000005c0), 0xf, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x10}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendto$unix(r3, &(0x7f0000000680)="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", 0xfa, 0x48011, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r9) 774.250407ms ago: executing program 7 (id=9148): setgid(0x0) 743.467297ms ago: executing program 7 (id=9149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000007c0)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x600, 0x360, 0x11, 0x148, 0x0, 0x10, 0x568, 0x2a8, 0x2a8, 0x568, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {}, 0xa8}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x8, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x660) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) socket(0x10, 0x3, 0x9) socket(0x11, 0x800000003, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000480), &(0x7f0000000500)) r8 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x21, &(0x7f0000000000)=r8, 0x1) pipe2(&(0x7f0000000280), 0x4800) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2eaa00000000000071104300000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) 663.293607ms ago: executing program 7 (id=9150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000480), &(0x7f0000000500)) eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x21, 0x0, 0x1) 662.351937ms ago: executing program 7 (id=9151): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x48) r0 = gettid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f0000000140)=""/192, 0x20000057) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000050c0)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x44, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f2, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fff, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40000001, 0x0, 0x8, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa369, 0x0, 0x8, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5f5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7e2, 0x0, 0x0, 0xd5, 0x7, 0x96e4, 0x0, 0x0, 0xa, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0xfffffffd, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x19, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x4, 0x0, 0x0, 0x1000, 0x0, 0xa6, 0x80, 0x0, 0x0, 0x800, 0xfffff0e7, 0xfffffffd, 0xfff, 0x0, 0x0, 0x0, 0x1ff]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x6, 0x0, 0x1, 0x4, {0x3, 0x0, 0x1, 0x2, 0x4, 0x4}, {0x5, 0x2, 0x80a0, 0x4, 0x6, 0x1}, 0x8, 0xc457, 0x40f4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x400d4) 546.769248ms ago: executing program 4 (id=9154): futex_waitv(&(0x7f0000001440)=[{0x7, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x8, 0x0, 0xf5b45df725b889ba}, {0x9, 0x0, 0x82}, {0x7, 0x0, 0x2}, {0x1000, 0x0, 0x2}, {0x7fff, 0x0, 0x82}, {0x84, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x10001, 0x0, 0x82}, {0x200, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x6380000, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x100000001, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x9, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x3, 0x0}, {0xa544, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0x54bc, 0x0, 0x2}, {0xfffffffffffffffc, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x0, 0x0}, {0x2, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0xeb, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0x12, 0x0, 0x2}, {0x800, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0xffffffff, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0x6, 0x0, 0x2}, {0x9, 0x0, 0x82}, {0x10000, 0x0, 0x82}, {0xffffffff00000001, 0x0, 0x82}], 0x33, 0x0, 0x0, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @multicast, 'erspan0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="804001000000000008001b00"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$inet(r0, &(0x7f0000001580)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 545.712428ms ago: executing program 4 (id=9155): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r1) 545.167838ms ago: executing program 4 (id=9156): futex_waitv(&(0x7f0000001440)=[{0x7, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x8, 0x0, 0xf5b45df725b889ba}, {0x9, 0x0, 0x82}, {0x7, 0x0, 0x2}, {0x1000, 0x0, 0x2}, {0x7fff, 0x0, 0x82}, {0x84, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x10001, 0x0, 0x82}, {0x200, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x6380000, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x100000001, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x9, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x3, 0x0}, {0xa544, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0x54bc, 0x0, 0x2}, {0xfffffffffffffffc, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x0, 0x0}, {0x2, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0xeb, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0x12, 0x0, 0x2}, {0x800, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0xffffffff, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0x6, 0x0, 0x2}, {0x9, 0x0, 0x82}, {0x10000, 0x0, 0x82}, {0xffffffff00000001, 0x0, 0x82}], 0x33, 0x0, 0x0, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001580)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) (fail_nth: 5) 230.499289ms ago: executing program 4 (id=9157): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x20ec, 0x1}}, 0x40) 229.587569ms ago: executing program 4 (id=9158): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x800000000000000}, 0x18) statx(0xffffffffffffffff, &(0x7f0000003e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x40, 0x0) 173.61808ms ago: executing program 4 (id=9159): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000200), 0x20000000}, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r6, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x20000400) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x4000}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe27, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x735, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020"]) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r10, 0x0, 0x43, &(0x7f0000000900)={'IDLETIMER\x00'}, &(0x7f0000000940)=0x1e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000540)) 78.67372ms ago: executing program 3 (id=9160): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, @void, @value, @void, @value}, 0x50) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r2, @ANYBLOB="600000000040000008000300", @ANYRES32=r5], 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, @void, @value, @void, @value}, 0x50) (async) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r2, @ANYBLOB="600000000040000008000300", @ANYRES32=r5], 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) (async) 71.26827ms ago: executing program 8 (id=9161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r4 = socket$inet(0x2, 0x2, 0x400) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0x1, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x24d8, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x5, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESHEX=r6, @ANYRES32=r3, @ANYRESOCT=r6, @ANYRES16=r9, @ANYRES64=r1, @ANYRES8=r10, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9135}, 0x18) unshare(0x62040200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r13) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r15}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) 0s ago: executing program 6 (id=9162): futex_waitv(&(0x7f0000001440)=[{0x7, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x8, 0x0, 0xf5b45df725b889ba}, {0x9, 0x0, 0x82}, {0x7, 0x0, 0x2}, {0x1000, 0x0, 0x2}, {0x7fff, 0x0, 0x82}, {0x84, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x10001, 0x0, 0x82}, {0x200, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x6380000, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x100000001, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x9, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x3, 0x0}, {0xa544, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0x54bc, 0x0, 0x2}, {0xfffffffffffffffc, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x0, 0x0}, {0x2, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0xeb, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0x12, 0x0, 0x2}, {0x800, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0xffffffff, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0x6, 0x0, 0x2}, {0x9, 0x0, 0x82}, {0x10000, 0x0, 0x82}, {0xffffffff00000001, 0x0, 0x82}], 0x33, 0x0, 0x0, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001580)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x97}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) kernel console output (not intermixed with test programs): 2b:00007fa5c2206e38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 514.667718][T26185] RAX: ffffffffffffffda RBX: 0000000000000537 RCX: 00007fa5c3b90809 [ 514.675703][T26185] RDX: 00007fa5c2206f10 RSI: 0000000000000000 RDI: 00007fa5c3c041c1 [ 514.683751][T26185] RBP: 0000000020000f80 R08: 00007fa5c2206bd7 R09: 00007fa5c2206e60 [ 514.691770][T26185] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000000 [ 514.699781][T26185] R13: 00007fa5c2206f10 R14: 00007fa5c2206ed0 R15: 0000000020000240 [ 514.707800][T26185] [ 514.961447][T26202] vcan0 speed is unknown, defaulting to 1000 [ 515.001584][T26207] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8429'. [ 515.024245][T26209] FAULT_INJECTION: forcing a failure. [ 515.024245][T26209] name failslab, interval 1, probability 0, space 0, times 0 [ 515.036948][T26209] CPU: 1 UID: 0 PID: 26209 Comm: syz.6.8432 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 515.047416][T26209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 515.057565][T26209] Call Trace: [ 515.060863][T26209] [ 515.063877][T26209] dump_stack_lvl+0xf2/0x150 [ 515.068495][T26209] dump_stack+0x15/0x20 [ 515.072733][T26209] should_fail_ex+0x223/0x230 [ 515.077443][T26209] should_failslab+0x8f/0xb0 [ 515.082052][T26209] kmem_cache_alloc_node_noprof+0x59/0x320 [ 515.087960][T26209] ? __alloc_skb+0x10b/0x310 [ 515.092570][T26209] __alloc_skb+0x10b/0x310 [ 515.097071][T26209] netlink_alloc_large_skb+0xad/0xe0 [ 515.102569][T26209] netlink_sendmsg+0x3b4/0x6e0 [ 515.107386][T26209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.112863][T26209] __sock_sendmsg+0x140/0x180 [ 515.117662][T26209] ____sys_sendmsg+0x312/0x410 [ 515.122475][T26209] __sys_sendmsg+0x19d/0x230 [ 515.127112][T26209] __x64_sys_sendmsg+0x46/0x50 [ 515.131918][T26209] x64_sys_call+0x2734/0x2dc0 [ 515.136642][T26209] do_syscall_64+0xc9/0x1c0 [ 515.141231][T26209] ? clear_bhb_loop+0x55/0xb0 [ 515.145938][T26209] ? clear_bhb_loop+0x55/0xb0 [ 515.150640][T26209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.156647][T26209] RIP: 0033:0x7ff57c040809 [ 515.161094][T26209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.180748][T26209] RSP: 002b:00007ff57a6b7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.189201][T26209] RAX: ffffffffffffffda RBX: 00007ff57c205fa0 RCX: 00007ff57c040809 [ 515.197260][T26209] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 515.205262][T26209] RBP: 00007ff57a6b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 515.213331][T26209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.221388][T26209] R13: 0000000000000000 R14: 00007ff57c205fa0 R15: 00007ffc52887ab8 [ 515.229391][T26209] [ 515.441004][T26223] loop5: detected capacity change from 0 to 1024 [ 515.475755][T26226] syzkaller0: entered promiscuous mode [ 515.481402][T26226] syzkaller0: entered allmulticast mode [ 515.489854][T26223] __quota_error: 191 callbacks suppressed [ 515.489873][T26223] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 515.494055][ T29] audit: type=1326 audit(1732840073.277:55982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26214 comm="syz.5.8433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb27f690809 code=0x7ffc0000 [ 515.495651][T26223] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 515.519207][ T29] audit: type=1326 audit(1732840073.305:55983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26217 comm="syz.5.8433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb27f690809 code=0x7ffc0000 [ 515.528398][T26223] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.8433: Failed to acquire dquot type 0 [ 515.607305][T26223] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 515.627936][T26223] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm syz.5.8433: corrupted inode contents [ 515.642353][T26223] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #13: comm syz.5.8433: mark_inode_dirty error [ 515.654014][T26223] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm syz.5.8433: corrupted inode contents [ 515.658133][T26235] tmpfs: Bad value for 'mpol' [ 515.670929][T26223] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.8433: mark_inode_dirty error [ 515.682590][T26223] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm syz.5.8433: corrupted inode contents [ 515.696860][T26223] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 515.705693][T26223] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm syz.5.8433: corrupted inode contents [ 515.721661][T26223] EXT4-fs error (device loop5): ext4_truncate:4240: inode #13: comm syz.5.8433: mark_inode_dirty error [ 515.734629][T26223] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 515.745441][T26223] EXT4-fs (loop5): 1 truncate cleaned up [ 515.753594][T26223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.768515][T26241] siw: device registration error -23 [ 515.850749][ T29] audit: type=1326 audit(1732840073.614:55984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26248 comm="syz.4.8446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 515.874942][ T29] audit: type=1326 audit(1732840073.614:55985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26248 comm="syz.4.8446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 515.879528][T26252] netlink: 'syz.7.8447': attribute type 21 has an invalid length. [ 515.898613][ T29] audit: type=1326 audit(1732840073.614:55986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26248 comm="syz.4.8446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 515.906542][T26252] netlink: 128 bytes leftover after parsing attributes in process `syz.7.8447'. [ 515.930249][ T29] audit: type=1326 audit(1732840073.614:55987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26248 comm="syz.4.8446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 515.963118][ T29] audit: type=1326 audit(1732840073.614:55988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26248 comm="syz.4.8446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 515.986853][ T29] audit: type=1326 audit(1732840073.614:55989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26248 comm="syz.4.8446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 515.998805][T26252] netlink: 'syz.7.8447': attribute type 5 has an invalid length. [ 516.018208][T26252] netlink: 'syz.7.8447': attribute type 6 has an invalid length. [ 516.025956][T26252] netlink: 3 bytes leftover after parsing attributes in process `syz.7.8447'. [ 516.222485][T24043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.345441][T26275] siw: device registration error -23 [ 516.843265][T26294] loop7: detected capacity change from 0 to 1024 [ 516.850357][T26294] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 516.860198][T26294] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 516.871092][T26294] EXT4-fs error (device loop7): ext4_get_journal_inode:5809: inode #32: comm syz.7.8462: iget: special inode unallocated [ 516.885815][T26294] EXT4-fs (loop7): no journal found [ 516.891082][T26294] EXT4-fs (loop7): can't get journal size [ 516.909104][T26294] EXT4-fs error (device loop7): ext4_protect_reserved_inode:160: inode #32: comm syz.7.8462: iget: special inode unallocated [ 516.922325][T26294] EXT4-fs (loop7): failed to initialize system zone (-117) [ 516.931956][T26294] EXT4-fs (loop7): mount failed [ 517.092632][T26310] bpf_get_probe_write_proto: 2 callbacks suppressed [ 517.092654][T26310] syz.7.8469[26310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.101579][T26310] syz.7.8469[26310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.113267][T26310] syz.7.8469[26310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.129727][T26310] loop7: detected capacity change from 0 to 512 [ 517.156675][T26315] siw: device registration error -23 [ 517.165946][T26310] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.168565][T26315] loop5: detected capacity change from 0 to 512 [ 517.188137][T26310] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.202308][T26310] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 517.220211][T26310] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.8469: Failed to acquire dquot type 0 [ 517.243772][T26320] siw: device registration error -23 [ 517.297664][T26326] tmpfs: Bad value for 'mpol' [ 517.375429][T25859] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.601446][T26343] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8481'. [ 517.613088][T26343] loop7: detected capacity change from 0 to 164 [ 517.622077][T26343] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 517.641205][T26343] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 517.730904][T26345] siw: device registration error -23 [ 517.741095][T26345] loop6: detected capacity change from 0 to 512 [ 517.831101][T26349] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 517.996867][T26357] tmpfs: Bad value for 'mpol' [ 518.096220][T26368] loop7: detected capacity change from 0 to 1024 [ 518.131253][T26368] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.159759][T26382] EXT4-fs error (device loop7): ext4_xattr_inode_iget:440: inode #11: comm syz.7.8491: missing EA_INODE flag [ 518.173131][T26368] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 518.182814][T26368] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 518.192355][T26382] EXT4-fs (loop7): Remounting filesystem read-only [ 518.199115][T26368] SELinux: Context system_u:object_r:system_dbusd_var_run_t:s0 is not valid (left unmapped). [ 518.226488][T25859] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.312491][T26397] tmpfs: Bad value for 'mpol' [ 518.357045][T26406] siw: device registration error -23 [ 518.367373][ T1037] kernel write not supported for file /vcsa (pid: 1037 comm: kworker/1:2) [ 518.394982][T26410] bond1: entered promiscuous mode [ 518.400132][T26410] bond1: entered allmulticast mode [ 518.408360][T26410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 518.416690][T26414] siw: device registration error -23 [ 518.424273][T26410] bond1 (unregistering): Released all slaves [ 518.427476][T26414] loop6: detected capacity change from 0 to 512 [ 518.457203][T26417] tipc: Enabling of bearer rejected, failed to enable media [ 518.978382][T26453] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.987293][T26453] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.996275][T26453] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.005145][T26453] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.037425][T26453] vxlan0: entered promiscuous mode [ 519.042684][T26453] vxlan0: entered allmulticast mode [ 519.049062][T26453] bridge0: port 3(vxlan0) entered blocking state [ 519.055954][T26453] bridge0: port 3(vxlan0) entered disabled state [ 519.075998][T26459] tipc: Enabling of bearer rejected, failed to enable media [ 519.572871][T26479] FAULT_INJECTION: forcing a failure. [ 519.572871][T26479] name failslab, interval 1, probability 0, space 0, times 0 [ 519.585595][T26479] CPU: 0 UID: 0 PID: 26479 Comm: syz.3.8536 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 519.596065][T26479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 519.606206][T26479] Call Trace: [ 519.609540][T26479] [ 519.612559][T26479] dump_stack_lvl+0xf2/0x150 [ 519.617191][T26479] dump_stack+0x15/0x20 [ 519.621386][T26479] should_fail_ex+0x223/0x230 [ 519.626138][T26479] ? bpf_uprobe_multi_link_attach+0x2c0/0x850 [ 519.632276][T26479] should_failslab+0x8f/0xb0 [ 519.636953][T26479] __kmalloc_cache_noprof+0x4e/0x320 [ 519.642287][T26479] bpf_uprobe_multi_link_attach+0x2c0/0x850 [ 519.648230][T26479] link_create+0x627/0x660 [ 519.652717][T26479] __sys_bpf+0x430/0x7a0 [ 519.657144][T26479] __x64_sys_bpf+0x43/0x50 [ 519.661762][T26479] x64_sys_call+0x2914/0x2dc0 [ 519.666474][T26479] do_syscall_64+0xc9/0x1c0 [ 519.671054][T26479] ? clear_bhb_loop+0x55/0xb0 [ 519.675751][T26479] ? clear_bhb_loop+0x55/0xb0 [ 519.680457][T26479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.686391][T26479] RIP: 0033:0x7f6b00bd0809 [ 519.690823][T26479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.710549][T26479] RSP: 002b:00007f6aff247058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 519.719027][T26479] RAX: ffffffffffffffda RBX: 00007f6b00d95fa0 RCX: 00007f6b00bd0809 [ 519.727006][T26479] RDX: 0000000000000040 RSI: 00000000200012c0 RDI: 000000000000001c [ 519.735010][T26479] RBP: 00007f6aff2470a0 R08: 0000000000000000 R09: 0000000000000000 [ 519.743030][T26479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.751010][T26479] R13: 0000000000000000 R14: 00007f6b00d95fa0 R15: 00007ffc73b6ed38 [ 519.759030][T26479] [ 520.541389][T26517] SELinux: policydb version 985043565 does not match my version range 15-33 [ 520.553157][T26517] SELinux: failed to load policy [ 521.009528][T26526] FAULT_INJECTION: forcing a failure. [ 521.009528][T26526] name failslab, interval 1, probability 0, space 0, times 0 [ 521.022860][T26526] CPU: 0 UID: 0 PID: 26526 Comm: syz.3.8553 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 521.033313][T26526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 521.043405][T26526] Call Trace: [ 521.046704][T26526] [ 521.049704][T26526] dump_stack_lvl+0xf2/0x150 [ 521.054331][T26526] dump_stack+0x15/0x20 [ 521.058519][T26526] should_fail_ex+0x223/0x230 [ 521.063245][T26526] should_failslab+0x8f/0xb0 [ 521.067961][T26526] kmem_cache_alloc_node_noprof+0x59/0x320 [ 521.073865][T26526] ? __alloc_skb+0x10b/0x310 [ 521.078475][T26526] __alloc_skb+0x10b/0x310 [ 521.082959][T26526] netlink_alloc_large_skb+0xad/0xe0 [ 521.088299][T26526] netlink_sendmsg+0x3b4/0x6e0 [ 521.093233][T26526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.098653][T26526] __sock_sendmsg+0x140/0x180 [ 521.103367][T26526] ____sys_sendmsg+0x312/0x410 [ 521.108160][T26526] __sys_sendmsg+0x19d/0x230 [ 521.112776][T26526] __x64_sys_sendmsg+0x46/0x50 [ 521.117578][T26526] x64_sys_call+0x2734/0x2dc0 [ 521.122291][T26526] do_syscall_64+0xc9/0x1c0 [ 521.126868][T26526] ? clear_bhb_loop+0x55/0xb0 [ 521.131559][T26526] ? clear_bhb_loop+0x55/0xb0 [ 521.136271][T26526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.142188][T26526] RIP: 0033:0x7f6b00bd0809 [ 521.146612][T26526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.166605][T26526] RSP: 002b:00007f6aff247058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.175155][T26526] RAX: ffffffffffffffda RBX: 00007f6b00d95fa0 RCX: 00007f6b00bd0809 [ 521.183222][T26526] RDX: 000000002000c800 RSI: 0000000020000380 RDI: 0000000000000004 [ 521.191199][T26526] RBP: 00007f6aff2470a0 R08: 0000000000000000 R09: 0000000000000000 [ 521.199439][T26526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.207440][T26526] R13: 0000000000000000 R14: 00007f6b00d95fa0 R15: 00007ffc73b6ed38 [ 521.215440][T26526] [ 521.299879][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 521.299895][ T29] audit: type=1326 audit(1732840078.721:56307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26543 comm="syz.4.8560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 521.325731][T26544] SELinux: policydb version 1774941744 does not match my version range 15-33 [ 521.364499][ T29] audit: type=1400 audit(1732840078.721:56308): avc: denied { create } for pid=26542 comm="syz.5.8561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 521.384155][ T29] audit: type=1326 audit(1732840078.749:56309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26543 comm="syz.4.8560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 521.407807][ T29] audit: type=1326 audit(1732840078.749:56310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26543 comm="syz.4.8560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 521.431829][ T29] audit: type=1326 audit(1732840078.749:56311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26543 comm="syz.4.8560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 521.455578][ T29] audit: type=1326 audit(1732840078.749:56312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26543 comm="syz.4.8560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 521.479365][ T29] audit: type=1326 audit(1732840078.749:56313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26543 comm="syz.4.8560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 521.503003][ T29] audit: type=1326 audit(1732840078.749:56314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26543 comm="syz.4.8560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 521.528764][ T29] audit: type=1326 audit(1732840078.749:56315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26543 comm="syz.4.8560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 521.534422][T26544] SELinux: failed to load policy [ 521.586291][T26556] siw: device registration error -23 [ 521.656505][T26562] loop5: detected capacity change from 0 to 1024 [ 521.668458][ T29] audit: type=1326 audit(1732840079.058:56316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26559 comm="syz.4.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 521.716392][T26562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.938910][T24043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.977581][T26569] FAULT_INJECTION: forcing a failure. [ 521.977581][T26569] name failslab, interval 1, probability 0, space 0, times 0 [ 521.990356][T26569] CPU: 0 UID: 0 PID: 26569 Comm: syz.5.8568 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 522.000824][T26569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 522.010909][T26569] Call Trace: [ 522.014199][T26569] [ 522.017139][T26569] dump_stack_lvl+0xf2/0x150 [ 522.021779][T26569] dump_stack+0x15/0x20 [ 522.025975][T26569] should_fail_ex+0x223/0x230 [ 522.030755][T26569] should_failslab+0x8f/0xb0 [ 522.035391][T26569] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 522.041786][T26569] ? netlink_realloc_groups+0xd5/0x180 [ 522.047342][T26569] krealloc_noprof+0xb6/0x2a0 [ 522.052085][T26569] netlink_realloc_groups+0xd5/0x180 [ 522.057405][T26569] netlink_bind+0x154/0x8c0 [ 522.062024][T26569] __sys_bind+0x10c/0x190 [ 522.066462][T26569] __x64_sys_bind+0x41/0x50 [ 522.071068][T26569] x64_sys_call+0x20ab/0x2dc0 [ 522.075780][T26569] do_syscall_64+0xc9/0x1c0 [ 522.080339][T26569] ? clear_bhb_loop+0x55/0xb0 [ 522.085163][T26569] ? clear_bhb_loop+0x55/0xb0 [ 522.089920][T26569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.095959][T26569] RIP: 0033:0x7fb27f690809 [ 522.100431][T26569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.120072][T26569] RSP: 002b:00007fb27dd07058 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 522.128560][T26569] RAX: ffffffffffffffda RBX: 00007fb27f855fa0 RCX: 00007fb27f690809 [ 522.136540][T26569] RDX: 000000000000000c RSI: 0000000020514ff4 RDI: 0000000000000006 [ 522.144517][T26569] RBP: 00007fb27dd070a0 R08: 0000000000000000 R09: 0000000000000000 [ 522.152528][T26569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.160568][T26569] R13: 0000000000000000 R14: 00007fb27f855fa0 R15: 00007ffd6cd4a738 [ 522.168659][T26569] [ 522.302172][T26583] tmpfs: Bad value for 'mpol' [ 522.488446][T26596] tipc: Enabling of bearer rejected, failed to enable media [ 522.594067][T26603] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8580'. [ 522.610651][T26603] loop5: detected capacity change from 0 to 512 [ 522.652143][T26610] SELinux: Context system_u:object_r:crond_initrc_exec_t:s0 is not valid (left unmapped). [ 522.694838][T26617] loop5: detected capacity change from 0 to 256 [ 522.781731][T26622] loop7: detected capacity change from 0 to 8192 [ 522.807007][T26622] loop7: p2 p3 p4 [ 522.810931][T26622] loop7: p2 start 14935 is beyond EOD, truncated [ 522.817398][T26622] loop7: p3 size 196608 extends beyond EOD, truncated [ 522.824839][T26622] loop7: p4 start 4026530307 is beyond EOD, truncated [ 522.899043][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.957390][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.041287][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.059124][T26646] siw: device registration error -23 [ 523.096108][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.144098][T26657] loop6: detected capacity change from 0 to 512 [ 523.156879][T26636] vcan0 speed is unknown, defaulting to 1000 [ 523.167208][T26657] EXT4-fs: Ignoring removed mblk_io_submit option [ 523.178130][T26659] FAULT_INJECTION: forcing a failure. [ 523.178130][T26659] name failslab, interval 1, probability 0, space 0, times 0 [ 523.190916][T26659] CPU: 1 UID: 0 PID: 26659 Comm: syz.3.8604 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 523.201434][T26659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 523.211582][T26659] Call Trace: [ 523.214915][T26659] [ 523.217874][T26659] dump_stack_lvl+0xf2/0x150 [ 523.222527][T26659] dump_stack+0x15/0x20 [ 523.226700][T26659] should_fail_ex+0x223/0x230 [ 523.231465][T26659] ? nf_tables_newtable+0x3a1/0xf20 [ 523.236700][T26659] should_failslab+0x8f/0xb0 [ 523.241311][T26659] __kmalloc_cache_noprof+0x4e/0x320 [ 523.246657][T26659] nf_tables_newtable+0x3a1/0xf20 [ 523.251706][T26659] nfnetlink_rcv+0xb3e/0x15d0 [ 523.256481][T26659] netlink_unicast+0x599/0x670 [ 523.261319][T26659] netlink_sendmsg+0x5cc/0x6e0 [ 523.266131][T26659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.271517][T26659] __sock_sendmsg+0x140/0x180 [ 523.276335][T26659] ____sys_sendmsg+0x312/0x410 [ 523.281123][T26659] __sys_sendmsg+0x19d/0x230 [ 523.285793][T26659] __x64_sys_sendmsg+0x46/0x50 [ 523.290599][T26659] x64_sys_call+0x2734/0x2dc0 [ 523.295294][T26659] do_syscall_64+0xc9/0x1c0 [ 523.299810][T26659] ? clear_bhb_loop+0x55/0xb0 [ 523.304500][T26659] ? clear_bhb_loop+0x55/0xb0 [ 523.309190][T26659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.315121][T26659] RIP: 0033:0x7f6b00bd0809 [ 523.319610][T26659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.339322][T26659] RSP: 002b:00007f6aff247058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.347748][T26659] RAX: ffffffffffffffda RBX: 00007f6b00d95fa0 RCX: 00007f6b00bd0809 [ 523.355874][T26659] RDX: 0000000020050800 RSI: 00000000200000c0 RDI: 0000000000000003 [ 523.363889][T26659] RBP: 00007f6aff2470a0 R08: 0000000000000000 R09: 0000000000000000 [ 523.371957][T26659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.380098][T26659] R13: 0000000000000000 R14: 00007f6b00d95fa0 R15: 00007ffc73b6ed38 [ 523.388111][T26659] [ 523.395883][T26657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 523.404581][T26657] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 523.418550][ T50] bridge0: port 3(vxlan0) entered disabled state [ 523.426830][ T50] bridge_slave_1: left allmulticast mode [ 523.432612][ T50] bridge_slave_1: left promiscuous mode [ 523.438417][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.457088][T26657] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 523.465705][T26657] EXT4-fs (loop6): orphan cleanup on readonly fs [ 523.472448][ T50] bridge_slave_0: left allmulticast mode [ 523.472711][T26657] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.8596: Invalid block bitmap block 0 in block_group 0 [ 523.478167][ T50] bridge_slave_0: left promiscuous mode [ 523.478312][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.507580][T26657] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.8596: Invalid block bitmap block 0 in block_group 0 [ 523.529576][T26657] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.8596: Invalid block bitmap block 0 in block_group 0 [ 523.543426][T26657] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.8596: Failed to acquire dquot type 1 [ 523.555716][T26657] EXT4-fs (loop6): 1 orphan inode deleted [ 523.561638][ T371] EXT4-fs error (device loop6): ext4_release_dquot:6961: comm kworker/u8:5: Failed to release dquot type 1 [ 523.581076][T26657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 523.603724][T26675] FAULT_INJECTION: forcing a failure. [ 523.603724][T26675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.616896][T26675] CPU: 0 UID: 0 PID: 26675 Comm: syz.4.8609 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 523.627433][T26675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 523.637523][T26675] Call Trace: [ 523.640830][T26675] [ 523.643804][T26675] dump_stack_lvl+0xf2/0x150 [ 523.648428][T26675] dump_stack+0x15/0x20 [ 523.652777][T26675] should_fail_ex+0x223/0x230 [ 523.657533][T26675] should_fail+0xb/0x10 [ 523.661731][T26675] should_fail_usercopy+0x1a/0x20 [ 523.666787][T26675] _copy_to_user+0x20/0xa0 [ 523.671264][T26675] simple_read_from_buffer+0xa0/0x110 [ 523.676696][T26675] proc_fail_nth_read+0xf9/0x140 [ 523.681676][T26675] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 523.687344][T26675] vfs_read+0x1a2/0x700 [ 523.691521][T26675] ? __rcu_read_unlock+0x4e/0x70 [ 523.696471][T26675] ? __fget_files+0x17c/0x1c0 [ 523.701293][T26675] ksys_read+0xe8/0x1b0 [ 523.705471][T26675] __x64_sys_read+0x42/0x50 [ 523.710081][T26675] x64_sys_call+0x2874/0x2dc0 [ 523.714782][T26675] do_syscall_64+0xc9/0x1c0 [ 523.719295][T26675] ? clear_bhb_loop+0x55/0xb0 [ 523.724006][T26675] ? clear_bhb_loop+0x55/0xb0 [ 523.728690][T26675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.734677][T26675] RIP: 0033:0x7fa5c3b8f21c [ 523.739113][T26675] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 523.758734][T26675] RSP: 002b:00007fa5c2207050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 523.767212][T26675] RAX: ffffffffffffffda RBX: 00007fa5c3d55fa0 RCX: 00007fa5c3b8f21c [ 523.775196][T26675] RDX: 000000000000000f RSI: 00007fa5c22070b0 RDI: 0000000000000007 [ 523.783259][T26675] RBP: 00007fa5c22070a0 R08: 0000000000000000 R09: 0000000000000000 [ 523.791237][T26675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.799237][T26675] R13: 0000000000000000 R14: 00007fa5c3d55fa0 R15: 00007fff38242668 [ 523.807228][T26675] [ 523.863765][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.874136][T26680] RDS: rds_bind could not find a transport for 200:0:e000:1::, load rds_tcp or rds_rdma? [ 523.889795][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.909540][ T50] bond0 (unregistering): Released all slaves [ 523.935856][T24145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.955049][T26680] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 523.972132][T26688] netlink: 248 bytes leftover after parsing attributes in process `syz.6.8613'. [ 523.981785][T26679] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 523.993138][T26686] FAULT_INJECTION: forcing a failure. [ 523.993138][T26686] name failslab, interval 1, probability 0, space 0, times 0 [ 524.002528][T26688] loop6: detected capacity change from 0 to 2048 [ 524.005920][T26686] CPU: 1 UID: 0 PID: 26686 Comm: syz.3.8614 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 524.014645][T26688] ext4: Unknown parameter 'euid>00000000000000000000' [ 524.022615][T26686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 524.022635][T26686] Call Trace: [ 524.042815][T26686] [ 524.045771][T26686] dump_stack_lvl+0xf2/0x150 [ 524.050476][T26686] dump_stack+0x15/0x20 [ 524.054664][T26686] should_fail_ex+0x223/0x230 [ 524.059418][T26686] should_failslab+0x8f/0xb0 [ 524.064073][T26686] __kmalloc_node_noprof+0xad/0x410 [ 524.069398][T26686] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 524.075809][T26686] ? __kvmalloc_node_noprof+0x72/0x170 [ 524.081330][T26686] __kvmalloc_node_noprof+0x72/0x170 [ 524.086716][T26686] bpf_test_run_xdp_live+0xf7/0x1040 [ 524.092085][T26686] ? __pfx_autoremove_wake_function+0x10/0x10 [ 524.098269][T26686] ? 0xffffffffa00038c0 [ 524.102462][T26686] ? synchronize_rcu+0x46/0x320 [ 524.107435][T26686] ? 0xffffffffa00038c0 [ 524.111609][T26686] ? bpf_dispatcher_change_prog+0x747/0x840 [ 524.117612][T26686] ? 0xffffffffa00038c0 [ 524.121798][T26686] ? 0xffffffffa0000894 [ 524.126045][T26686] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 524.131989][T26686] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 524.137322][T26686] ? __rcu_read_unlock+0x4e/0x70 [ 524.142295][T26686] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 524.148152][T26686] bpf_prog_test_run+0x20f/0x3a0 [ 524.153197][T26686] __sys_bpf+0x400/0x7a0 [ 524.157528][T26686] __x64_sys_bpf+0x43/0x50 [ 524.161983][T26686] x64_sys_call+0x2914/0x2dc0 [ 524.166702][T26686] do_syscall_64+0xc9/0x1c0 [ 524.171273][T26686] ? clear_bhb_loop+0x55/0xb0 [ 524.175978][T26686] ? clear_bhb_loop+0x55/0xb0 [ 524.180686][T26686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.186693][T26686] RIP: 0033:0x7f6b00bd0809 [ 524.191137][T26686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.210801][T26686] RSP: 002b:00007f6aff247058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 524.219249][T26686] RAX: ffffffffffffffda RBX: 00007f6b00d95fa0 RCX: 00007f6b00bd0809 [ 524.227325][T26686] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 524.235373][T26686] RBP: 00007f6aff2470a0 R08: 0000000000000000 R09: 0000000000000000 [ 524.243400][T26686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.251450][T26686] R13: 0000000000000000 R14: 00007f6b00d95fa0 R15: 00007ffc73b6ed38 [ 524.259499][T26686] [ 524.271767][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.279822][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.304938][T26692] loop7: detected capacity change from 0 to 256 [ 524.350097][T26692] FAT-fs (loop7): Directory bread(block 64) failed [ 524.365619][T26692] FAT-fs (loop7): Directory bread(block 65) failed [ 524.372662][T26692] FAT-fs (loop7): Directory bread(block 66) failed [ 524.382174][T26692] FAT-fs (loop7): Directory bread(block 67) failed [ 524.389076][T26692] FAT-fs (loop7): Directory bread(block 68) failed [ 524.395644][T26692] FAT-fs (loop7): Directory bread(block 69) failed [ 524.404388][T26692] FAT-fs (loop7): Directory bread(block 70) failed [ 524.411145][T26692] FAT-fs (loop7): Directory bread(block 71) failed [ 524.417786][T26692] FAT-fs (loop7): Directory bread(block 72) failed [ 524.418109][ T50] team0 (unregistering): Port device team_slave_1 removed [ 524.426304][T26692] FAT-fs (loop7): Directory bread(block 73) failed [ 524.445359][ T50] team0 (unregistering): Port device team_slave_0 removed [ 524.569779][T26707] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8623'. [ 524.581689][T26700] vcan0 speed is unknown, defaulting to 1000 [ 524.615113][T26636] chnl_net:caif_netlink_parms(): no params data found [ 524.623564][T26708] warn_alloc: 1 callbacks suppressed [ 524.623579][T26708] syz.4.8622: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 524.629319][T26702] vcan0 speed is unknown, defaulting to 1000 [ 524.643649][T26708] CPU: 0 UID: 0 PID: 26708 Comm: syz.4.8622 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 524.660117][T26708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 524.670304][T26708] Call Trace: [ 524.673603][T26708] [ 524.676607][T26708] dump_stack_lvl+0xf2/0x150 [ 524.681287][T26708] dump_stack+0x15/0x20 [ 524.685478][T26708] warn_alloc+0x145/0x1b0 [ 524.689956][T26708] ? __schedule+0x6fa/0x930 [ 524.694500][T26708] ? __vmalloc_node_range_noprof+0x88/0xe80 [ 524.700602][T26708] __vmalloc_node_range_noprof+0xaa/0xe80 [ 524.706372][T26708] ? __pfx_futex_wake_mark+0x10/0x10 [ 524.711845][T26708] ? __rcu_read_unlock+0x4e/0x70 [ 524.716834][T26708] ? avc_has_perm_noaudit+0x1cc/0x210 [ 524.722269][T26708] ? should_fail_ex+0x31/0x230 [ 524.727169][T26708] ? xskq_create+0x36/0xd0 [ 524.731624][T26708] ? should_failslab+0x8f/0xb0 [ 524.732764][T26706] siw: device registration error -23 [ 524.736402][T26708] vmalloc_user_noprof+0x59/0x70 [ 524.736465][T26708] ? xskq_create+0x79/0xd0 [ 524.736490][T26708] xskq_create+0x79/0xd0 [ 524.755391][T26708] xsk_init_queue+0x82/0xd0 [ 524.755422][T26708] xsk_setsockopt+0x409/0x520 [ 524.755514][T26708] ? __pfx_xsk_setsockopt+0x10/0x10 [ 524.755543][T26708] __sys_setsockopt+0x187/0x200 [ 524.755572][T26708] __x64_sys_setsockopt+0x66/0x80 [ 524.755618][T26708] x64_sys_call+0x282e/0x2dc0 [ 524.755652][T26708] do_syscall_64+0xc9/0x1c0 [ 524.755677][T26708] ? clear_bhb_loop+0x55/0xb0 [ 524.755701][T26708] ? clear_bhb_loop+0x55/0xb0 [ 524.755757][T26708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.755794][T26708] RIP: 0033:0x7fa5c3b90809 [ 524.755814][T26708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.755838][T26708] RSP: 002b:00007fa5c21e6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 524.755878][T26708] RAX: ffffffffffffffda RBX: 00007fa5c3d56080 RCX: 00007fa5c3b90809 [ 524.755896][T26708] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000d [ 524.755911][T26708] RBP: 00007fa5c3c0393e R08: 0000000000000020 R09: 0000000000000000 [ 524.755924][T26708] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 524.756044][T26708] R13: 0000000000000000 R14: 00007fa5c3d56080 R15: 00007fff38242668 [ 524.756067][T26708] [ 524.756238][T26708] Mem-Info: [ 524.756247][T26708] active_anon:6582 inactive_anon:1 isolated_anon:0 [ 524.756247][T26708] active_file:4465 inactive_file:3116 isolated_file:0 [ 524.756247][T26708] unevictable:11 dirty:120 writeback:0 [ 524.756247][T26708] slab_reclaimable:3076 slab_unreclaimable:26496 [ 524.756247][T26708] mapped:28395 shmem:295 pagetables:753 [ 524.756247][T26708] sec_pagetables:0 bounce:0 [ 524.756247][T26708] kernel_misc_reclaimable:0 [ 524.756247][T26708] free:1846540 free_pcp:49737 free_cma:0 [ 524.756319][T26708] Node 0 active_anon:26328kB inactive_anon:4kB active_file:17860kB inactive_file:12464kB unevictable:44kB isolated(anon):0kB isolated(file):0kB mapped:113580kB dirty:480kB writeback:0kB shmem:1180kB writeback_tmp:0kB kernel_stack:3168kB pagetables:3012kB sec_pagetables:0kB all_unreclaimable? no [ 524.756372][T26708] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 524.756511][T26708] lowmem_reserve[]: 0 2866 7844 0 [ 524.756544][T26708] Node 0 DMA32 free:2950308kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953940kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 524.756619][T26708] lowmem_reserve[]: 0 0 4978 0 [ 524.756643][T26708] Node 0 Normal free:4420492kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:26328kB inactive_anon:4kB active_file:17860kB inactive_file:12464kB unevictable:44kB writepending:480kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:195312kB local_pcp:74948kB free_cma:0kB [ 524.756779][T26708] lowmem_reserve[]: 0 0 0 0 [ 524.756808][T26708] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 524.757030][T26708] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 1*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950308kB [ 524.757191][T26708] Node 0 Normal: 1219*4kB (UM) 2156*8kB (UME) 1077*16kB (UME) 959*32kB (UME) 738*64kB (UME) 1042*128kB (UME) 994*256kB (UME) 1155*512kB (UME) 1022*1024kB (UME) 122*2048kB (UME) 495*4096kB (UM) = 4420380kB [ 524.757437][T26708] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 524.757528][T26708] 7901 total pagecache pages [ 524.757537][T26708] 12 pages in swap cache [ 524.757545][T26708] Free swap = 124152kB [ 524.757554][T26708] Total swap = 124996kB [ 524.757562][T26708] 2097051 pages RAM [ 524.757570][T26708] 0 pages HighMem/MovableOnly [ 524.757628][T26708] 80174 pages reserved [ 524.774398][T26706] loop7: detected capacity change from 0 to 512 [ 524.800779][T26710] netlink: 140 bytes leftover after parsing attributes in process `syz.6.8619'. [ 524.803469][T26717] tmpfs: Bad value for 'mpol' [ 524.854110][T26723] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8622'. [ 525.234316][T26636] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.241554][T26636] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.249035][T26636] bridge_slave_0: entered allmulticast mode [ 525.256257][T26636] bridge_slave_0: entered promiscuous mode [ 525.263394][T26636] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.270573][T26636] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.278088][T26636] bridge_slave_1: entered allmulticast mode [ 525.293993][T26636] bridge_slave_1: entered promiscuous mode [ 525.312807][T26738] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8633'. [ 525.362924][T26636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.375608][T26636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.385207][T26748] 9pnet_fd: Insufficient options for proto=fd [ 525.407549][T26636] team0: Port device team_slave_0 added [ 525.432727][T26636] team0: Port device team_slave_1 added [ 525.460995][T26757] siw: device registration error -23 [ 525.507019][T26761] loop6: detected capacity change from 0 to 164 [ 525.545581][T26761] bio_check_eod: 28201 callbacks suppressed [ 525.545596][T26761] syz.6.8644: attempt to access beyond end of device [ 525.545596][T26761] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 525.567468][T26761] syz.6.8644: attempt to access beyond end of device [ 525.567468][T26761] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 525.581944][T26761] syz.6.8644: attempt to access beyond end of device [ 525.581944][T26761] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 525.598149][T26761] syz.6.8644: attempt to access beyond end of device [ 525.598149][T26761] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 525.614011][T26761] syz.6.8644: attempt to access beyond end of device [ 525.614011][T26761] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 525.629646][T26761] syz.6.8644: attempt to access beyond end of device [ 525.629646][T26761] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 525.644330][T26761] syz.6.8644: attempt to access beyond end of device [ 525.644330][T26761] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 525.658878][T26761] syz.6.8644: attempt to access beyond end of device [ 525.658878][T26761] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 525.674445][T26761] syz.6.8644: attempt to access beyond end of device [ 525.674445][T26761] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 525.688174][T26761] syz.6.8644: attempt to access beyond end of device [ 525.688174][T26761] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 525.751588][T26763] FAULT_INJECTION: forcing a failure. [ 525.751588][T26763] name failslab, interval 1, probability 0, space 0, times 0 [ 525.758641][T26765] loop7: detected capacity change from 0 to 164 [ 525.764267][T26763] CPU: 0 UID: 0 PID: 26763 Comm: syz.4.8645 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 525.780958][T26763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 525.791035][T26763] Call Trace: [ 525.794325][T26763] [ 525.797263][T26763] dump_stack_lvl+0xf2/0x150 [ 525.801913][T26763] dump_stack+0x15/0x20 [ 525.806160][T26763] should_fail_ex+0x223/0x230 [ 525.810868][T26763] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 525.816764][T26763] should_failslab+0x8f/0xb0 [ 525.821417][T26763] __kmalloc_node_noprof+0xad/0x410 [ 525.826635][T26763] ? __kvmalloc_node_noprof+0x72/0x170 [ 525.832186][T26763] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 525.837873][T26763] __kvmalloc_node_noprof+0x72/0x170 [ 525.843180][T26763] alloc_netdev_mqs+0xa8/0x9c0 [ 525.848004][T26763] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 525.853735][T26763] rtnl_create_link+0x233/0x680 [ 525.858689][T26763] rtnl_newlink_create+0x133/0x5c0 [ 525.863940][T26763] rtnl_newlink+0xe3a/0x1200 [ 525.868704][T26763] ? ring_buffer_unlock_commit+0x365/0x3b0 [ 525.874580][T26763] ? __rcu_read_unlock+0x4e/0x70 [ 525.879574][T26763] ? avc_has_perm_noaudit+0x1cc/0x210 [ 525.884963][T26763] ? selinux_capable+0x1f2/0x260 [ 525.890103][T26763] ? security_capable+0x81/0x90 [ 525.895075][T26763] ? ns_capable+0x7d/0xb0 [ 525.899448][T26763] ? __pfx_rtnl_newlink+0x10/0x10 [ 525.904504][T26763] rtnetlink_rcv_msg+0x651/0x710 [ 525.909478][T26763] ? avc_has_perm_noaudit+0x1cc/0x210 [ 525.915007][T26763] netlink_rcv_skb+0x12c/0x230 [ 525.919837][T26763] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 525.925340][T26763] rtnetlink_rcv+0x1c/0x30 [ 525.929813][T26763] netlink_unicast+0x599/0x670 [ 525.934662][T26763] netlink_sendmsg+0x5cc/0x6e0 [ 525.939449][T26763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.944774][T26763] __sock_sendmsg+0x140/0x180 [ 525.949475][T26763] ____sys_sendmsg+0x312/0x410 [ 525.954301][T26763] __sys_sendmsg+0x19d/0x230 [ 525.958995][T26763] __x64_sys_sendmsg+0x46/0x50 [ 525.963837][T26763] x64_sys_call+0x2734/0x2dc0 [ 525.968556][T26763] do_syscall_64+0xc9/0x1c0 [ 525.973075][T26763] ? clear_bhb_loop+0x55/0xb0 [ 525.977784][T26763] ? clear_bhb_loop+0x55/0xb0 [ 525.982473][T26763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.988441][T26763] RIP: 0033:0x7fa5c3b90809 [ 525.992900][T26763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.012546][T26763] RSP: 002b:00007fa5c2207058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.020977][T26763] RAX: ffffffffffffffda RBX: 00007fa5c3d55fa0 RCX: 00007fa5c3b90809 [ 526.028958][T26763] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000006 [ 526.036963][T26763] RBP: 00007fa5c22070a0 R08: 0000000000000000 R09: 0000000000000000 [ 526.044988][T26763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.053098][T26763] R13: 0000000000000000 R14: 00007fa5c3d55fa0 R15: 00007fff38242668 [ 526.061101][T26763] [ 526.100988][T26636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.108161][T26636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.134299][T26636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.191086][T26636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.198199][T26636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.200341][T26765] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 526.224138][T26636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.303322][T26765] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 526.387546][T26768] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8647'. [ 526.448732][T26636] hsr_slave_0: entered promiscuous mode [ 526.457832][T26636] hsr_slave_1: entered promiscuous mode [ 526.473305][T26636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 526.473325][T26636] Cannot create hsr debugfs directory [ 526.487010][T26778] loop7: detected capacity change from 0 to 512 [ 526.505016][T26773] vcan0 speed is unknown, defaulting to 1000 [ 526.528193][T26778] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 526.537312][T26778] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 526.548804][T26778] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 526.548934][T26778] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 526.549049][T26778] System zones: 0-2, 18-18, 34-34 [ 526.560407][T26778] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 526.561026][T26778] EXT4-fs (loop7): 1 truncate cleaned up [ 526.561329][T26778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.712183][T26636] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 526.721929][T26636] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 526.736302][T26636] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 526.746875][T26636] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 526.773129][T26794] tmpfs: Bad value for 'mpol' [ 526.792692][T26636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.820031][T26636] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.827680][T26798] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8658'. [ 526.840487][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.847653][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.873603][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.880863][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.897259][T25859] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.945326][T26802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8660'. [ 526.972140][T26636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.037089][T26820] vcan0 speed is unknown, defaulting to 1000 [ 527.084828][T26826] netlink: 140 bytes leftover after parsing attributes in process `syz.7.8665'. [ 527.146241][T26636] veth0_vlan: entered promiscuous mode [ 527.155668][T26636] veth1_vlan: entered promiscuous mode [ 527.182520][T26636] veth0_macvtap: entered promiscuous mode [ 527.195386][T26636] veth1_macvtap: entered promiscuous mode [ 527.215262][T26636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.225886][ T8] kernel write not supported for file /vcsa (pid: 8 comm: kworker/0:0) [ 527.231611][T26636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.244511][T26636] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.253309][T26636] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.262157][T26636] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.270919][T26636] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.346361][T26844] tipc: Enabling of bearer rejected, failed to enable media [ 527.355183][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 527.355197][ T29] audit: type=1400 audit(1732840084.380:56391): avc: denied { checkpoint_restore } for pid=26839 comm="syz.4.8670" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 527.359153][T26840] netlink: 'syz.4.8670': attribute type 5 has an invalid length. [ 527.422541][T26849] tmpfs: Bad value for 'mpol' [ 527.501286][T26856] tmpfs: Bad value for 'mpol' [ 527.588296][T26875] tmpfs: Bad value for 'mpol' [ 527.636196][T26882] tmpfs: Bad value for 'mpol' [ 527.649923][T26884] netlink: 'syz.3.8686': attribute type 4 has an invalid length. [ 527.661274][ T29] audit: type=1326 audit(1732840084.670:56392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26885 comm="syz.4.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 527.689219][ T29] audit: type=1326 audit(1732840084.689:56393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26885 comm="syz.4.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 527.712948][ T29] audit: type=1326 audit(1732840084.689:56394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26885 comm="syz.4.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 527.736745][ T29] audit: type=1326 audit(1732840084.689:56395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26885 comm="syz.4.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 527.760394][ T29] audit: type=1326 audit(1732840084.689:56396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26885 comm="syz.4.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 527.784027][ T29] audit: type=1326 audit(1732840084.689:56397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26885 comm="syz.4.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 527.807725][ T29] audit: type=1326 audit(1732840084.689:56398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26885 comm="syz.4.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 527.831439][ T29] audit: type=1326 audit(1732840084.689:56399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26885 comm="syz.4.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 527.854955][ T29] audit: type=1326 audit(1732840084.689:56400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26885 comm="syz.4.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c3b90809 code=0x7ffc0000 [ 527.929903][T26887] syzkaller0: entered promiscuous mode [ 527.935480][T26887] syzkaller0: entered allmulticast mode [ 527.957274][T26891] tmpfs: Bad value for 'mpol' [ 528.343900][T26899] loop6: detected capacity change from 0 to 164 [ 528.353226][T26899] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 528.362723][T26899] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 528.485635][T26907] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.492995][T26907] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.577735][T26907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.594858][T26907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.635010][T26907] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.644191][T26907] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.653460][T26907] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.662848][T26907] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.720217][T26921] loop8: detected capacity change from 0 to 164 [ 528.740916][T26923] tmpfs: Bad value for 'mpol' [ 528.784850][T26927] loop6: detected capacity change from 0 to 128 [ 529.535965][T26940] vcan0 speed is unknown, defaulting to 1000 [ 529.647775][ T371] bridge_slave_1: left allmulticast mode [ 529.653578][ T371] bridge_slave_1: left promiscuous mode [ 529.659327][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.674380][T26961] tmpfs: Bad value for 'mpol' [ 529.687350][ T371] bridge_slave_0: left allmulticast mode [ 529.693180][ T371] bridge_slave_0: left promiscuous mode [ 529.698991][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.768159][ T371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.777771][ T371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.787028][T26970] netlink: 140 bytes leftover after parsing attributes in process `syz.7.8713'. [ 529.787120][ T371] bond0 (unregistering): Released all slaves [ 529.804966][ T371] bond1 (unregistering): Released all slaves [ 529.837040][T26963] vcan0 speed is unknown, defaulting to 1000 [ 529.863539][T26940] chnl_net:caif_netlink_parms(): no params data found [ 529.942637][ T371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.963580][ T371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.030738][ T371] team0 (unregistering): Port device team_slave_1 removed [ 530.046454][ T371] team0 (unregistering): Port device team_slave_0 removed [ 530.101144][T26982] program syz.8.8718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.132755][T26940] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.139900][T26940] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.147407][T26940] bridge_slave_0: entered allmulticast mode [ 530.157463][T26940] bridge_slave_0: entered promiscuous mode [ 530.173208][T26940] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.180353][T26940] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.187826][T26940] bridge_slave_1: entered allmulticast mode [ 530.194622][T26940] bridge_slave_1: entered promiscuous mode [ 530.214623][T26988] loop7: detected capacity change from 0 to 128 [ 530.226118][T26940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.235326][T26988] FAULT_INJECTION: forcing a failure. [ 530.235326][T26988] name failslab, interval 1, probability 0, space 0, times 0 [ 530.248133][T26988] CPU: 1 UID: 0 PID: 26988 Comm: syz.7.8721 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 530.258642][T26988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 530.268788][T26988] Call Trace: [ 530.271376][T26992] tmpfs: Bad value for 'mpol' [ 530.272073][T26988] [ 530.272082][T26988] dump_stack_lvl+0xf2/0x150 [ 530.284376][T26988] dump_stack+0x15/0x20 [ 530.288638][T26988] should_fail_ex+0x223/0x230 [ 530.293370][T26988] ? netdev_name_node_alt_create+0xc3/0x220 [ 530.299314][T26988] should_failslab+0x8f/0xb0 [ 530.299349][T26988] __kmalloc_cache_noprof+0x4e/0x320 [ 530.299388][T26988] ? full_name_hash+0x89/0xe0 [ 530.299458][T26988] netdev_name_node_alt_create+0xc3/0x220 [ 530.299492][T26988] rtnl_linkprop+0x3af/0x5c0 [ 530.299629][T26988] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 530.299662][T26988] ? __mutex_lock+0x251/0x8f0 [ 530.299707][T26988] rtnl_newlinkprop+0x2a/0x40 [ 530.299737][T26988] ? __pfx_rtnl_newlinkprop+0x10/0x10 [ 530.299797][T26988] rtnetlink_rcv_msg+0x6aa/0x710 [ 530.299828][T26988] ? avc_has_perm_noaudit+0x1cc/0x210 [ 530.299859][T26988] netlink_rcv_skb+0x12c/0x230 [ 530.299883][T26988] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 530.299913][T26988] rtnetlink_rcv+0x1c/0x30 [ 530.299948][T26988] netlink_unicast+0x599/0x670 [ 530.299978][T26988] netlink_sendmsg+0x5cc/0x6e0 [ 530.300015][T26988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.300048][T26988] __sock_sendmsg+0x140/0x180 [ 530.300140][T26988] ____sys_sendmsg+0x312/0x410 [ 530.300175][T26988] __sys_sendmsg+0x19d/0x230 [ 530.300284][T26988] __x64_sys_sendmsg+0x46/0x50 [ 530.300395][T26988] x64_sys_call+0x2734/0x2dc0 [ 530.300508][T26988] do_syscall_64+0xc9/0x1c0 [ 530.300534][T26988] ? clear_bhb_loop+0x55/0xb0 [ 530.300555][T26988] ? clear_bhb_loop+0x55/0xb0 [ 530.300620][T26988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.300672][T26988] RIP: 0033:0x7f4a953c0809 [ 530.300692][T26988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.300742][T26988] RSP: 002b:00007f4a93a37058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.300762][T26988] RAX: ffffffffffffffda RBX: 00007f4a95585fa0 RCX: 00007f4a953c0809 [ 530.300777][T26988] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 000000000000000b [ 530.300790][T26988] RBP: 00007f4a93a370a0 R08: 0000000000000000 R09: 0000000000000000 [ 530.300859][T26988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.300872][T26988] R13: 0000000000000000 R14: 00007f4a95585fa0 R15: 00007ffffdfb8988 [ 530.300948][T26988] [ 530.302838][T26940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.314322][T26995] loop6: detected capacity change from 0 to 164 [ 530.540096][T26940] team0: Port device team_slave_0 added [ 530.560083][T26940] team0: Port device team_slave_1 added [ 530.604976][T26940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.612000][T26940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.638068][T26940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.765926][T26940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.772982][T26940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.799030][T26940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.833129][T27008] tmpfs: Bad value for 'mpol' [ 530.870191][T26940] hsr_slave_0: entered promiscuous mode [ 530.899539][T26940] hsr_slave_1: entered promiscuous mode [ 530.909751][T26940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.917430][T26940] Cannot create hsr debugfs directory [ 530.927932][T26995] bio_check_eod: 38717 callbacks suppressed [ 530.927971][T26995] syz.6.8725: attempt to access beyond end of device [ 530.927971][T26995] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 530.967659][T26995] syz.6.8725: attempt to access beyond end of device [ 530.967659][T26995] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 530.974153][T27018] tmpfs: Bad value for 'mpol' [ 530.989426][T26995] syz.6.8725: attempt to access beyond end of device [ 530.989426][T26995] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 531.019858][T26995] syz.6.8725: attempt to access beyond end of device [ 531.019858][T26995] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 531.037293][T26995] syz.6.8725: attempt to access beyond end of device [ 531.037293][T26995] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 531.060731][T27026] siw: device registration error -23 [ 531.071856][T26995] syz.6.8725: attempt to access beyond end of device [ 531.071856][T26995] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 531.087395][T26995] syz.6.8725: attempt to access beyond end of device [ 531.087395][T26995] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 531.113643][T27031] FAULT_INJECTION: forcing a failure. [ 531.113643][T27031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.126803][T27031] CPU: 1 UID: 0 PID: 27031 Comm: syz.8.8738 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 531.135523][T26995] syz.6.8725: attempt to access beyond end of device [ 531.135523][T26995] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 531.137244][T27031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 531.150669][T26995] syz.6.8725: attempt to access beyond end of device [ 531.150669][T26995] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 531.160697][T27031] Call Trace: [ 531.160707][T27031] [ 531.174637][T26995] syz.6.8725: attempt to access beyond end of device [ 531.174637][T26995] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 531.177787][T27031] dump_stack_lvl+0xf2/0x150 [ 531.199117][T27031] dump_stack+0x15/0x20 [ 531.203294][T27031] should_fail_ex+0x223/0x230 [ 531.208085][T27031] should_fail+0xb/0x10 [ 531.212360][T27031] should_fail_usercopy+0x1a/0x20 [ 531.217437][T27031] _copy_from_user+0x1e/0xb0 [ 531.222046][T27031] copy_msghdr_from_user+0x54/0x2a0 [ 531.227344][T27031] ? __fget_files+0x17c/0x1c0 [ 531.232096][T27031] __sys_sendmmsg+0x1e8/0x4b0 [ 531.236894][T27031] __x64_sys_sendmmsg+0x57/0x70 [ 531.241780][T27031] x64_sys_call+0x29aa/0x2dc0 [ 531.246547][T27031] do_syscall_64+0xc9/0x1c0 [ 531.251140][T27031] ? clear_bhb_loop+0x55/0xb0 [ 531.255851][T27031] ? clear_bhb_loop+0x55/0xb0 [ 531.260588][T27031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.266599][T27031] RIP: 0033:0x7f60dd990809 [ 531.271064][T27031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.290799][T27031] RSP: 002b:00007f60dc007058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 531.299247][T27031] RAX: ffffffffffffffda RBX: 00007f60ddb55fa0 RCX: 00007f60dd990809 [ 531.307282][T27031] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 531.315297][T27031] RBP: 00007f60dc0070a0 R08: 0000000000000000 R09: 0000000000000000 [ 531.315315][T27031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.315336][T27031] R13: 0000000000000000 R14: 00007f60ddb55fa0 R15: 00007ffc5b5cd078 [ 531.339302][T27031] [ 531.412533][T27044] siw: device registration error -23 [ 531.421663][T27044] loop7: detected capacity change from 0 to 512 [ 531.468503][T27053] vcan0 speed is unknown, defaulting to 1000 [ 531.517051][T27058] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8747'. [ 531.614031][T26940] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 531.624387][T26940] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 531.635904][T26940] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 531.647812][T26940] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 531.688973][T27069] syzkaller0: entered promiscuous mode [ 531.694574][T27069] syzkaller0: entered allmulticast mode [ 531.733742][T26940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.747256][T26940] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.766610][ T560] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.773774][ T560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.783701][ T560] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.790965][ T560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.811091][T26940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.867164][T26940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.989587][T26940] veth0_vlan: entered promiscuous mode [ 531.998025][T26940] veth1_vlan: entered promiscuous mode [ 532.016082][T26940] veth0_macvtap: entered promiscuous mode [ 532.024117][T26940] veth1_macvtap: entered promiscuous mode [ 532.036311][T26940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.048764][T26940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.059186][T26940] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.068195][T26940] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.076968][T26940] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.085802][T26940] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.325083][T27104] vcan0 speed is unknown, defaulting to 1000 [ 532.369452][T27105] netlink: 140 bytes leftover after parsing attributes in process `syz.6.8761'. [ 532.597190][ T1037] kernel write not supported for file /snd/seq (pid: 1037 comm: kworker/1:2) [ 532.772944][T27139] loop6: detected capacity change from 0 to 164 [ 532.803899][T27138] syzkaller0: entered promiscuous mode [ 532.809436][T27138] syzkaller0: entered allmulticast mode [ 532.898693][T27139] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 532.994891][T27139] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 533.202020][T27145] tmpfs: Bad value for 'mpol' [ 533.305692][T27153] FAULT_INJECTION: forcing a failure. [ 533.305692][T27153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.318918][T27153] CPU: 0 UID: 0 PID: 27153 Comm: syz.6.8778 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 533.329414][T27153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 533.339640][T27153] Call Trace: [ 533.342965][T27153] [ 533.345998][T27153] dump_stack_lvl+0xf2/0x150 [ 533.350731][T27153] dump_stack+0x15/0x20 [ 533.355083][T27153] should_fail_ex+0x223/0x230 [ 533.359809][T27153] should_fail+0xb/0x10 [ 533.364111][T27153] should_fail_usercopy+0x1a/0x20 [ 533.369169][T27153] _copy_from_user+0x1e/0xb0 [ 533.373778][T27153] restore_sigcontext+0x64/0x220 [ 533.378853][T27153] __do_sys_rt_sigreturn+0xfd/0x160 [ 533.384153][T27153] x64_sys_call+0x2982/0x2dc0 [ 533.388887][T27153] do_syscall_64+0xc9/0x1c0 [ 533.393461][T27153] ? clear_bhb_loop+0x55/0xb0 [ 533.398158][T27153] ? clear_bhb_loop+0x55/0xb0 [ 533.402894][T27153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.408948][T27153] RIP: 0033:0x7ff57bfdc149 [ 533.413378][T27153] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 533.433192][T27153] RSP: 002b:00007ff57a695ac0 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 533.441678][T27153] RAX: ffffffffffffffda RBX: 00007ff57c206080 RCX: 00007ff57bfdc149 [ 533.449655][T27153] RDX: 00007ff57a695ac0 RSI: 00007ff57a695bf0 RDI: 0000000000000021 [ 533.457836][T27153] RBP: 00007ff57a6960a0 R08: 0000000000000000 R09: 0000000000000000 [ 533.465815][T27153] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 533.473828][T27153] R13: 0000000000000000 R14: 00007ff57c206080 R15: 00007ffc52887ab8 [ 533.481844][T27153] [ 533.573407][T27158] 9pnet_fd: Insufficient options for proto=fd [ 533.633303][T27162] siw: device registration error -23 [ 533.641548][T27162] loop8: detected capacity change from 0 to 512 [ 533.658061][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 533.658076][ T29] audit: type=1400 audit(1732840090.283:56489): avc: denied { watch watch_reads } for pid=27163 comm="syz.4.8785" path="/9" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 533.690815][T27164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8785'. [ 533.744539][ T29] audit: type=1400 audit(1732840090.357:56490): avc: denied { read } for pid=27169 comm="syz.7.8788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 533.802505][T27174] netlink: 56 bytes leftover after parsing attributes in process `syz.8.8790'. [ 533.812406][T27174] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8790'. [ 533.855619][T27176] siw: device registration error -23 [ 533.865767][T27176] loop8: detected capacity change from 0 to 512 [ 533.874993][ T29] audit: type=1326 audit(1732840090.479:56491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27177 comm="syz.7.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 533.898985][ T29] audit: type=1326 audit(1732840090.479:56492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27177 comm="syz.7.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 533.923567][T27183] 9pnet_fd: Insufficient options for proto=fd [ 533.923693][ T29] audit: type=1326 audit(1732840090.479:56493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27177 comm="syz.7.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 533.953479][ T29] audit: type=1326 audit(1732840090.479:56494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27177 comm="syz.7.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 533.977159][ T29] audit: type=1326 audit(1732840090.479:56495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27177 comm="syz.7.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 534.001067][ T29] audit: type=1326 audit(1732840090.479:56496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27177 comm="syz.7.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 534.024647][ T29] audit: type=1326 audit(1732840090.479:56497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27177 comm="syz.7.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 534.048061][ T29] audit: type=1326 audit(1732840090.479:56498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27177 comm="syz.7.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 534.092935][T27180] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.100159][T27180] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.145065][T27180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.157526][T27180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.187333][T27180] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.196408][T27180] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.205489][T27180] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.214413][T27180] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.227578][T27185] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8795'. [ 534.261616][T27190] syzkaller0: entered promiscuous mode [ 534.267172][T27190] syzkaller0: entered allmulticast mode [ 534.335655][T27200] siw: device registration error -23 [ 534.502000][T27211] 9pnet_fd: Insufficient options for proto=fd [ 534.517555][T27194] x_tables: unsorted underflow at hook 1 [ 534.624797][T27229] FAULT_INJECTION: forcing a failure. [ 534.624797][T27229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.638019][T27229] CPU: 1 UID: 0 PID: 27229 Comm: syz.8.8812 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 534.648497][T27229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 534.658587][T27229] Call Trace: [ 534.661937][T27229] [ 534.664903][T27229] dump_stack_lvl+0xf2/0x150 [ 534.669623][T27229] dump_stack+0x15/0x20 [ 534.673801][T27229] should_fail_ex+0x223/0x230 [ 534.678529][T27229] should_fail+0xb/0x10 [ 534.682707][T27229] should_fail_usercopy+0x1a/0x20 [ 534.687826][T27229] _copy_from_iter+0xd5/0xd00 [ 534.692608][T27229] ? kmalloc_reserve+0x16e/0x190 [ 534.697573][T27229] ? __build_skb_around+0x196/0x1f0 [ 534.702850][T27229] ? __alloc_skb+0x21f/0x310 [ 534.707477][T27229] ? __virt_addr_valid+0x1ed/0x250 [ 534.712614][T27229] ? __check_object_size+0x364/0x520 [ 534.717973][T27229] netlink_sendmsg+0x460/0x6e0 [ 534.722774][T27229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.728095][T27229] __sock_sendmsg+0x140/0x180 [ 534.733134][T27229] ____sys_sendmsg+0x312/0x410 [ 534.737929][T27229] __sys_sendmsg+0x19d/0x230 [ 534.742702][T27229] __x64_sys_sendmsg+0x46/0x50 [ 534.747485][T27229] x64_sys_call+0x2734/0x2dc0 [ 534.752187][T27229] do_syscall_64+0xc9/0x1c0 [ 534.756706][T27229] ? clear_bhb_loop+0x55/0xb0 [ 534.761400][T27229] ? clear_bhb_loop+0x55/0xb0 [ 534.766177][T27229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.772109][T27229] RIP: 0033:0x7f60dd990809 [ 534.776596][T27229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.796262][T27229] RSP: 002b:00007f60dc007058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.804703][T27229] RAX: ffffffffffffffda RBX: 00007f60ddb55fa0 RCX: 00007f60dd990809 [ 534.812700][T27229] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 534.820724][T27229] RBP: 00007f60dc0070a0 R08: 0000000000000000 R09: 0000000000000000 [ 534.828746][T27229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.836805][T27229] R13: 0000000000000000 R14: 00007f60ddb55fa0 R15: 00007ffc5b5cd078 [ 534.844801][T27229] [ 535.136468][T27243] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8818'. [ 535.158154][T27243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8818'. [ 535.178876][T27243] loop6: detected capacity change from 0 to 256 [ 535.185744][T27243] FAT-fs (loop6): bogus number of FAT sectors [ 535.191994][T27243] FAT-fs (loop6): Can't find a valid FAT filesystem [ 535.244602][T27253] 9pnet_fd: Insufficient options for proto=fd [ 535.779375][T27264] x_tables: unsorted underflow at hook 1 [ 536.062366][T27272] syzkaller0: entered promiscuous mode [ 536.068008][T27272] syzkaller0: entered allmulticast mode [ 536.197378][T27278] tmpfs: Bad value for 'mpol' [ 537.061397][T27296] vcan0 speed is unknown, defaulting to 1000 [ 537.110958][T27299] netlink: 140 bytes leftover after parsing attributes in process `syz.8.8839'. [ 537.120081][T27301] tipc: Enabling of bearer rejected, failed to enable media [ 537.366706][T27321] siw: device registration error -23 [ 537.369098][T27323] netlink: 332 bytes leftover after parsing attributes in process `syz.3.8850'. [ 537.386833][T27321] loop6: detected capacity change from 0 to 512 [ 537.441282][T27325] siw: device registration error -23 [ 537.447034][T27327] vcan0 speed is unknown, defaulting to 1000 [ 537.495687][T27328] netlink: 140 bytes leftover after parsing attributes in process `syz.6.8852'. [ 537.559764][T27319] x_tables: unsorted underflow at hook 1 [ 537.560384][T27319] hsr_slave_0: left promiscuous mode [ 537.560907][T27319] hsr_slave_1: left promiscuous mode [ 537.643851][T27337] vcan0 speed is unknown, defaulting to 1000 [ 537.689884][T27341] warn_alloc: 4 callbacks suppressed [ 537.689906][T27341] syz.6.8855: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 537.710155][T27341] CPU: 1 UID: 0 PID: 27341 Comm: syz.6.8855 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 537.720614][T27341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 537.730813][T27341] Call Trace: [ 537.734170][T27341] [ 537.737185][T27341] dump_stack_lvl+0xf2/0x150 [ 537.741803][T27341] dump_stack+0x15/0x20 [ 537.746024][T27341] warn_alloc+0x145/0x1b0 [ 537.750500][T27341] ? __vmalloc_node_range_noprof+0x88/0xe80 [ 537.756417][T27341] ? __rb_insert_augmented+0x71/0x2d0 [ 537.761813][T27341] ? tracing_record_taskinfo_sched_switch+0x6f/0x270 [ 537.768520][T27341] __vmalloc_node_range_noprof+0xaa/0xe80 [ 537.774361][T27341] ? probe_sched_wakeup+0x81/0xa0 [ 537.779574][T27341] ? ttwu_do_activate+0x206/0x240 [ 537.784634][T27341] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 537.790487][T27341] ? try_to_wake_up+0x35e/0x570 [ 537.795365][T27341] ? __rcu_read_unlock+0x4e/0x70 [ 537.800345][T27341] ? avc_has_perm_noaudit+0x1cc/0x210 [ 537.805765][T27341] ? should_fail_ex+0x31/0x230 [ 537.810631][T27341] ? xskq_create+0x36/0xd0 [ 537.815181][T27341] ? should_failslab+0x8f/0xb0 [ 537.820088][T27341] vmalloc_user_noprof+0x59/0x70 [ 537.825089][T27341] ? xskq_create+0x79/0xd0 [ 537.829555][T27341] xskq_create+0x79/0xd0 [ 537.833896][T27341] xsk_init_queue+0x82/0xd0 [ 537.838530][T27341] xsk_setsockopt+0x409/0x520 [ 537.843339][T27341] ? __pfx_xsk_setsockopt+0x10/0x10 [ 537.848564][T27341] __sys_setsockopt+0x187/0x200 [ 537.853456][T27341] __x64_sys_setsockopt+0x66/0x80 [ 537.858511][T27341] x64_sys_call+0x282e/0x2dc0 [ 537.863230][T27341] do_syscall_64+0xc9/0x1c0 [ 537.867826][T27341] ? clear_bhb_loop+0x55/0xb0 [ 537.872532][T27341] ? clear_bhb_loop+0x55/0xb0 [ 537.877232][T27341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.883191][T27341] RIP: 0033:0x7ff57c040809 [ 537.887789][T27341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.907426][T27341] RSP: 002b:00007ff57a696058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 537.915962][T27341] RAX: ffffffffffffffda RBX: 00007ff57c206080 RCX: 00007ff57c040809 [ 537.923959][T27341] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e [ 537.931939][T27341] RBP: 00007ff57c0b393e R08: 0000000000000020 R09: 0000000000000000 [ 537.939957][T27341] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 537.947960][T27341] R13: 0000000000000000 R14: 00007ff57c206080 R15: 00007ffc52887ab8 [ 537.955957][T27341] [ 537.959175][T27341] Mem-Info: [ 537.962599][T27341] active_anon:6668 inactive_anon:1 isolated_anon:0 [ 537.962599][T27341] active_file:4535 inactive_file:3125 isolated_file:0 [ 537.962599][T27341] unevictable:0 dirty:220 writeback:0 [ 537.962599][T27341] slab_reclaimable:3106 slab_unreclaimable:26433 [ 537.962599][T27341] mapped:28467 shmem:295 pagetables:822 [ 537.962599][T27341] sec_pagetables:0 bounce:0 [ 537.962599][T27341] kernel_misc_reclaimable:0 [ 537.962599][T27341] free:1895284 free_pcp:1589 free_cma:0 [ 538.007566][T27341] Node 0 active_anon:26556kB inactive_anon:4kB active_file:18140kB inactive_file:12500kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113868kB dirty:880kB writeback:0kB shmem:1180kB writeback_tmp:0kB kernel_stack:3216kB pagetables:3288kB sec_pagetables:0kB all_unreclaimable? no [ 538.035628][T27341] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 538.062742][T27341] lowmem_reserve[]: 0 2866 7844 0 [ 538.067833][T27341] Node 0 DMA32 free:2950308kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953940kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 538.096761][T27341] lowmem_reserve[]: 0 0 4978 0 [ 538.096800][T27341] Node 0 Normal free:4608740kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:32472kB inactive_anon:4kB active_file:18140kB inactive_file:12500kB unevictable:0kB writepending:880kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:3544kB local_pcp:892kB free_cma:0kB [ 538.096903][T27341] lowmem_reserve[]: 0 0 0 0 [ 538.096934][T27341] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 538.097130][T27341] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 1*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950308kB [ 538.097436][T27341] Node 0 Normal: 305*4kB (UME) [ 538.102522][T27349] netlink: 140 bytes leftover after parsing attributes in process `syz.6.8855'. [ 538.132178][T27341] 1296*8kB (UME) 2072*16kB (UME) 2386*32kB (UME) 1835*64kB (UME) 1312*128kB (UME) 1029*256kB (UME) 1171*512kB (UME) 1021*1024kB (UME) 126*2048kB (UME) 497*4096kB (UM) = 4608708kB [ 538.197168][T27341] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 538.206550][T27341] 10252 total pagecache pages [ 538.211502][T27341] 9 pages in swap cache [ 538.215822][T27341] Free swap = 124152kB [ 538.220086][T27341] Total swap = 124996kB [ 538.224451][T27341] 2097051 pages RAM [ 538.226558][T27346] tipc: Started in network mode [ 538.228260][T27341] 0 pages HighMem/MovableOnly [ 538.228272][T27341] 80174 pages reserved [ 538.241994][T27346] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 538.251083][T27346] tipc: Enabling of bearer rejected, failed to enable media [ 538.313613][T27357] loop7: detected capacity change from 0 to 512 [ 538.331860][T27357] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 538.341114][T27357] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 538.373346][T27357] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 538.388522][T27357] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 538.437766][T27365] tmpfs: Bad value for 'mpol' [ 538.448980][T27357] System zones: 0-2, 18-18, 34-34 [ 538.474610][T27357] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 538.533542][T27357] EXT4-fs (loop7): 1 truncate cleaned up [ 538.546486][T27357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.556266][T27369] syzkaller0: entered promiscuous mode [ 538.564118][T27369] syzkaller0: entered allmulticast mode [ 538.707778][T27386] tipc: Started in network mode [ 538.712723][T27386] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 538.721727][T27386] tipc: Enabling of bearer rejected, failed to enable media [ 539.030947][T25859] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.136619][T27399] loop8: detected capacity change from 0 to 164 [ 539.158600][T27399] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 539.178839][T27399] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 539.309171][T27403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8876'. [ 539.428583][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 539.428598][ T29] audit: type=1326 audit(1732840095.671:56713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27406 comm="syz.7.8878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 539.524666][T27414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8881'. [ 539.527937][ T29] audit: type=1326 audit(1732840095.671:56714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27406 comm="syz.7.8878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 539.557783][ T29] audit: type=1326 audit(1732840095.671:56715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27406 comm="syz.7.8878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 539.569591][T27411] x_tables: unsorted underflow at hook 1 [ 539.581423][ T29] audit: type=1326 audit(1732840095.671:56716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27406 comm="syz.7.8878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 539.610797][ T29] audit: type=1326 audit(1732840095.680:56717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27406 comm="syz.7.8878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 539.634389][ T29] audit: type=1326 audit(1732840095.680:56718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27406 comm="syz.7.8878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 539.657992][ T29] audit: type=1326 audit(1732840095.680:56719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27406 comm="syz.7.8878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 539.681455][ T29] audit: type=1326 audit(1732840095.680:56720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27406 comm="syz.7.8878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 539.705059][ T29] audit: type=1326 audit(1732840095.680:56721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27406 comm="syz.7.8878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 539.728683][ T29] audit: type=1326 audit(1732840095.680:56722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27406 comm="syz.7.8878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 539.759852][T27423] siw: device registration error -23 [ 539.777761][T27423] loop7: detected capacity change from 0 to 512 [ 539.796219][T27425] tipc: Enabling of bearer rejected, failed to enable media [ 539.991899][T27432] hub 2-0:1.0: USB hub found [ 540.007476][T27432] hub 2-0:1.0: 8 ports detected [ 540.118449][T27443] loop8: detected capacity change from 0 to 256 [ 540.257537][T27451] vcan0 speed is unknown, defaulting to 1000 [ 540.268260][T27457] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8893'. [ 540.323857][T27458] loop6: detected capacity change from 0 to 164 [ 540.355913][T27458] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 540.367546][T27458] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 540.446095][T27460] siw: device registration error -23 [ 540.510059][T27460] loop7: detected capacity change from 0 to 512 [ 540.706591][T27471] tipc: Enabling of bearer rejected, failed to enable media [ 540.862026][T27480] FAULT_INJECTION: forcing a failure. [ 540.862026][T27480] name failslab, interval 1, probability 0, space 0, times 0 [ 540.874855][T27480] CPU: 1 UID: 0 PID: 27480 Comm: +}[@ Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 540.884897][T27480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 540.895061][T27480] Call Trace: [ 540.898346][T27480] [ 540.901287][T27480] dump_stack_lvl+0xf2/0x150 [ 540.905949][T27480] dump_stack+0x15/0x20 [ 540.910124][T27480] should_fail_ex+0x223/0x230 [ 540.914831][T27480] should_failslab+0x8f/0xb0 [ 540.919449][T27480] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 540.925192][T27480] ? __d_alloc+0x3d/0x340 [ 540.929604][T27480] ? selinux_inode_permission+0x341/0x410 [ 540.935392][T27480] __d_alloc+0x3d/0x340 [ 540.939591][T27480] d_alloc_parallel+0x54/0xc60 [ 540.944386][T27480] ? __rcu_read_unlock+0x4e/0x70 [ 540.949458][T27480] ? __d_lookup+0x342/0x370 [ 540.954042][T27480] ? try_to_unlazy+0x279/0x3b0 [ 540.958886][T27480] path_openat+0x6c8/0x1fa0 [ 540.963461][T27480] ? kstrtoull+0x110/0x140 [ 540.967984][T27480] do_filp_open+0x107/0x230 [ 540.972560][T27480] do_sys_openat2+0xab/0x120 [ 540.977176][T27480] __x64_sys_open+0xe6/0x110 [ 540.981909][T27480] x64_sys_call+0x13e1/0x2dc0 [ 540.986674][T27480] do_syscall_64+0xc9/0x1c0 [ 540.991186][T27480] ? clear_bhb_loop+0x55/0xb0 [ 540.995896][T27480] ? clear_bhb_loop+0x55/0xb0 [ 541.000582][T27480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.006519][T27480] RIP: 0033:0x7f612ab90809 [ 541.010971][T27480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.030638][T27480] RSP: 002b:00007f6129207058 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 541.039061][T27480] RAX: ffffffffffffffda RBX: 00007f612ad55fa0 RCX: 00007f612ab90809 [ 541.047051][T27480] RDX: 0000000000000000 RSI: 000000000004e142 RDI: 0000000020000040 [ 541.055027][T27480] RBP: 00007f61292070a0 R08: 0000000000000000 R09: 0000000000000000 [ 541.063001][T27480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.070978][T27480] R13: 0000000000000000 R14: 00007f612ad55fa0 R15: 00007ffd08c63ae8 [ 541.078976][T27480] [ 541.181005][T27490] siw: device registration error -23 [ 541.194635][T27490] loop6: detected capacity change from 0 to 512 [ 541.394488][T27511] wireguard0: entered promiscuous mode [ 541.400158][T27511] wireguard0: entered allmulticast mode [ 541.704583][T27524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8919'. [ 541.941978][T27549] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8930'. [ 542.228319][T27560] loop7: detected capacity change from 0 to 1024 [ 542.237461][T27560] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.8933: Failed to acquire dquot type 0 [ 542.249263][T27560] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 542.263946][T27560] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #13: comm syz.7.8933: corrupted inode contents [ 542.276018][T27560] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #13: comm syz.7.8933: mark_inode_dirty error [ 542.287649][T27560] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #13: comm syz.7.8933: corrupted inode contents [ 542.300012][T27560] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #13: comm syz.7.8933: mark_inode_dirty error [ 542.326319][T27560] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #13: comm syz.7.8933: corrupted inode contents [ 542.335223][T27561] loop6: detected capacity change from 0 to 8192 [ 542.340805][T27560] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 542.344970][T27561] vfat: Unknown parameter 'ÿÿÿÿ' [ 542.353273][T27560] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #13: comm syz.7.8933: corrupted inode contents [ 542.372743][T27560] EXT4-fs error (device loop7): ext4_truncate:4240: inode #13: comm syz.7.8933: mark_inode_dirty error [ 542.384147][T27560] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 542.393522][T27560] EXT4-fs (loop7): 1 truncate cleaned up [ 542.399531][T27560] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.712667][T27581] siw: device registration error -23 [ 542.721186][T27581] loop8: detected capacity change from 0 to 512 [ 542.749414][T27586] netlink: 'syz.8.8942': attribute type 4 has an invalid length. [ 542.785392][T27587] x_tables: unsorted underflow at hook 1 [ 543.092194][T27586] loop8: detected capacity change from 0 to 1024 [ 543.099399][T27586] EXT4-fs: Mount option(s) incompatible with ext2 [ 543.131146][T25859] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.160620][T27602] loop6: detected capacity change from 0 to 4096 [ 543.171196][T27602] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.201291][T24145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.382642][T27615] tmpfs: Bad value for 'mpol' [ 543.487157][T27629] netlink: 'syz.7.8961': attribute type 4 has an invalid length. [ 543.496677][T27632] tmpfs: Bad value for 'mpol' [ 543.609093][T27639] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 543.625396][T27639] SELinux: failed to load policy [ 544.189379][T27629] loop7: detected capacity change from 0 to 1024 [ 544.196647][T27629] EXT4-fs: Mount option(s) incompatible with ext2 [ 544.367668][T27662] tmpfs: Bad value for 'mpol' [ 544.447882][T27667] loop7: detected capacity change from 0 to 164 [ 544.491750][T27667] Process accounting resumed [ 544.631305][T27679] x_tables: unsorted underflow at hook 1 [ 544.739018][T27688] netlink: 'syz.7.8984': attribute type 7 has an invalid length. [ 544.812453][T27696] netlink: 'syz.7.8987': attribute type 4 has an invalid length. [ 544.820531][T27692] vcan0 speed is unknown, defaulting to 1000 [ 544.944647][T27697] netlink: 140 bytes leftover after parsing attributes in process `syz.6.8985'. [ 545.187158][T27696] loop7: detected capacity change from 0 to 1024 [ 545.196235][T27696] EXT4-fs: Mount option(s) incompatible with ext2 [ 545.381220][T27714] tipc: Enabling of bearer rejected, failed to enable media [ 545.429144][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 545.429162][ T29] audit: type=1326 audit(1732840101.292:57082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.7.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 545.467460][ T29] audit: type=1326 audit(1732840101.320:57083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.7.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 545.491362][ T29] audit: type=1326 audit(1732840101.320:57084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.7.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a953bf170 code=0x7ffc0000 [ 545.515180][ T29] audit: type=1326 audit(1732840101.320:57085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.7.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4a953c2037 code=0x7ffc0000 [ 545.538887][ T29] audit: type=1326 audit(1732840101.320:57086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.7.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 545.539752][T27727] netlink: 'syz.6.8999': attribute type 4 has an invalid length. [ 545.562632][ T29] audit: type=1326 audit(1732840101.320:57087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.7.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4a953c2037 code=0x7ffc0000 [ 545.594241][ T29] audit: type=1326 audit(1732840101.320:57088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.7.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4a953bf46a code=0x7ffc0000 [ 545.617821][ T29] audit: type=1326 audit(1732840101.320:57089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.7.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 545.641431][ T29] audit: type=1326 audit(1732840101.320:57090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.7.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 545.665196][ T29] audit: type=1326 audit(1732840101.320:57091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.7.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4a953c0809 code=0x7ffc0000 [ 545.678797][T27732] vcan0 speed is unknown, defaulting to 1000 [ 545.728186][T27734] netlink: 140 bytes leftover after parsing attributes in process `syz.8.9000'. [ 546.211092][T27727] loop6: detected capacity change from 0 to 1024 [ 546.218250][T27727] EXT4-fs: Mount option(s) incompatible with ext2 [ 546.362134][T27746] siw: device registration error -23 [ 546.469327][T27750] netlink: 'syz.3.9005': attribute type 4 has an invalid length. [ 546.627258][T27763] siw: device registration error -23 [ 546.668483][T27763] loop7: detected capacity change from 0 to 512 [ 546.775332][T27768] vcan0 speed is unknown, defaulting to 1000 [ 546.795766][T27774] netlink: 140 bytes leftover after parsing attributes in process `syz.7.9012'. [ 546.834319][T27777] tipc: Enabling of bearer rejected, failed to enable media [ 547.035910][T27770] x_tables: unsorted underflow at hook 1 [ 547.066764][T27789] loop8: detected capacity change from 0 to 2048 [ 547.087820][T27789] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.280591][T27796] FAULT_INJECTION: forcing a failure. [ 547.280591][T27796] name failslab, interval 1, probability 0, space 0, times 0 [ 547.293436][T27796] CPU: 1 UID: 0 PID: 27796 Comm: syz.3.9020 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 547.303333][T27794] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, [ 547.303940][T27796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 547.303960][T27796] Call Trace: [ 547.303969][T27796] [ 547.312211][T27794] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 547.322231][T27796] dump_stack_lvl+0xf2/0x150 [ 547.322265][T27796] dump_stack+0x15/0x20 [ 547.326417][T27794] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 547.328461][T27796] should_fail_ex+0x223/0x230 [ 547.328500][T27796] ? tcp_sendmsg_fastopen+0x163/0x4f0 [ 547.337358][T27794] EXT4-fs (loop8): This should not happen!! Data will be lost [ 547.337358][T27794] [ 547.341877][T27796] should_failslab+0x8f/0xb0 [ 547.341909][T27796] __kmalloc_cache_noprof+0x4e/0x320 [ 547.346042][T27794] EXT4-fs (loop8): Total free blocks count 0 [ 547.358258][T27796] tcp_sendmsg_fastopen+0x163/0x4f0 [ 547.363036][T27794] EXT4-fs (loop8): Free/Dirty block details [ 547.368351][T27796] tcp_sendmsg_locked+0x2513/0x2710 [ 547.378074][T27794] EXT4-fs (loop8): free_blocks=2415919104 [ 547.382701][T27796] ? avc_has_perm+0xd4/0x160 [ 547.388002][T27794] EXT4-fs (loop8): dirty_blocks=8224 [ 547.393958][T27796] ? __rcu_read_unlock+0x4e/0x70 [ 547.399239][T27794] EXT4-fs (loop8): Block reservation details [ 547.405103][T27796] ? avc_has_perm_noaudit+0x1cc/0x210 [ 547.410365][T27794] EXT4-fs (loop8): i_reserved_data_blocks=514 [ 547.415995][T27796] ? avc_has_perm+0xd4/0x160 [ 547.453359][T27796] ? _raw_spin_unlock_bh+0x36/0x40 [ 547.458492][T27796] ? __pfx_tcp_sendmsg+0x10/0x10 [ 547.463511][T27796] tcp_sendmsg+0x30/0x50 [ 547.467805][T27796] inet_sendmsg+0x77/0xd0 [ 547.472233][T27796] __sock_sendmsg+0x102/0x180 [ 547.476942][T27796] ____sys_sendmsg+0x312/0x410 [ 547.481721][T27796] __sys_sendmsg+0x19d/0x230 [ 547.486431][T27796] __x64_sys_sendmsg+0x46/0x50 [ 547.491236][T27796] x64_sys_call+0x2734/0x2dc0 [ 547.495944][T27796] do_syscall_64+0xc9/0x1c0 [ 547.500541][T27796] ? clear_bhb_loop+0x55/0xb0 [ 547.505238][T27796] ? clear_bhb_loop+0x55/0xb0 [ 547.509970][T27796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.515908][T27796] RIP: 0033:0x7f6b00bd0809 [ 547.520331][T27796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.540172][T27796] RSP: 002b:00007f6aff247058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.548606][T27796] RAX: ffffffffffffffda RBX: 00007f6b00d95fa0 RCX: 00007f6b00bd0809 [ 547.556583][T27796] RDX: 0000000034008085 RSI: 0000000020000080 RDI: 0000000000000003 [ 547.564558][T27796] RBP: 00007f6aff2470a0 R08: 0000000000000000 R09: 0000000000000000 [ 547.572572][T27796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.580548][T27796] R13: 0000000000000000 R14: 00007f6b00d95fa0 R15: 00007ffc73b6ed38 [ 547.588535][T27796] [ 547.626453][ T3418] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 547.721874][T27806] loop6: detected capacity change from 0 to 1024 [ 547.733103][T27809] tipc: Started in network mode [ 547.738156][T27809] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 547.747072][T27809] tipc: Enabling of bearer rejected, failed to enable media [ 547.755952][T27806] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.9021: Failed to acquire dquot type 0 [ 547.768261][T27806] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 547.783175][T27806] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #13: comm syz.6.9021: corrupted inode contents [ 547.807207][T27806] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #13: comm syz.6.9021: mark_inode_dirty error [ 547.828002][T27806] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #13: comm syz.6.9021: corrupted inode contents [ 547.840501][T27806] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #13: comm syz.6.9021: mark_inode_dirty error [ 547.871064][T27806] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #13: comm syz.6.9021: corrupted inode contents [ 547.885289][T27806] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 547.894340][T27806] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #13: comm syz.6.9021: corrupted inode contents [ 547.908714][T27806] EXT4-fs error (device loop6): ext4_truncate:4240: inode #13: comm syz.6.9021: mark_inode_dirty error [ 547.921320][T27806] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 547.931396][T27806] EXT4-fs (loop6): 1 truncate cleaned up [ 547.937480][T27806] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.098699][T27831] hub 2-0:1.0: USB hub found [ 548.144967][T27831] hub 2-0:1.0: 8 ports detected [ 548.158055][T27832] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9031'. [ 548.520182][T24145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.755098][T27854] bio_check_eod: 3613 callbacks suppressed [ 548.755117][T27854] syz.6.9035: attempt to access beyond end of device [ 548.755117][T27854] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 548.777870][T27854] loop6: detected capacity change from 0 to 512 [ 548.788699][T27854] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9035: bg 0: block 35: padding at end of block bitmap is not set [ 548.803504][T27854] EXT4-fs (loop6): Remounting filesystem read-only [ 548.810228][T27854] EXT4-fs (loop6): 1 truncate cleaned up [ 548.816363][T27854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.828452][T27854] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 548.835404][T27854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.951346][T27862] hub 2-0:1.0: USB hub found [ 548.956498][T27862] hub 2-0:1.0: 8 ports detected [ 549.203672][T27868] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9046'. [ 549.213133][T27868] all: renamed from ip6_vti0 [ 549.524289][T27883] siw: device registration error -23 [ 549.698184][T27891] hub 2-0:1.0: USB hub found [ 549.702968][T27891] hub 2-0:1.0: 8 ports detected [ 549.823663][T27896] vcan0 speed is unknown, defaulting to 1000 [ 549.870966][T27897] syz.7.9057: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 549.885554][T27897] CPU: 1 UID: 0 PID: 27897 Comm: syz.7.9057 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 549.896060][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 549.906145][T27897] Call Trace: [ 549.909486][T27897] [ 549.912488][T27897] dump_stack_lvl+0xf2/0x150 [ 549.917119][T27897] dump_stack+0x15/0x20 [ 549.921298][T27897] warn_alloc+0x145/0x1b0 [ 549.925682][T27897] ? __schedule+0x6fa/0x930 [ 549.930272][T27897] ? __vmalloc_node_range_noprof+0x88/0xe80 [ 549.936187][T27897] __vmalloc_node_range_noprof+0xaa/0xe80 [ 549.941932][T27897] ? __pfx_futex_wake_mark+0x10/0x10 [ 549.947334][T27897] ? __rcu_read_unlock+0x4e/0x70 [ 549.952287][T27897] ? avc_has_perm_noaudit+0x1cc/0x210 [ 549.957671][T27897] ? should_fail_ex+0x31/0x230 [ 549.962471][T27897] ? xskq_create+0x36/0xd0 [ 549.966912][T27897] ? should_failslab+0x8f/0xb0 [ 549.971761][T27897] vmalloc_user_noprof+0x59/0x70 [ 549.976750][T27897] ? xskq_create+0x79/0xd0 [ 549.981340][T27897] xskq_create+0x79/0xd0 [ 549.985605][T27897] xsk_init_queue+0x82/0xd0 [ 549.990175][T27897] xsk_setsockopt+0x409/0x520 [ 549.994948][T27897] ? __pfx_xsk_setsockopt+0x10/0x10 [ 550.000191][T27897] __sys_setsockopt+0x187/0x200 [ 550.005066][T27897] __x64_sys_setsockopt+0x66/0x80 [ 550.010203][T27897] x64_sys_call+0x282e/0x2dc0 [ 550.014949][T27897] do_syscall_64+0xc9/0x1c0 [ 550.019459][T27897] ? clear_bhb_loop+0x55/0xb0 [ 550.024174][T27897] ? clear_bhb_loop+0x55/0xb0 [ 550.028900][T27897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.034829][T27897] RIP: 0033:0x7f4a953c0809 [ 550.039251][T27897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.058879][T27897] RSP: 002b:00007f4a93a16058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 550.067345][T27897] RAX: ffffffffffffffda RBX: 00007f4a95586080 RCX: 00007f4a953c0809 [ 550.075324][T27897] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e [ 550.083323][T27897] RBP: 00007f4a9543393e R08: 0000000000000020 R09: 0000000000000000 [ 550.091301][T27897] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 550.099276][T27897] R13: 0000000000000000 R14: 00007f4a95586080 R15: 00007ffffdfb8988 [ 550.107304][T27897] [ 550.110499][T27897] Mem-Info: [ 550.113683][T27897] active_anon:7006 inactive_anon:1 isolated_anon:0 [ 550.113683][T27897] active_file:4535 inactive_file:3129 isolated_file:0 [ 550.113683][T27897] unevictable:0 dirty:345 writeback:0 [ 550.113683][T27897] slab_reclaimable:3118 slab_unreclaimable:26286 [ 550.113683][T27897] mapped:28495 shmem:295 pagetables:1029 [ 550.113683][T27897] sec_pagetables:0 bounce:0 [ 550.113683][T27897] kernel_misc_reclaimable:0 [ 550.113683][T27897] free:1871384 free_pcp:24938 free_cma:0 [ 550.159091][T27897] Node 0 active_anon:28024kB inactive_anon:4kB active_file:18140kB inactive_file:12516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113980kB dirty:1380kB writeback:0kB shmem:1180kB writeback_tmp:0kB kernel_stack:3392kB pagetables:4116kB sec_pagetables:0kB all_unreclaimable? no [ 550.159150][T27897] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 550.159260][T27897] lowmem_reserve[]: 0 2866 7844 0 [ 550.159297][T27897] Node 0 DMA32 free:2950308kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953940kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 550.189724][T27896] netlink: 140 bytes leftover after parsing attributes in process `syz.7.9057'. [ 550.214055][T27897] lowmem_reserve[]: 0 0 4978 0 [ 550.261826][T27897] Node 0 Normal free:4519868kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:28024kB inactive_anon:4kB active_file:18140kB inactive_file:12516kB unevictable:0kB writepending:1380kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:96084kB local_pcp:4144kB free_cma:0kB [ 550.292132][T27897] lowmem_reserve[]: 0 0 0 0 [ 550.296765][T27897] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 550.309415][T27897] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 1*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950308kB [ 550.325886][T27897] Node 0 Normal: 357*4kB (UME) 793*8kB (UM) 1812*16kB (UME) 1894*32kB (UME) 1288*64kB (UME) 1093*128kB (UME) 1030*256kB (UME) 1168*512kB (UME) 1018*1024kB (UM) 125*2048kB (UME) 498*4096kB (UM) = 4519644kB [ 550.346112][T27897] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 550.355539][T27897] 7966 total pagecache pages [ 550.360197][T27897] 7 pages in swap cache [ 550.364421][T27897] Free swap = 124152kB [ 550.368637][T27897] Total swap = 124996kB [ 550.372785][T27897] 2097051 pages RAM [ 550.376580][T27897] 0 pages HighMem/MovableOnly [ 550.381266][T27897] 80174 pages reserved [ 550.596995][T27929] FAULT_INJECTION: forcing a failure. [ 550.596995][T27929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.610251][T27929] CPU: 0 UID: 0 PID: 27929 Comm: syz.6.9070 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 550.620690][T27929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 550.630758][T27929] Call Trace: [ 550.634052][T27929] [ 550.637031][T27929] dump_stack_lvl+0xf2/0x150 [ 550.641707][T27929] dump_stack+0x15/0x20 [ 550.645872][T27929] should_fail_ex+0x223/0x230 [ 550.650633][T27929] should_fail+0xb/0x10 [ 550.654921][T27929] should_fail_usercopy+0x1a/0x20 [ 550.660005][T27929] _copy_from_user+0x1e/0xb0 [ 550.664606][T27929] copy_msghdr_from_user+0x54/0x2a0 [ 550.669840][T27929] ? __fget_files+0x17c/0x1c0 [ 550.674565][T27929] __sys_sendmsg+0x13e/0x230 [ 550.679220][T27929] __x64_sys_sendmsg+0x46/0x50 [ 550.683998][T27929] x64_sys_call+0x2734/0x2dc0 [ 550.688697][T27929] do_syscall_64+0xc9/0x1c0 [ 550.693207][T27929] ? clear_bhb_loop+0x55/0xb0 [ 550.697932][T27929] ? clear_bhb_loop+0x55/0xb0 [ 550.702615][T27929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.708569][T27929] RIP: 0033:0x7ff57c040809 [ 550.712993][T27929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.732654][T27929] RSP: 002b:00007ff57a6b7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.741083][T27929] RAX: ffffffffffffffda RBX: 00007ff57c205fa0 RCX: 00007ff57c040809 [ 550.749142][T27929] RDX: 0000000000000040 RSI: 0000000020000600 RDI: 0000000000000004 [ 550.757145][T27929] RBP: 00007ff57a6b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 550.765130][T27929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.773292][T27929] R13: 0000000000000000 R14: 00007ff57c205fa0 R15: 00007ffc52887ab8 [ 550.781312][T27929] [ 550.785510][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 550.785528][ T29] audit: type=1326 audit(1732840106.138:57485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27926 comm="syz.4.9071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab90809 code=0x7ffc0000 [ 550.815425][ T29] audit: type=1326 audit(1732840106.138:57486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27926 comm="syz.4.9071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f612ab90809 code=0x7ffc0000 [ 550.844330][ T29] audit: type=1326 audit(1732840106.353:57487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27926 comm="syz.4.9071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab90809 code=0x7ffc0000 [ 550.868007][ T29] audit: type=1326 audit(1732840106.353:57488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27926 comm="syz.4.9071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab90809 code=0x7ffc0000 [ 550.889133][T27937] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9073'. [ 550.892280][ T29] audit: type=1326 audit(1732840106.362:57489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27926 comm="syz.4.9071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f612ab90809 code=0x7ffc0000 [ 550.931062][ T29] audit: type=1326 audit(1732840106.428:57490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27938 comm="syz.3.9074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b00bd0809 code=0x7ffc0000 [ 550.957605][ T29] audit: type=1326 audit(1732840106.428:57491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27938 comm="syz.3.9074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b00bcf170 code=0x7ffc0000 [ 550.981430][ T29] audit: type=1326 audit(1732840106.428:57492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27938 comm="syz.3.9074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6b00bd2037 code=0x7ffc0000 [ 551.005210][ T29] audit: type=1326 audit(1732840106.428:57493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27938 comm="syz.3.9074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b00bd0809 code=0x7ffc0000 [ 551.029354][ T29] audit: type=1326 audit(1732840106.428:57494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27938 comm="syz.3.9074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6b00bd2037 code=0x7ffc0000 [ 551.191777][T27946] loop6: detected capacity change from 0 to 164 [ 551.219987][T27946] syz.6.9077: attempt to access beyond end of device [ 551.219987][T27946] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 551.234154][T27946] syz.6.9077: attempt to access beyond end of device [ 551.234154][T27946] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 551.247777][T27946] syz.6.9077: attempt to access beyond end of device [ 551.247777][T27946] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 551.261550][T27946] syz.6.9077: attempt to access beyond end of device [ 551.261550][T27946] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 551.275049][T27946] syz.6.9077: attempt to access beyond end of device [ 551.275049][T27946] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 551.288580][T27946] syz.6.9077: attempt to access beyond end of device [ 551.288580][T27946] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 551.302147][T27946] syz.6.9077: attempt to access beyond end of device [ 551.302147][T27946] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 551.315600][T27946] syz.6.9077: attempt to access beyond end of device [ 551.315600][T27946] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 551.329147][T27946] syz.6.9077: attempt to access beyond end of device [ 551.329147][T27946] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 551.501415][T27952] loop8: detected capacity change from 0 to 512 [ 551.508147][T27952] EXT4-fs: Ignoring removed orlov option [ 551.517759][T27952] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 551.530122][T27952] EXT4-fs (loop8): 1 orphan inode deleted [ 551.530143][T27952] EXT4-fs (loop8): 1 truncate cleaned up [ 551.530663][T27952] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.572744][T26636] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.639244][T27948] x_tables: unsorted underflow at hook 1 [ 552.256267][T27987] syzkaller0: entered promiscuous mode [ 552.261870][T27987] syzkaller0: entered allmulticast mode [ 552.690793][T28002] hub 2-0:1.0: USB hub found [ 552.707998][T28002] hub 2-0:1.0: 8 ports detected [ 553.139041][T28008] x_tables: unsorted underflow at hook 1 [ 553.186734][T28015] siw: device registration error -23 [ 553.200684][T28015] loop7: detected capacity change from 0 to 512 [ 553.253260][T28019] netlink: 'syz.4.9107': attribute type 10 has an invalid length. [ 553.261230][T28019] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9107'. [ 553.300311][T28019] bridge0: port 3(ipvlan0) entered blocking state [ 553.306988][T28019] bridge0: port 3(ipvlan0) entered disabled state [ 553.317792][T28019] ipvlan0: entered allmulticast mode [ 553.323197][T28019] veth0_vlan: entered allmulticast mode [ 553.336546][T28019] ipvlan0: left allmulticast mode [ 553.341762][T28019] veth0_vlan: left allmulticast mode [ 553.348049][T28019] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 553.384044][T28027] loop6: detected capacity change from 0 to 764 [ 553.493567][T28038] tipc: Enabling of bearer rejected, failed to enable media [ 553.768247][T28048] siw: device registration error -23 [ 553.778776][T28048] loop7: detected capacity change from 0 to 512 [ 553.948907][T28063] hub 2-0:1.0: USB hub found [ 553.953725][T28063] hub 2-0:1.0: 8 ports detected [ 553.994593][T28068] tipc: Enabling of bearer rejected, failed to enable media [ 554.311055][T28102] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9142'. [ 554.320474][T28102] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9142'. [ 554.368442][T28109] tipc: Enabling of bearer rejected, failed to enable media [ 554.393846][T28112] loop6: detected capacity change from 0 to 1024 [ 554.404842][T28112] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.9141: Failed to acquire dquot type 0 [ 554.416529][T28112] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 554.431625][T28112] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #13: comm syz.6.9141: corrupted inode contents [ 554.444417][T28112] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #13: comm syz.6.9141: mark_inode_dirty error [ 554.465356][T28112] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #13: comm syz.6.9141: corrupted inode contents [ 554.488131][T28112] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #13: comm syz.6.9141: mark_inode_dirty error [ 554.500063][T28112] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #13: comm syz.6.9141: corrupted inode contents [ 554.513449][T28112] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 554.524079][T28112] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #13: comm syz.6.9141: corrupted inode contents [ 554.536436][T28112] EXT4-fs error (device loop6): ext4_truncate:4240: inode #13: comm syz.6.9141: mark_inode_dirty error [ 554.548097][T28112] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 554.563509][T28112] EXT4-fs (loop6): 1 truncate cleaned up [ 554.571297][T28112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.716044][T28139] FAULT_INJECTION: forcing a failure. [ 554.716044][T28139] name failslab, interval 1, probability 0, space 0, times 0 [ 554.728774][T28139] CPU: 0 UID: 0 PID: 28139 Comm: syz.4.9156 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 554.739331][T28139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 554.749481][T28139] Call Trace: [ 554.752824][T28139] [ 554.755756][T28139] dump_stack_lvl+0xf2/0x150 [ 554.760349][T28139] dump_stack+0x15/0x20 [ 554.764556][T28139] should_fail_ex+0x223/0x230 [ 554.769257][T28139] should_failslab+0x8f/0xb0 [ 554.773876][T28139] kmem_cache_alloc_node_noprof+0x59/0x320 [ 554.779769][T28139] ? __alloc_skb+0x10b/0x310 [ 554.784365][T28139] __alloc_skb+0x10b/0x310 [ 554.788800][T28139] alloc_skb_with_frags+0x80/0x450 [ 554.794005][T28139] ? kernel_text_address+0x96/0xb0 [ 554.799128][T28139] ? __kernel_text_address+0xd/0x40 [ 554.804344][T28139] ? unwind_get_return_address+0x16/0x30 [ 554.810092][T28139] sock_alloc_send_pskb+0x435/0x4f0 [ 554.815345][T28139] __ip_append_data+0x182d/0x22e0 [ 554.820456][T28139] ? dst_init+0x208/0x260 [ 554.824890][T28139] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 554.830604][T28139] ? _raw_spin_unlock_bh+0x36/0x40 [ 554.835728][T28139] ? rt_set_nexthop+0x4c7/0x560 [ 554.840600][T28139] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 554.846333][T28139] ip_append_data+0x11f/0x150 [ 554.851115][T28139] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 554.856676][T28139] udp_sendmsg+0x281/0x12f0 [ 554.861203][T28139] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 554.866790][T28139] ? avc_has_perm+0xd4/0x160 [ 554.871391][T28139] ? __pfx_udp_sendmsg+0x10/0x10 [ 554.876349][T28139] inet_sendmsg+0xaf/0xd0 [ 554.880770][T28139] __sock_sendmsg+0x102/0x180 [ 554.885473][T28139] ____sys_sendmsg+0x312/0x410 [ 554.890266][T28139] __sys_sendmmsg+0x227/0x4b0 [ 554.894980][T28139] __x64_sys_sendmmsg+0x57/0x70 [ 554.899889][T28139] x64_sys_call+0x29aa/0x2dc0 [ 554.904659][T28139] do_syscall_64+0xc9/0x1c0 [ 554.909175][T28139] ? clear_bhb_loop+0x55/0xb0 [ 554.913923][T28139] ? clear_bhb_loop+0x55/0xb0 [ 554.918632][T28139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.924546][T28139] RIP: 0033:0x7f612ab90809 [ 554.928969][T28139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.948586][T28139] RSP: 002b:00007f6129207058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 554.957053][T28139] RAX: ffffffffffffffda RBX: 00007f612ad55fa0 RCX: 00007f612ab90809 [ 554.965034][T28139] RDX: 0000000000000003 RSI: 0000000020004540 RDI: 0000000000000003 [ 554.973066][T28139] RBP: 00007f61292070a0 R08: 0000000000000000 R09: 0000000000000000 [ 554.981041][T28139] R10: 00000000240080e4 R11: 0000000000000246 R12: 0000000000000001 [ 554.989030][T28139] R13: 0000000000000000 R14: 00007f612ad55fa0 R15: 00007ffd08c63ae8 [ 554.997099][T28139] [ 555.064282][T28145] xt_l2tp: v2 doesn't support IP mode [ 555.156907][T28146] vhci_hcd: invalid port number 157 [ 555.162261][T28146] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 555.194292][T28150] syz.8.9161[28150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.194350][T28150] syz.8.9161[28150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.205995][T28150] syz.8.9161[28150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.206432][T28148] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9160'. [ 555.224682][T28150] vlan2: entered allmulticast mode [ 555.246319][T28148] all: renamed from ip_vti0 [ 555.255844][T28147] ================================================================== [ 555.263955][T28147] BUG: KCSAN: data-race in call_rcu / mtree_range_walk [ 555.270827][T28147] [ 555.273151][T28147] write to 0xffff8881191c1808 of 8 bytes by task 28148 on cpu 1: [ 555.280890][T28147] call_rcu+0x47/0x430 [ 555.284975][T28147] mas_wmb_replace+0xcc0/0x14d0 [ 555.289841][T28147] mas_wr_store_entry+0x1681/0x2d10 [ 555.295075][T28147] mas_store_prealloc+0x6bf/0x960 [ 555.300112][T28147] __mmap_region+0xdca/0x13f0 [ 555.304806][T28147] mmap_region+0x164/0x1e0 [ 555.309284][T28147] do_mmap+0x718/0xb60 [ 555.313387][T28147] vm_mmap_pgoff+0x133/0x290 [ 555.317993][T28147] ksys_mmap_pgoff+0xd0/0x330 [ 555.322680][T28147] x64_sys_call+0x1940/0x2dc0 [ 555.327372][T28147] do_syscall_64+0xc9/0x1c0 [ 555.331885][T28147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.337802][T28147] [ 555.340153][T28147] read to 0xffff8881191c1808 of 8 bytes by task 28147 on cpu 0: [ 555.347808][T28147] mtree_range_walk+0x140/0x460 [ 555.352671][T28147] mas_walk+0x16e/0x320 [ 555.356833][T28147] lock_vma_under_rcu+0x95/0x260 [ 555.361787][T28147] exc_page_fault+0x150/0x650 [ 555.366481][T28147] asm_exc_page_fault+0x26/0x30 [ 555.371353][T28147] [ 555.373682][T28147] value changed: 0x00007f6aff226fff -> 0xffff8881191c1108 [ 555.380792][T28147] [ 555.383126][T28147] Reported by Kernel Concurrency Sanitizer on: [ 555.389287][T28147] CPU: 0 UID: 0 PID: 28147 Comm: syz.3.9160 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 555.399708][T28147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 555.409860][T28147] ================================================================== [ 555.419626][T24145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.433415][T28152] vcan0 speed is unknown, defaulting to 1000