last executing test programs: 10m31.555302515s ago: executing program 32 (id=757): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x80) 8m11.784433815s ago: executing program 33 (id=2882): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, 0x0, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x70b}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2a}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff7416}]}, @CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_ID={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x35}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x14}, 0xc0d0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_connect={0xf}) syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x101000) (async) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x101000) read(r1, &(0x7f0000000240)=""/66, 0x42) (async) read(r1, &(0x7f0000000240)=""/66, 0x42) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000340)='fd\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000400)) (async) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000400)=0x0) geteuid() (async) r7 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) fsetxattr$system_posix_acl(r4, &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x7}, [{0x2, 0x0, r6}, {0x2, 0x4, 0xee01}, {0x2, 0x0, r7}, {0x2, 0x3, r8}], {0x4, 0x1}, [{0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x4c, 0x3) r10 = dup3(r0, r5, 0x80000) sendmsg$inet_sctp(r10, &(0x7f0000001640)={&(0x7f0000000500)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000540)="f2ce600b7c997c", 0x7}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="014a208ea00727b1fcc48d22e7a4a7ef3148b72cb2317e2926f1506ba9a2d471a2f8794b5c97d747abfc8d74024796c8eab4fe6c7d", 0x35}, {&(0x7f0000000600)="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", 0x1000}], 0x4, 0x0, 0x0, 0x20044801}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}]}, 0x6c}, 0x1, 0x0, 0x0, 0x804}, 0x8081) syz_io_uring_setup(0x52b6, &(0x7f0000001800)={0x0, 0x2cd1, 0x8, 0x1, 0x188, 0x0, r3}, &(0x7f0000001880)=0x0, &(0x7f00000018c0)) syz_io_uring_submit(r12, 0x0, &(0x7f0000001900)=@IORING_OP_WRITE_FIXED={0x5, 0x1f, 0x4000, @fd=r4, 0x3, 0xf42, 0xffff1379, 0x4, 0x0, {0x2}}) (async) syz_io_uring_submit(r12, 0x0, &(0x7f0000001900)=@IORING_OP_WRITE_FIXED={0x5, 0x1f, 0x4000, @fd=r4, 0x3, 0xf42, 0xffff1379, 0x4, 0x0, {0x2}}) sendmmsg$unix(r0, &(0x7f0000002b40)=[{{&(0x7f0000001940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="8b69552ce5268ec5af1c6ddbfcfb3a67bf53293bbd4a27100af6bfce74bc3b1667c0af4e275c42e39c71292be1303402ac9f7c6ec7451c3e5aeb19c023b25d01fbd988350e325ba338f7f766454579f574541c410eea2af14fa8c285da1b6b9599c57272e204bf07589141bdce70bcb122b9b6534f93dc9732fa1f0298d1f3f4c228b31fc708dd5cb511f14a00bd79b6e2e616a87aeee7b93d3f28992bbbc641fb1421e3b626919b5f1473bd19b6047530eda9edf5c8d00d277aa2599603e200470ed9e09ae4324504f5f79039fce70f21552d", 0xd3}], 0x2, &(0x7f0000002b00)=[@cred={{0x1c, 0x1, 0x2, {r2, r6, r9}}}], 0x20, 0x44080}}], 0x1, 0x0) readlink(&(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)=""/4096, 0x1000) gettid() eventfd(0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003bc0)={'team0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f0000003c00)='wlan0\x00') (async) prctl$PR_SET_NAME(0xf, &(0x7f0000003c00)='wlan0\x00') open$dir(&(0x7f0000003c40)='./file0\x00', 0x600001, 0x40) (async) open$dir(&(0x7f0000003c40)='./file0\x00', 0x600001, 0x40) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, 0xffffffffffffffff, &(0x7f0000003c80)={0xc}) syz_open_procfs$namespace(r2, &(0x7f0000003cc0)='ns/mnt\x00') socket$inet(0x2, 0x5, 0x800) timer_settime(0x0, 0x1, &(0x7f0000005dc0)={{0x0, 0x3938700}}, &(0x7f0000005e00)) (async) timer_settime(0x0, 0x1, &(0x7f0000005dc0)={{0x0, 0x3938700}}, &(0x7f0000005e00)) 6m40.159445066s ago: executing program 0 (id=4606): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 6m40.105264886s ago: executing program 0 (id=4608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffa3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xffffffffffffff16, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="070000000000000004000000060000000000cd43", @ANYRES64=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000000000001000000000000811000008b1653d7e5fe531a7728c34a2b3c6389f73c17e1790d982ac93e79afe820e134c9e002633cd2eec34825a021f9a5cd055d553521b8481b296adf67941d7f63f93b748e7694c1d4a54e3a4f279866975fc4760feeff20b9d456fdb4800ac3dcd57b24695e120b88284885f7736404814431bf3d03924e2286671b6f17f2b0a3190f9a3c8e02e4d585fd5269801000000b9ff4050fa916000d3bcf86395ed7c33e8725ce20c542046f8f164e5d0", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000000)=0xb6de, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x200000, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000800)={0x20, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8094}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r11}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x19f, &(0x7f0000000100), 0x80, 0x550, &(0x7f0000000700)="$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") r12 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r12, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r13}, 0x10) fchown(0xffffffffffffffff, 0x0, 0xee01) getpgrp(0x0) 6m39.715345155s ago: executing program 0 (id=4610): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 6m39.672473035s ago: executing program 0 (id=4611): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 6m39.614443704s ago: executing program 0 (id=4612): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x100, 0x65, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe}, {0xffe0, 0xfff1}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xc0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_CLASSID={0x0, 0x1, {0x5, 0xa}}, @TCA_ROUTE4_ACT={0xac, 0x6, [@m_connmark={0xa8, 0x3ffd, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8000}, 0x1}}]}, {0x59, 0x6, "29c73a926c844800b0c5a12127655ff183e766ac4353ec9fdb4dcb187117847d0bcf6c0fff4b8542d433ae15e9a03610e3a4a1a2bd74bfd789486b1763d7215b11c7d55df4f724eb0958db85310739c7dc64ec30c8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}]}]}}, @TCA_RATE={0x1, 0x5, {0x0, 0x40}}]}, 0x100}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x15, 0x5, 0x0) connect$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x20) getsockname$packet(r1, 0x0, &(0x7f0000000580)) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0500000001000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000002000000000000000000000a160856aa4f8bb2d7107a02a0100d4d940471f75d49d3bd880360b8188a8c4433ff7b2d756db7a872bbcdb31c8a65bffa7dc04bb8708dcc3c212711cb87d5f8dc53ab9f68a1564539ead81e0407495a660e8c640ea872e6706494aa9a1147238854fc7edd80fd4987b5683f7bd1fcb4f703515eff4145b35a7e78d9b1370b5e8453dd29ff9720c478c97bad8d1bb9cf91c2600246eba606e96ffc7f12b1db8d90e5022b4752be915dc094ec38fa1dfe8b071a379a3477c78adde5238cc40f76f56f34710663feecd6933861", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x7840, 0x80, 0x8, 0x2, {{0x43, 0x4, 0x1, 0xc, 0x10c, 0x68, 0x0, 0x5, 0x29, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x58, 0x3, [{0x2, 0x12, "76372bb73f3700000064caf4f948ce56"}, {0x0, 0xe, "3f6053235f00779c0a2e649c"}, {0x7, 0xd, "231a4ee44947561a70b3a0"}, {0x0, 0x7, "4a15de54ab"}, {0x1, 0x5, "588343"}, {0x7, 0x4, "45db"}, {0x5, 0x12, "2fe15bbc78eb46c19641cbb7b62b6d99"}, {0x2, 0x3, "f1"}]}, @cipso={0x86, 0x2c, 0x3, [{0x1, 0x2}, {0x1, 0x8, "1df509766a80"}, {0x2, 0x10, "89a78def61de193bcf7da42203cc"}, {0x6, 0xc, "35753406c4354ceeaa94"}]}, @noop, @ssrr={0x89, 0x1b, 0x4c, [@dev={0xac, 0x14, 0x14, 0x40}, @local, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast, @dev={0xac, 0x14, 0x14, 0xf}]}, @noop, @cipso={0x86, 0x54, 0x4f6f3c2524572b88, [{0x7, 0x8, "805c83df79da"}, {0x2, 0x8, "43e0d465ab6d"}, {0x0, 0x12, "cd9b86273453f8024615a3b4d6dcea47"}, {0x6, 0x11, "8b6396032c285ad7760743aa62a799"}, {0x0, 0xe, "d043a665af7d61934c40de88"}, {0x0, 0xd, "8552ab1499a4f59b39c462"}]}]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='kfree\x00', r6}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x20000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000400)={0x2, 0x7f, 0xf00}) 6m39.427527284s ago: executing program 0 (id=4613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000080018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000200)=""/25, 0x39, 0x19, 0x1, 0x4, 0x0, @void, @value}, 0x28) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x4004550c, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) 6m36.298522895s ago: executing program 34 (id=4501): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r1, 0x25, 0x2, @val=@tracing}, 0x20) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) 6m32.757644466s ago: executing program 35 (id=4553): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x61d2, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) 6m28.168222153s ago: executing program 36 (id=4589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40be2900000900020073797a31000000000900010073797a3000000000080005400000000d08000608000000000000004000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000028000380240000800400028004000780040001"], 0xe8}}, 0x0) clock_gettime(0x1, 0x0) 6m24.433927173s ago: executing program 37 (id=4613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000080018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000200)=""/25, 0x39, 0x19, 0x1, 0x4, 0x0, @void, @value}, 0x28) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x4004550c, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) 4m58.214929009s ago: executing program 7 (id=6452): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 4m58.141921449s ago: executing program 7 (id=6455): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000340)={0xc0, "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"}) 4m58.113795139s ago: executing program 7 (id=6457): open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400) 4m58.089239339s ago: executing program 7 (id=6459): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x784, &(0x7f00000007c0)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@usrquota}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @broadcast}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x4, 0xfff2}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80a0}, 0x0) bind$can_j1939(r3, &(0x7f0000000480)={0x1d, r8, 0x3, {}, 0xfd}, 0x18) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0xa, &(0x7f0000000040)=0x401, 0x4) r11 = syz_open_procfs(0x0, &(0x7f0000000380)='comm\x00') fchdir(r11) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r10, &(0x7f0000000000)='map_files\x00') sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0180230100003402050000004bf208000100", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r12 = socket(0x200000100000011, 0x803, 0x0) setsockopt$packet_tx_ring(r12, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r12, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21008}, 0xc, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24000}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) 4m57.884916998s ago: executing program 7 (id=6466): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff000000000000f8ffffffb703000008000000b704000000000000850000008200000095000000000000004d5e4d4277017b7a0b50b49534fd00000000000000000000ffc4227b36ff070000cac80ffa82bbfe6c67634d4f68e415a800660fae1fffe421ace3f26bb7fd691517230d50f6e6c821fdbfbe639c1bba674ffa8d352ec74121f3728bac318c48c87ba10ccd3a1814bf6320a0b9f1289866600ab3d7586cee73bb2c72226fe448aeb804b8b947e7c0043e469b56bcdc9ddbdbceed240389068d17888a553da2795e98"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000500)={0x0, 0x0, 0x10100, 0x0, 0x80000}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000300)=@nl=@proc={0x10, 0x0, 0x0, 0x80}}) io_uring_enter(r3, 0x7ba2, 0xfffdfffd, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r7, 0x2f, 0xb8, 0x9, 0x2, 0x4, @remote, @rand_addr=' \x01\x00', 0x8000, 0x8000, 0x6, 0xb}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r8, 0x0, 0x0, 0x20000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000100004000000000000ec000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, r11, 0x209}, 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r11, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getpgrp(0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r13}) 4m57.497519297s ago: executing program 7 (id=6477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="400018160000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70c0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000090085000000820020005b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c756e616d653dd0"]) 4m57.497251137s ago: executing program 38 (id=6477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="400018160000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70c0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000090085000000820020005b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c756e616d653dd0"]) 4m54.91975252s ago: executing program 9 (id=6503): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000340)={0xc0, "f85627d11a7b72b4aac00795cbe41acca6c4a2a924447afe368389d5f0f405ab98bc90978b90704e35c152198829f0be40ef92a9778e5b677428f940a268962ea5c447240ad55e1dfcd8650a62082bc7a68dfdb900f9b738b8251f84c840e23b899e7d8d0b54a0810cec1117d11f3a8ad839b11e33474ec1586c401c6694a16ffc0cd77dc960bde09e817eedd51d44de2852e01adc9a27e6393d600a9d372aac676748cae28468a87b5dbf611b09b52012feeaced3c7024467e788cb4004944d1f226de158b66468bb0559fc8ed2be03aedcd2244034d6ed1110a36ab788483588cac1eb10a34e443620360a37ae8f88a4ac6821d4f937c21bae079d09d3d4da529fb0841b4bf6a563a06e66fedc741be6f8caf53362b52aaa8b6c76d1efba5cf41a23b4c35cd083d8e06633564aa58066e0477ad2341db120dae08b72915e9c8de62fd77651d6696e14f9fd897b2291bbf75dc4b797de4908a34b35ec4b48e3a6b89345cf76b2e61717644187dcb6337f895d39943bbed02390bad51ec0ea18b46af36ac7b4eaf00cf047beb2e5e2e7797313786a5a478f76030fcdb0bf20888c9ab09da67a11bfae666584930d7b31c69f81817530c32a094de40f640723e4ef7b058554d77000fcadcd36a9a052c238b63cd5614d263d163a16106a4a4f5f2c4777ad9b8a2fd1bf0a34f9e265ae2162c9d6ffa738b16558847e4498b6fb89"}) 4m54.89795968s ago: executing program 9 (id=6505): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) personality(0xbf0000b) 4m54.829228s ago: executing program 9 (id=6506): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setresuid(0x0, 0xee00, 0x0) syz_clone(0x10100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1}, 0x4) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\a'], 0x48}}, 0x0) 4m54.729338899s ago: executing program 9 (id=6509): mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, 0x0, &(0x7f0000e5f000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x8) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) setregid(0x0, 0x0) mknod$loop(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 4m54.471698579s ago: executing program 9 (id=6512): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000100", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r2], 0x40}}, 0x0) (fail_nth: 5) 4m53.271199136s ago: executing program 9 (id=6527): perf_event_open(&(0x7f00000034c0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100000, 0x0, 0x0, 0x3, 0x76a0680, 0x0, 0x4}, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000004c0)='xen_mmu_pmd_clear\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x100000d, 0x12, r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x82, 0x40000000000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x0, 0x10000000}, r4, 0x1, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a0000000101001eff7f0000cc000000080000007e08261080b12649284a88715528b11ddf19b849ef282fc10687fab2de5ee8b4612d3cf8a9fa3041171b33054696f8446a4f306dc9068c714ae96f47b003c845a529ef8a6a5faaf7487fc24ba2d808108cdc08e5978a3335d1b6b9aa1a45bdd278eedcbfc30091bb1095daaff346994965688b1b3c4434bcdbe7b4b28f80c3ada5d0397f08b3b9e317768215006289be937703e77ce112139cca0ade36b8be29261c2f91aa61a5930f06e392c194", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) execve(0x0, 0x0, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) readv(r7, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/108, 0x6c}], 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) 4m53.270970246s ago: executing program 39 (id=6527): perf_event_open(&(0x7f00000034c0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100000, 0x0, 0x0, 0x3, 0x76a0680, 0x0, 0x4}, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000004c0)='xen_mmu_pmd_clear\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x100000d, 0x12, r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x82, 0x40000000000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x0, 0x10000000}, r4, 0x1, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a0000000101001eff7f0000cc000000080000007e08261080b12649284a88715528b11ddf19b849ef282fc10687fab2de5ee8b4612d3cf8a9fa3041171b33054696f8446a4f306dc9068c714ae96f47b003c845a529ef8a6a5faaf7487fc24ba2d808108cdc08e5978a3335d1b6b9aa1a45bdd278eedcbfc30091bb1095daaff346994965688b1b3c4434bcdbe7b4b28f80c3ada5d0397f08b3b9e317768215006289be937703e77ce112139cca0ade36b8be29261c2f91aa61a5930f06e392c194", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) execve(0x0, 0x0, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) readv(r7, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/108, 0x6c}], 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) 2m49.143674039s ago: executing program 8 (id=8540): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x100, 0x0, 0xffff, 0x5, 0x4, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x5b8, 0x29, 0x3, "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"}], 0x5b8}, 0xf7e5) 2m49.077312759s ago: executing program 8 (id=8544): syz_emit_ethernet(0x92, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c200000000000000000086dd6df2811c005c2f01fe8000000000000000000000000000aafe8000000000000000000000000000aa000200000000000007080000000100000200c204000000080c20880b000000030c000800080086dd080088be000000001703b0010100000000000000a8eb020000000000000100089801080065580000000000000000000000000000edcad93edc70923d95bdc340b896ff588ab93469ec18ef07a11faad335a13db11ad0aa55b22453aeb83b3189864d"], 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) process_mrelease(r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2m48.911850508s ago: executing program 8 (id=8548): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) mlockall(0x1) madvise(&(0x7f0000107000/0x1000)=nil, 0x1000, 0x4) r0 = dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) write$UHID_INPUT(r0, &(0x7f0000000000)={0x18, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) pipe2$9p(&(0x7f0000000240), 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0xc, {0x2, 0x8}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m48.419230067s ago: executing program 8 (id=8550): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_batadv\x00', 0xd3) ioperm(0x6, 0x3, 0xb017) io_uring_setup(0x168e, &(0x7f0000000640)={0x0, 0x6d09, 0x40000, 0x0, 0xffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x44000, 0x68) r2 = gettid() tkill(r2, 0x1) tkill(r2, 0x7) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x1) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0', [{0x20, '#'}, {0x20, '$@*}('}, {}, {0x20, '#+(\\-{'}, {0x20, '^\x00'}, {0x20, 'gre0\x00'}, {0x20, 'gre0\x00'}, {0x20, 'gre0\x00'}], 0xa, "9573e18b19c14c7fe43fbda2f51123500ce1aa1e650342dadbb726c81a9acc2cf1dde08e152e211fa3d3d155a642fece004aa96fd68fd17ec02d6c6d8f8929a9593860fbff4a1b534ec56f11ae2974ddc9ddf0d3941af3e5995a5b7a05ce2c02c44c01052c8ba25a30f4fecc42bf3d1ce6ab2671c9704c38d0fe0faeae53e5da5f78945cdb3754f0ba80eb79ec1cb5b8d21dd1b313bdbf68364e0970e50355adac677110e7e2b7589e02f5c4c81d99f610e43289441c9f601bc764c54d77be9555"}, 0xf1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000100)={'dummy0\x00', 0x3}) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="5825be57aff9352b356be67ca2746357d1787935", 0x14}], 0x1}}], 0x2, 0x0) 2m48.327588037s ago: executing program 8 (id=8552): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 2m48.168736756s ago: executing program 8 (id=8555): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x100, 0x0, 0xffff, 0x5, 0x4, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x5c0, 0x29, 0x3, "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"}], 0x5c0}, 0xf7e5) 2m48.115157546s ago: executing program 40 (id=8555): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x100, 0x0, 0xffff, 0x5, 0x4, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x5c0, 0x29, 0x3, "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"}], 0x5c0}, 0xf7e5) 1m35.039911818s ago: executing program 1 (id=9667): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="59bb22bd70000000200011000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r1, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4e63, 0x2a}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x48e4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe}}}, 0x24}}, 0x0) 1m35.009600428s ago: executing program 1 (id=9669): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x7400}, 0x20000000) 1m34.947675747s ago: executing program 1 (id=9670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = getpid() setreuid(0xee00, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0x0], 0x1}, 0x58) 1m34.946796718s ago: executing program 1 (id=9671): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m34.926828917s ago: executing program 1 (id=9672): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) syz_emit_ethernet(0x82, &(0x7f00000001c0)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0xfd}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, @local, [@hopopts={0x11}], "fafb17c163a3040b7758ba1b5be6d88a"}}}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000170000004c0006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987ccb8198904000500080006000300ffff"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r5, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r3) 1m34.762382007s ago: executing program 1 (id=9676): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x3, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) 1m34.748798387s ago: executing program 41 (id=9676): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x3, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) 1.982169425s ago: executing program 3 (id=11665): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611990000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYRESDEC, @ANYRES8=r2, @ANYRESDEC=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioprio_set$uid(0x3, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x943, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x123482, 0x0) write$P9_RLERRORu(r7, 0x0, 0x3b) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x81, 0x200001) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000002c0)={0x3ff, 0xf7}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_free\x00', r9, 0x0, 0x3}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) 1.880484165s ago: executing program 3 (id=11669): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x20002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r2 = dup(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x3, 0x4, 0x7ffc1ffb}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x11, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7c1, &(0x7f0000001a00)="$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") 1.522702254s ago: executing program 3 (id=11680): mq_open(0x0, 0x40, 0x40, &(0x7f00000000c0)={0x1, 0x698b, 0x9, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x6}, 0x38) r4 = fspick(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000340)='.-)\x00', 0x0, r2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@delchain={0x3c, 0x64, 0xf31, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x6, 0xd}, {0xffe7, 0xffff}, {0xa, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2f7}]}}]}, 0x3c}}, 0x1000000) 1.247269123s ago: executing program 3 (id=11686): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='f2fs_gc_begin\x00', r0, 0x0, 0x3}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$phonet(0x23, 0x2, 0x1) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/144, 0x90}, 0x0) setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000740)=0x7e6, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x10ca, &(0x7f00000043c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004e6610bc0068000005069078ac1414aae0000002071f5064010101ac141443ac1e0101ac1e0001e0000001ac1e00010a010101441850c03c6000000000000100000002000000050000000201009404010044243c71e000000100000006ac1414aa00000006640101020000000400000000000000800000004e224e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) r6 = syz_io_uring_setup(0x5248, &(0x7f0000000080)={0x0, 0x101fab, 0x1000, 0xffffffff, 0x39c}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 1.218506833s ago: executing program 4 (id=11687): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x1c1c41, 0x6) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1.178024463s ago: executing program 4 (id=11691): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000007c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) mount(0x0, 0x0, &(0x7f0000000800)='9p\x00', 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffec9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r4, 0x4004550c, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = mq_open(&(0x7f000084dff0)='!selynuxselinux\x00', 0x6e93ebbbcc0884f2, 0x184, &(0x7f0000000000)={0x2000000000002000, 0x1, 0x3}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000e00000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000bc0)=ANY=[@ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0xec, &(0x7f00000003c0)=""/236, 0x41000, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x3, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[r6], &(0x7f0000000580)=[{0x1, 0x40001, 0x11, 0x7}], 0x10, 0xabd, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000980)={r2, 0xffffffffffffffff, 0xb, 0x4608, @val=@tracing={0x0, 0x3}}, 0x20) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840), 0x4) 909.310972ms ago: executing program 4 (id=11699): r0 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x1, 0x0, 0x0, 0x5, 0x10200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x9, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffff3, 0x8c402) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x401, 0x7, 0x3, 0x3, 0x6, r0}) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f00000000c0)=0x7f) r2 = syz_pidfd_open(r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x608) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=' \x00\x00\x00\f \x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="72758bff63908c07000000fdc2762b0b3f", @ANYRES64=0x0], 0x20) setns(r2, 0x24020000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) 852.203502ms ago: executing program 4 (id=11703): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x0, 0x4000000000000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r0}, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYRES64=r4, @ANYRES64=0x0, @ANYRESHEX=r4], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000011000000800000046000000a1450000", @ANYRES32=r1, @ANYBLOB="9d0c0000000200"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0100000003000000030000000200"/28], 0x50) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f00000002c0)=0xfffff269) fallocate(0xffffffffffffffff, 0x0, 0x7, 0x8000008001001f1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) readlink(0x0, 0x0, 0x0) 835.491132ms ago: executing program 4 (id=11706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) 788.465802ms ago: executing program 4 (id=11710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x2f, 0xf7, 0x0, 0xfff, 0x0, @private1, @empty, 0x80, 0x0, 0x1, 0x8}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000002"], 0x48) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x1, 0x0) setpriority(0x2, 0xff, 0x0) r10 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r11 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r11, r10, 0x0, 0x0) r12 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r12, r10, r11, 0x0) 556.437411ms ago: executing program 6 (id=11722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 525.540051ms ago: executing program 6 (id=11724): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x0, 0xfff, 0x7, 0x2941, 0xa3ea, 0xa, 0x5, 0xd913, 0x6, 0xffffffff, 0xe, 0xf22, 0x0, 0xffffff04, 0x80000001, 0x8d2, 0x3, 0x8, 0xc1f6, 0x1ff, 0xfffffeff, 0x2, 0x3f32f236, 0x10001, 0x3, 0x7f, 0x101, 0x7, 0x48f, 0xc, 0xa, 0x3, 0xb, 0x9, 0xd, 0x2, 0x3ff, 0xffff7fff, 0xb3, 0x4, 0x3, 0x0, 0x0, 0x3ff, 0x3, 0x7f, 0x8, 0x9, 0x6, 0x9, 0x7, 0x3, 0x3, 0xf32b, 0xe3, 0x1, 0x2, 0xc3c5, 0x8061, 0x4, 0x9, 0x1, 0x1, 0x5, 0x7, 0x7, 0xffffff95, 0x9, 0x2, 0x6, 0x0, 0x1, 0xd7fe, 0x9, 0x8, 0x2, 0x1000, 0xe, 0x19, 0x6, 0x0, 0x3a08, 0x120000, 0x0, 0x1, 0xd, 0xfffff596, 0x0, 0x1, 0x3, 0x6, 0x401, 0xffffff22, 0x4, 0x3ff, 0x3, 0x10000, 0x8, 0x7, 0x9, 0xff0, 0x7, 0x6, 0x5, 0x6, 0x20f, 0x6, 0x0, 0x5e5ffef, 0x7ff, 0x3, 0x8, 0x4c7, 0x5, 0x74, 0x6, 0x8, 0x4, 0x10, 0x10000, 0x3, 0x2, 0x9, 0x7, 0x800000, 0x0, 0x0, 0x5, 0xc, 0x410001, 0x0, 0x84d, 0x5, 0x8, 0x5, 0x20, 0x6, 0x5, 0x1, 0x81, 0x4, 0x7, 0x1, 0xbb3, 0x0, 0x0, 0x9, 0x5, 0x4, 0x7, 0x7fff, 0x0, 0xeedc, 0x4, 0x7, 0x5, 0xc0, 0x7, 0x1, 0x1, 0x8, 0x401, 0x6, 0x1, 0x8, 0x4, 0x8, 0x1, 0x2, 0x1ff, 0x1, 0x4, 0x0, 0x3, 0xc, 0x4, 0x1, 0x9, 0x1, 0xc00, 0x0, 0x0, 0xafe, 0x3, 0x5, 0xfff, 0x5f0f, 0x6, 0x7ff, 0x4, 0x7, 0x1, 0x4, 0x6, 0xfffffff8, 0x1, 0x7, 0xf, 0x40000000, 0x3c33, 0x5d5efec9, 0x7fffffff, 0x1000, 0x1, 0x7f, 0x5cc9, 0x6b, 0x8001, 0x190, 0x7, 0x7, 0x4, 0xda, 0x7ff, 0x5, 0x6362, 0xd, 0x4, 0xffffffff, 0xb5d9, 0x7, 0x100, 0x1, 0x1, 0x3, 0x3ff, 0x1, 0x5, 0x3ff, 0x0, 0x1, 0x81, 0x4, 0x8, 0xffff5713, 0xfffffff8, 0x3, 0x2, 0xfffffffc, 0x10001, 0x3, 0x8, 0x9, 0x8, 0x5, 0x2c4b, 0x1, 0x863, 0x7, 0x0, 0x3, 0xfffffe01, 0x8, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x0, {0x2, 0xf0, 0x3}, 0xfd}, 0x18) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xdece, 0x0, 0x10000, 0xfffffffa}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0xd8, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r8, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r9 = socket$packet(0x11, 0xa, 0x300) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffec6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7fbc0002}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r13}, &(0x7f0000000040), &(0x7f0000000140)=r12}, 0x20) poll(&(0x7f0000000340)=[{r12, 0x400}], 0x1, 0x3) 524.717081ms ago: executing program 2 (id=11725): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) ftruncate(0xffffffffffffffff, 0xc17a) io_setup(0x200, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 379.162421ms ago: executing program 2 (id=11727): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000140)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0xa, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x0, 0x3, 0x8000, 0x0, 0xffffffffffffffff, 0x40080000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x2, 0x0, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000000180550000000000000000000c"], 0x30}], 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000180)={&(0x7f0000001140)=""/144, 0x90}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) r10 = socket$isdn(0x22, 0x2, 0x23) r11 = socket$isdn(0x22, 0x2, 0x23) r12 = dup3(r11, r10, 0x0) bind$isdn(r12, &(0x7f0000000000)={0x22, 0x7f, 0xa, 0x7, 0x5}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r9, 0x0, 0x40}, 0x18) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000700)) mkdir(0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000980)=0x59) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095", @ANYRES32=r1, @ANYRES8=0x0], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 343.046871ms ago: executing program 5 (id=11729): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x4b67, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000003900090000000000000000000200000004000000280001802400a4"], 0x40}}, 0x0) 342.201221ms ago: executing program 3 (id=11730): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000007c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) mount(0x0, 0x0, &(0x7f0000000800)='9p\x00', 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffec9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r4, 0x4004550c, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = mq_open(&(0x7f000084dff0)='!selynuxselinux\x00', 0x6e93ebbbcc0884f2, 0x184, &(0x7f0000000000)={0x2000000000002000, 0x1, 0x3}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000e00000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000bc0)=ANY=[@ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0xec, &(0x7f00000003c0)=""/236, 0x41000, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x3, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[r6], &(0x7f0000000580)=[{0x1, 0x40001, 0x11, 0x7}], 0x10, 0xabd, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000980)={r2, 0xffffffffffffffff, 0xb, 0x4608, @val=@tracing={0x0, 0x3}}, 0x20) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840), 0x4) 263.4589ms ago: executing program 6 (id=11731): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={0x0, r0}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = syz_io_uring_setup(0x11b, &(0x7f0000000300)={0x0, 0x48f0, 0x0, 0x3, 0x3bc}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x49, 0x29c780}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 262.77438ms ago: executing program 2 (id=11732): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='\x00\xf5g\x00\x00\xd2\xb8o\x1ew\x16\xbf\xcbe\x1f\xaa\xaa3\x8e\xa1{\x00\xdb\xeb\'\xb8G\x17\x82@', &(0x7f0000000440)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x2000000d, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x47, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x14, 0xa3, 0x9, 0x4, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_spirange={0x2, 0x18, 0x4d4, 0x4d3}]}, 0x20}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x68}}, 0x24048005) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) mount(0x0, &(0x7f0000003480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x2092095, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000080000000000000000000009500000000000000da1bd07791f5e5b999ace3b710497c691ed8ebd4e46148f3065e5e9802144bf3398e4d5b9a457647138ac6756b976930dd5e6fc10a23feb2a0abf5dd12ac22a1b24325ede494a5e3b9848fe92a22c9701fda4aeb4e4ada940b88edbfa0ebe6465add37eb7f422af1a4ddcfb8e4f1a8d2094e9fc214a24bce22e73846c620d69bb2f1ab4a0821e6568c1f305414a4bd550065da33ab0ceacd7ab75cdc42f1e5317dc077e6fe24e6606121e9e541f6ac2a42c90b090f7d76c5c7978cdb19b7d5c21dfc9110a3953fc0ff"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000640)={&(0x7f00000004c0)=""/16, 0x7000, 0x800, 0x10, 0x2}, 0x20) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 39.97833ms ago: executing program 6 (id=11742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000740)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001e00010010000000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="538f00000a6fb0d1815d833c250caf606b417e05f898384f79959fdc4ad72dc9c168a91febd9ab03d5d6b5ea76f3677216b2e58db821e3286b303463e43c631089c1e80b0ad5ebc526e609cb8ac543e1ef873bd1536bb32fd43c8123ce172d112b51bed2508dfb4bb35c729a870b4b7e3c716a1c9641c69e882bcf107a875b8183ba5cc5108cddf7af2c033672e3ed8fa448ab76e71ec3622bf7448bdb7b1def3dbae9f4ef5f5cd42ed8e86f07c0bce515a078fae112f8c308ac2249f9269d33acb11f5e72d4758037b7816c0a9655206fca0100"/226], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 38.33646ms ago: executing program 6 (id=11743): mq_open(0x0, 0x40, 0x40, &(0x7f00000000c0)={0x1, 0x698b, 0x9, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x6}, 0x38) r4 = fspick(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000340)='.-)\x00', 0x0, r2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@delchain={0x3c, 0x64, 0xf31, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x6, 0xd}, {0xffe7, 0xffff}, {0xa, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2f7}]}}]}, 0x3c}}, 0x1000000) 0s ago: executing program 5 (id=11744): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff000000000000f8ffffffb703000008000000b704000000000000850000008200000095000000000000004d5e4d4277017b7a0b50b49534fd00000000000000000000ffc4227b36ff070000cac80ffa82bbfe6c67634d4f68e415a800660fae1fffe421ace3f26bb7fd691517230d50f6e6c821fdbfbe639c1bba674ffa8d352ec74121f3728bac318c48c87ba10ccd3a1814bf6320a0b9f1289866600ab3d7586cee73bb2c72226fe448aeb804b8b947e7c0043e469b56bcdc9ddbdbceed240389068d17888a553da2795e98"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000500)={0x0, 0x0, 0x10100, 0x0, 0x80000}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000300)=@nl=@proc={0x10, 0x0, 0x0, 0x80}}) io_uring_enter(r3, 0x7ba2, 0xfffdfffd, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r7, 0x2f, 0xb8, 0x9, 0x2, 0x4, @remote, @rand_addr=' \x01\x00', 0x8000, 0x8000, 0x6, 0xb}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r8, 0x0, 0x0, 0x20000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, r10, 0x209}, 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r10, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getpgrp(0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, 0x0) kernel console output (not intermixed with test programs): _u) failed with errno=-22 [ 681.016712][ T8139] usb usb4: usbfs: process 8139 (syz.4.10827) did not claim interface 0 before use [ 681.035871][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 681.035889][ T29] audit: type=1400 audit(1736563641.333:37121): avc: denied { bind } for pid=8134 comm="syz.5.10826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 681.064929][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10826'. [ 681.082049][ T29] audit: type=1400 audit(1736563641.353:37122): avc: denied { create } for pid=8134 comm="syz.5.10826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 681.116417][ T8141] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 681.217910][ T8151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.243527][ T8151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.245130][ T29] audit: type=1326 audit(1736563641.533:37123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.4.10832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6195f55d29 code=0x7ffc0000 [ 681.275256][ T29] audit: type=1326 audit(1736563641.533:37124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.4.10832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6195f55d29 code=0x7ffc0000 [ 681.299097][ T29] audit: type=1326 audit(1736563641.533:37125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.4.10832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f6195f55d29 code=0x7ffc0000 [ 681.322685][ T29] audit: type=1326 audit(1736563641.533:37126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.4.10832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6195f55d29 code=0x7ffc0000 [ 681.346312][ T29] audit: type=1326 audit(1736563641.533:37127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.4.10832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6195f55d29 code=0x7ffc0000 [ 681.369969][ T29] audit: type=1326 audit(1736563641.533:37128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.4.10832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6195f55d29 code=0x7ffc0000 [ 681.393486][ T29] audit: type=1326 audit(1736563641.533:37129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.4.10832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6195f55d29 code=0x7ffc0000 [ 681.393520][ T29] audit: type=1326 audit(1736563641.533:37130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.4.10832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6195f55d29 code=0x7ffc0000 [ 681.575090][ T8170] usb usb4: usbfs: process 8170 (syz.5.10838) did not claim interface 0 before use [ 681.606912][ T8173] FAULT_INJECTION: forcing a failure. [ 681.606912][ T8173] name failslab, interval 1, probability 0, space 0, times 0 [ 681.619690][ T8173] CPU: 1 UID: 0 PID: 8173 Comm: syz.5.10839 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 681.630512][ T8173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 681.640596][ T8173] Call Trace: [ 681.643894][ T8173] [ 681.646859][ T8173] dump_stack_lvl+0xf2/0x150 [ 681.651571][ T8173] dump_stack+0x15/0x1a [ 681.655858][ T8173] should_fail_ex+0x223/0x230 [ 681.660553][ T8173] ? __request_region+0x57/0x430 [ 681.665711][ T8173] should_failslab+0x8f/0xb0 [ 681.670350][ T8173] __kmalloc_cache_noprof+0x4e/0x320 [ 681.675671][ T8173] __request_region+0x57/0x430 [ 681.680450][ T8173] ? __put_partials+0xf0/0x150 [ 681.685304][ T8173] ? __slab_free+0x67/0x2b0 [ 681.689849][ T8173] serial8250_request_std_resource+0x115/0x250 [ 681.696093][ T8173] serial8250_config_port+0x39/0x2c20 [ 681.701608][ T8173] ? free_resource+0x106/0x260 [ 681.706457][ T8173] ? __release_region+0x1d7/0x240 [ 681.711499][ T8173] univ8250_config_port+0x280/0x360 [ 681.716805][ T8173] uart_ioctl+0xc22/0xe20 [ 681.721335][ T8173] ? ioctl_has_perm+0x28d/0x2e0 [ 681.726249][ T8173] ? do_vfs_ioctl+0x96e/0x1530 [ 681.731030][ T8173] ? tty_jobctrl_ioctl+0x2ab/0x810 [ 681.736217][ T8173] tty_ioctl+0x815/0xbe0 [ 681.740479][ T8173] ? __pfx_tty_ioctl+0x10/0x10 [ 681.745281][ T8173] __se_sys_ioctl+0xc9/0x140 [ 681.749971][ T8173] __x64_sys_ioctl+0x43/0x50 [ 681.754661][ T8173] x64_sys_call+0x1690/0x2dc0 [ 681.759378][ T8173] do_syscall_64+0xc9/0x1c0 [ 681.763894][ T8173] ? clear_bhb_loop+0x55/0xb0 [ 681.768696][ T8173] ? clear_bhb_loop+0x55/0xb0 [ 681.773379][ T8173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.779300][ T8173] RIP: 0033:0x7f15578f5d29 [ 681.783721][ T8173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.803337][ T8173] RSP: 002b:00007f1555f61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.811757][ T8173] RAX: ffffffffffffffda RBX: 00007f1557ae5fa0 RCX: 00007f15578f5d29 [ 681.819743][ T8173] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000003 [ 681.827748][ T8173] RBP: 00007f1555f61090 R08: 0000000000000000 R09: 0000000000000000 [ 681.835816][ T8173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.843791][ T8173] R13: 0000000000000000 R14: 00007f1557ae5fa0 R15: 00007ffdb505af28 [ 681.851786][ T8173] [ 681.876079][ T8181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.884667][ T8181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.913916][ T8184] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10842'. [ 681.927745][ T8184] loop5: detected capacity change from 0 to 512 [ 681.949525][ T8184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.962853][ T8184] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.992242][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.009897][ T8192] FAULT_INJECTION: forcing a failure. [ 682.009897][ T8192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.023633][ T8192] CPU: 0 UID: 0 PID: 8192 Comm: syz.5.10843 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 682.034406][ T8192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 682.044536][ T8192] Call Trace: [ 682.047814][ T8192] [ 682.050745][ T8192] dump_stack_lvl+0xf2/0x150 [ 682.055496][ T8192] dump_stack+0x15/0x1a [ 682.059697][ T8192] should_fail_ex+0x223/0x230 [ 682.064390][ T8192] should_fail+0xb/0x10 [ 682.068555][ T8192] should_fail_usercopy+0x1a/0x20 [ 682.073598][ T8192] _copy_from_user+0x1e/0xb0 [ 682.078241][ T8192] copy_msghdr_from_user+0x54/0x2a0 [ 682.083495][ T8192] ? __fget_files+0x17c/0x1c0 [ 682.088337][ T8192] __sys_sendmsg+0x13e/0x230 [ 682.092956][ T8192] __x64_sys_sendmsg+0x46/0x50 [ 682.097762][ T8192] x64_sys_call+0x2734/0x2dc0 [ 682.102543][ T8192] do_syscall_64+0xc9/0x1c0 [ 682.107114][ T8192] ? clear_bhb_loop+0x55/0xb0 [ 682.111903][ T8192] ? clear_bhb_loop+0x55/0xb0 [ 682.116599][ T8192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.122588][ T8192] RIP: 0033:0x7f15578f5d29 [ 682.127022][ T8192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.146654][ T8192] RSP: 002b:00007f1555f61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.155182][ T8192] RAX: ffffffffffffffda RBX: 00007f1557ae5fa0 RCX: 00007f15578f5d29 [ 682.163169][ T8192] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 682.171258][ T8192] RBP: 00007f1555f61090 R08: 0000000000000000 R09: 0000000000000000 [ 682.179346][ T8192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.187414][ T8192] R13: 0000000000000000 R14: 00007f1557ae5fa0 R15: 00007ffdb505af28 [ 682.195397][ T8192] [ 682.210375][ T8194] 9pnet_rdma: rdma_create_trans (8194): problem binding to privport: 13 [ 682.239323][ T8200] usb usb4: usbfs: process 8200 (syz.3.10847) did not claim interface 0 before use [ 682.314449][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10846'. [ 682.352828][ T8213] FAULT_INJECTION: forcing a failure. [ 682.352828][ T8213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.366083][ T8213] CPU: 1 UID: 0 PID: 8213 Comm: syz.3.10852 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 682.376879][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 682.387113][ T8213] Call Trace: [ 682.390409][ T8213] [ 682.393368][ T8213] dump_stack_lvl+0xf2/0x150 [ 682.396323][ T8217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.398055][ T8213] dump_stack+0x15/0x1a [ 682.410560][ T8213] should_fail_ex+0x223/0x230 [ 682.410804][ T8217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.415251][ T8213] should_fail+0xb/0x10 [ 682.427133][ T8213] should_fail_usercopy+0x1a/0x20 [ 682.432193][ T8213] _copy_to_user+0x20/0xa0 [ 682.436735][ T8213] simple_read_from_buffer+0xa0/0x110 [ 682.442199][ T8213] proc_fail_nth_read+0xf9/0x140 [ 682.447216][ T8213] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 682.452797][ T8213] vfs_read+0x1a2/0x700 [ 682.457000][ T8213] ? __rcu_read_unlock+0x4e/0x70 [ 682.461994][ T8213] ? __fget_files+0x17c/0x1c0 [ 682.466749][ T8213] ksys_read+0xe8/0x1b0 [ 682.470948][ T8213] __x64_sys_read+0x42/0x50 [ 682.475491][ T8213] x64_sys_call+0x2874/0x2dc0 [ 682.480306][ T8213] do_syscall_64+0xc9/0x1c0 [ 682.484822][ T8213] ? clear_bhb_loop+0x55/0xb0 [ 682.489540][ T8213] ? clear_bhb_loop+0x55/0xb0 [ 682.494233][ T8213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.500216][ T8213] RIP: 0033:0x7f256e96473c [ 682.504722][ T8213] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 682.524428][ T8213] RSP: 002b:00007f256cfd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 682.532872][ T8213] RAX: ffffffffffffffda RBX: 00007f256eb55fa0 RCX: 00007f256e96473c [ 682.540872][ T8213] RDX: 000000000000000f RSI: 00007f256cfd70a0 RDI: 0000000000000003 [ 682.548864][ T8213] RBP: 00007f256cfd7090 R08: 0000000000000000 R09: 0000000000000000 [ 682.556855][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.565026][ T8213] R13: 0000000000000000 R14: 00007f256eb55fa0 R15: 00007ffe8cf12e98 [ 682.573014][ T8213] [ 682.651984][ T8229] loop3: detected capacity change from 0 to 512 [ 682.668782][ T8229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.684302][ T8229] ext4 filesystem being mounted at /396/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 682.701301][ T8229] syz.3.10858[8229] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 682.701371][ T8229] syz.3.10858[8229] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 682.714029][ T8229] syz.3.10858[8229] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 682.760527][ T8235] usb usb4: usbfs: process 8235 (syz.6.10862) did not claim interface 0 before use [ 682.761657][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.954587][ T8249] usb usb4: usbfs: process 8249 (syz.6.10867) did not claim interface 0 before use [ 683.111953][ T8267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.119470][ T8267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.122552][ T8269] usb usb4: usbfs: process 8269 (syz.2.10875) did not claim interface 0 before use [ 683.158803][ T8267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.166818][ T8267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.247099][ T8276] loop5: detected capacity change from 0 to 8192 [ 683.367361][ T8282] FAULT_INJECTION: forcing a failure. [ 683.367361][ T8282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.380466][ T8282] CPU: 1 UID: 0 PID: 8282 Comm: syz.6.10880 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 683.391307][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 683.401559][ T8282] Call Trace: [ 683.404853][ T8282] [ 683.407797][ T8282] dump_stack_lvl+0xf2/0x150 [ 683.412503][ T8282] dump_stack+0x15/0x1a [ 683.416814][ T8282] should_fail_ex+0x223/0x230 [ 683.421604][ T8282] should_fail+0xb/0x10 [ 683.425867][ T8282] should_fail_usercopy+0x1a/0x20 [ 683.430918][ T8282] _copy_to_user+0x20/0xa0 [ 683.435369][ T8282] __se_sys_move_pages+0x114b/0x14b0 [ 683.440774][ T8282] ? proc_fail_nth_write+0x12a/0x150 [ 683.446146][ T8282] ? ksys_write+0x176/0x1b0 [ 683.450686][ T8282] __x64_sys_move_pages+0x78/0x90 [ 683.455892][ T8282] x64_sys_call+0x179b/0x2dc0 [ 683.460601][ T8282] do_syscall_64+0xc9/0x1c0 [ 683.465131][ T8282] ? clear_bhb_loop+0x55/0xb0 [ 683.469825][ T8282] ? clear_bhb_loop+0x55/0xb0 [ 683.474528][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.480456][ T8282] RIP: 0033:0x7f60ee595d29 [ 683.484892][ T8282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.504634][ T8282] RSP: 002b:00007f60ecc01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 683.513065][ T8282] RAX: ffffffffffffffda RBX: 00007f60ee785fa0 RCX: 00007f60ee595d29 [ 683.521068][ T8282] RDX: 0000000020000000 RSI: 20000000000001ab RDI: 0000000000000000 [ 683.529069][ T8282] RBP: 00007f60ecc01090 R08: 0000000020000000 R09: 0000000000000000 [ 683.537100][ T8282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.545095][ T8282] R13: 0000000000000000 R14: 00007f60ee785fa0 R15: 00007ffd7c5a48d8 [ 683.553096][ T8282] [ 683.638933][ T8303] usb usb4: usbfs: process 8303 (syz.6.10888) did not claim interface 0 before use [ 683.678042][ T8305] loop6: detected capacity change from 0 to 512 [ 683.707462][ T8305] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.720239][ T8305] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 683.762096][ T3967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.806854][ T8317] usb usb4: usbfs: process 8317 (syz.3.10893) did not claim interface 0 before use [ 683.843994][ T8321] loop3: detected capacity change from 0 to 512 [ 683.858813][ T8321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.871764][ T8321] ext4 filesystem being mounted at /400/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 683.895773][ T8321] syz.3.10894[8321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.895844][ T8321] syz.3.10894[8321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.908421][ T8321] syz.3.10894[8321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.973414][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.979747][ T8333] loop6: detected capacity change from 0 to 128 [ 684.006795][ T8335] usb usb4: usbfs: process 8335 (syz.3.10899) did not claim interface 0 before use [ 684.037482][ T8337] loop3: detected capacity change from 0 to 512 [ 684.058560][ T8337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.071268][ T8337] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 684.084185][ T8341] netlink: 'syz.2.10902': attribute type 4 has an invalid length. [ 684.090227][ T8342] syz.6.10900: attempt to access beyond end of device [ 684.090227][ T8342] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 684.123639][ T8332] syz.6.10900: attempt to access beyond end of device [ 684.123639][ T8332] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 684.143428][ T8342] syz.6.10900: attempt to access beyond end of device [ 684.143428][ T8342] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 684.161229][ T8342] syz.6.10900: attempt to access beyond end of device [ 684.161229][ T8342] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 684.178830][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.338085][ T8358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.346989][ T8358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.522740][ T8366] loop5: detected capacity change from 0 to 8192 [ 684.600281][ T8372] loop5: detected capacity change from 0 to 512 [ 684.616547][ T8372] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 684.632468][ T8372] syz.5.10911[8372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 684.632552][ T8372] syz.5.10911[8372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 684.644792][ T8372] syz.5.10911[8372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 684.670033][ T8376] 9pnet_rdma: rdma_create_trans (8376): problem binding to privport: 13 [ 684.711771][ T8380] usb usb4: usbfs: process 8380 (syz.5.10913) did not claim interface 0 before use [ 684.834369][ T8392] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 684.896206][ T8394] loop6: detected capacity change from 0 to 512 [ 684.903929][ T8394] EXT4-fs (loop6): orphan cleanup on readonly fs [ 684.910981][ T8394] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10919: bg 0: block 248: padding at end of block bitmap is not set [ 684.925719][ T8394] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.10919: Failed to acquire dquot type 1 [ 684.938428][ T8394] EXT4-fs (loop6): 1 truncate cleaned up [ 685.010833][ T8398] loop3: detected capacity change from 0 to 512 [ 685.030231][ T8398] EXT4-fs (loop3): orphan cleanup on readonly fs [ 685.040393][ T8398] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.10920: bg 0: block 248: padding at end of block bitmap is not set [ 685.058231][ T8398] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.10920: Failed to acquire dquot type 1 [ 685.058623][ T8401] netlink: 'syz.2.10921': attribute type 4 has an invalid length. [ 685.070254][ T8398] EXT4-fs (loop3): 1 truncate cleaned up [ 685.139595][ T8407] loop3: detected capacity change from 0 to 512 [ 685.167993][ T8415] usb usb4: usbfs: process 8415 (syz.6.10927) did not claim interface 0 before use [ 685.169615][ T8407] ext4 filesystem being mounted at /406/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 685.195820][ T8407] syz.3.10924[8407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 685.195972][ T8411] 9pnet_rdma: rdma_create_trans (8411): problem binding to privport: 13 [ 685.201463][ T8418] loop6: detected capacity change from 0 to 512 [ 685.247491][ T8418] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 685.306887][ T8429] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 685.339753][ T8433] netlink: 'syz.3.10934': attribute type 4 has an invalid length. [ 685.368719][ T8437] loop6: detected capacity change from 0 to 512 [ 685.389749][ T8437] EXT4-fs (loop6): orphan cleanup on readonly fs [ 685.399508][ T8437] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10932: bg 0: block 248: padding at end of block bitmap is not set [ 685.414699][ T8437] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.10932: Failed to acquire dquot type 1 [ 685.430629][ T8437] EXT4-fs (loop6): 1 truncate cleaned up [ 685.458909][ T8446] usb usb4: usbfs: process 8446 (syz.2.10939) did not claim interface 0 before use [ 685.531253][ T8457] loop3: detected capacity change from 0 to 512 [ 685.539448][ T8457] EXT4-fs (loop3): orphan cleanup on readonly fs [ 685.546834][ T8457] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.10940: bg 0: block 248: padding at end of block bitmap is not set [ 685.562669][ T8457] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.10940: Failed to acquire dquot type 1 [ 685.577188][ T8457] EXT4-fs (loop3): 1 truncate cleaned up [ 685.592348][ T8463] netlink: 'syz.6.10946': attribute type 4 has an invalid length. [ 685.603781][ T8465] loop5: detected capacity change from 0 to 512 [ 685.629760][ T8468] usb usb4: usbfs: process 8468 (syz.6.10949) did not claim interface 0 before use [ 685.654361][ T8465] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.672034][ T8475] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 685.680082][ T8477] usb usb4: usbfs: process 8477 (syz.6.10952) did not claim interface 0 before use [ 685.824485][ T8483] 9pnet_fd: Insufficient options for proto=fd [ 685.929760][ T8488] loop6: detected capacity change from 0 to 512 [ 685.940739][ T8488] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 685.951072][ T8488] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 685.961795][ T8488] EXT4-fs (loop6): 1 truncate cleaned up [ 685.982149][ T8488] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.10956: Logical block already allocated [ 685.997328][ T8488] EXT4-fs (loop6): Remounting filesystem read-only [ 686.216493][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 686.216513][ T29] audit: type=1400 audit(1736563646.513:37553): avc: denied { read write } for pid=8490 comm="syz.6.10957" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 686.247348][ T29] audit: type=1400 audit(1736563646.513:37554): avc: denied { open } for pid=8490 comm="syz.6.10957" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 686.270740][ T29] audit: type=1400 audit(1736563646.513:37555): avc: denied { ioctl } for pid=8490 comm="syz.6.10957" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 686.297171][ T29] audit: type=1400 audit(1736563646.573:37556): avc: denied { write } for pid=8492 comm="syz.4.10958" name="event2" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 686.320707][ T29] audit: type=1400 audit(1736563646.573:37557): avc: denied { open } for pid=8492 comm="syz.4.10958" path="/dev/input/event2" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 686.345110][ T29] audit: type=1400 audit(1736563646.573:37558): avc: denied { ioctl } for pid=8492 comm="syz.4.10958" path="/dev/input/event2" dev="devtmpfs" ino=248 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 686.500754][ T8514] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 686.565347][ T8522] loop5: detected capacity change from 0 to 512 [ 686.585881][ T8522] EXT4-fs (loop5): orphan cleanup on readonly fs [ 686.600558][ T8522] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10968: bg 0: block 248: padding at end of block bitmap is not set [ 686.623939][ T8522] Quota error (device loop5): write_blk: dquota write failed [ 686.631416][ T8522] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 686.641441][ T8522] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.10968: Failed to acquire dquot type 1 [ 686.656521][ T8522] EXT4-fs (loop5): 1 truncate cleaned up [ 686.774307][ T8551] loop6: detected capacity change from 0 to 512 [ 686.788495][ T29] audit: type=1400 audit(1736563647.083:37559): avc: denied { read } for pid=8548 comm="syz.5.10973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 686.827818][ T8551] ext4 filesystem being mounted at /261/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 686.968669][ T29] audit: type=1400 audit(1736563647.263:37560): avc: denied { ioctl } for pid=8574 comm="syz.6.10978" path="socket:[124401]" dev="sockfs" ino=124401 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 687.014368][ T8580] loop6: detected capacity change from 0 to 512 [ 687.029189][ T8580] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 687.104692][ T8596] loop6: detected capacity change from 0 to 512 [ 687.139621][ T8596] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 687.385982][ T8643] loop3: detected capacity change from 0 to 512 [ 687.436007][ T8643] EXT4-fs (loop3): orphan cleanup on readonly fs [ 687.445439][ T8643] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.10983: bg 0: block 248: padding at end of block bitmap is not set [ 687.483277][ T8643] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.10983: Failed to acquire dquot type 1 [ 687.498488][ T8643] EXT4-fs (loop3): 1 truncate cleaned up [ 687.552412][ T8675] FAULT_INJECTION: forcing a failure. [ 687.552412][ T8675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.565633][ T8675] CPU: 1 UID: 0 PID: 8675 Comm: syz.2.10989 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 687.576436][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 687.586532][ T8675] Call Trace: [ 687.589898][ T8675] [ 687.592989][ T8675] dump_stack_lvl+0xf2/0x150 [ 687.597788][ T8675] dump_stack+0x15/0x1a [ 687.601990][ T8675] should_fail_ex+0x223/0x230 [ 687.606713][ T8675] should_fail+0xb/0x10 [ 687.610911][ T8675] should_fail_usercopy+0x1a/0x20 [ 687.615974][ T8675] _copy_from_user+0x1e/0xb0 [ 687.620647][ T8675] copy_msghdr_from_user+0x54/0x2a0 [ 687.625926][ T8675] ? __fget_files+0x17c/0x1c0 [ 687.630733][ T8675] __sys_sendmmsg+0x1e8/0x4b0 [ 687.635493][ T8675] __x64_sys_sendmmsg+0x57/0x70 [ 687.640424][ T8675] x64_sys_call+0x29aa/0x2dc0 [ 687.645138][ T8675] do_syscall_64+0xc9/0x1c0 [ 687.649703][ T8675] ? clear_bhb_loop+0x55/0xb0 [ 687.654419][ T8675] ? clear_bhb_loop+0x55/0xb0 [ 687.659171][ T8675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.665113][ T8675] RIP: 0033:0x7f98e8835d29 [ 687.670012][ T8675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.689670][ T8675] RSP: 002b:00007f98e6ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 687.698110][ T8675] RAX: ffffffffffffffda RBX: 00007f98e8a25fa0 RCX: 00007f98e8835d29 [ 687.706109][ T8675] RDX: 0000000000000003 RSI: 0000000020004540 RDI: 0000000000000003 [ 687.714105][ T8675] RBP: 00007f98e6ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 687.722095][ T8675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.730155][ T8675] R13: 0000000000000000 R14: 00007f98e8a25fa0 R15: 00007ffd7945da78 [ 687.738251][ T8675] [ 687.983009][ T8694] usb usb4: usbfs: process 8694 (syz.4.10995) did not claim interface 0 before use [ 688.155680][ T8705] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 688.227286][ T8707] loop3: detected capacity change from 0 to 512 [ 688.244324][ T8707] EXT4-fs (loop3): orphan cleanup on readonly fs [ 688.258695][ T8707] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11000: bg 0: block 248: padding at end of block bitmap is not set [ 688.345813][ T8707] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.11000: Failed to acquire dquot type 1 [ 688.364090][ T8715] FAULT_INJECTION: forcing a failure. [ 688.364090][ T8715] name failslab, interval 1, probability 0, space 0, times 0 [ 688.376827][ T8715] CPU: 1 UID: 0 PID: 8715 Comm: syz.5.11003 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 688.387696][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 688.397778][ T8715] Call Trace: [ 688.401071][ T8715] [ 688.404020][ T8715] dump_stack_lvl+0xf2/0x150 [ 688.408729][ T8715] dump_stack+0x15/0x1a [ 688.412919][ T8715] should_fail_ex+0x223/0x230 [ 688.417693][ T8715] should_failslab+0x8f/0xb0 [ 688.422393][ T8715] kmem_cache_alloc_node_noprof+0x59/0x320 [ 688.428234][ T8715] ? __alloc_skb+0x10b/0x310 [ 688.432850][ T8715] __alloc_skb+0x10b/0x310 [ 688.437292][ T8715] netlink_alloc_large_skb+0xad/0xe0 [ 688.439441][ T8707] EXT4-fs (loop3): 1 truncate cleaned up [ 688.442594][ T8715] netlink_sendmsg+0x3b4/0x6e0 [ 688.453003][ T8715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.458318][ T8715] __sock_sendmsg+0x140/0x180 [ 688.463070][ T8715] ____sys_sendmsg+0x312/0x410 [ 688.467935][ T8715] __sys_sendmsg+0x19d/0x230 [ 688.472688][ T8715] __x64_sys_sendmsg+0x46/0x50 [ 688.477483][ T8715] x64_sys_call+0x2734/0x2dc0 [ 688.482270][ T8715] do_syscall_64+0xc9/0x1c0 [ 688.486802][ T8715] ? clear_bhb_loop+0x55/0xb0 [ 688.491507][ T8715] ? clear_bhb_loop+0x55/0xb0 [ 688.496280][ T8715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.502333][ T8715] RIP: 0033:0x7f15578f5d29 [ 688.506814][ T8715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.526608][ T8715] RSP: 002b:00007f1555f61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.535089][ T8715] RAX: ffffffffffffffda RBX: 00007f1557ae5fa0 RCX: 00007f15578f5d29 [ 688.543148][ T8715] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000006 [ 688.551128][ T8715] RBP: 00007f1555f61090 R08: 0000000000000000 R09: 0000000000000000 [ 688.559199][ T8715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.567219][ T8715] R13: 0000000000000000 R14: 00007f1557ae5fa0 R15: 00007ffdb505af28 [ 688.575208][ T8715] [ 688.580612][ T8717] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11004'. [ 688.590736][ T1739] EXT4-fs unmount: 29 callbacks suppressed [ 688.590754][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.671493][ T8723] usb usb4: usbfs: process 8723 (syz.5.11007) did not claim interface 0 before use [ 688.825727][ T8743] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 688.897596][ T8752] 9pnet_fd: Insufficient options for proto=fd [ 688.916855][ T8752] loop6: detected capacity change from 0 to 764 [ 688.928909][ T8752] Symlink component flag not implemented [ 688.935613][ T8752] Symlink component flag not implemented (129) [ 688.943007][ T8752] rock: directory entry would overflow storage [ 688.949419][ T8752] rock: sig=0x4f50, size=4, remaining=3 [ 688.955028][ T8752] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 688.987604][ T8758] loop6: detected capacity change from 0 to 512 [ 689.009446][ T8761] netlink: 'syz.2.11020': attribute type 4 has an invalid length. [ 689.017293][ T8758] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.017388][ T8758] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 689.044177][ T8758] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11019'. [ 689.067046][ T8766] usb usb4: usbfs: process 8766 (syz.2.11021) did not claim interface 0 before use [ 689.093031][ T3967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.201957][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.212151][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.315964][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11027'. [ 689.522888][ T8802] netlink: 'syz.3.11032': attribute type 4 has an invalid length. [ 689.562757][ T8804] usb usb4: usbfs: process 8804 (syz.3.11033) did not claim interface 0 before use [ 689.754160][ T8814] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 689.804063][ T8816] bpf_get_probe_write_proto: 2 callbacks suppressed [ 689.804081][ T8816] syz.4.11038[8816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 689.825247][ T8816] syz.4.11038[8816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 689.852991][ T8816] syz.4.11038[8816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 689.901863][ T8824] loop6: detected capacity change from 0 to 512 [ 689.961466][ T8824] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 689.985505][ T8824] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 689.995961][ T8824] EXT4-fs (loop6): 1 truncate cleaned up [ 690.007298][ T8824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.042703][ T8829] netlink: 'syz.5.11043': attribute type 4 has an invalid length. [ 690.070189][ T8824] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.11041: Logical block already allocated [ 690.130533][ T8824] EXT4-fs (loop6): Remounting filesystem read-only [ 690.212541][ T3967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.660727][ T8850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.669312][ T8850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.844603][ T8863] netlink: 'syz.2.11055': attribute type 4 has an invalid length. [ 690.877260][ T8865] syz.2.11056[8865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 690.877398][ T8865] syz.2.11056[8865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 690.888982][ T8865] syz.2.11056[8865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 690.945303][ T8869] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 690.971427][ T8869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11058'. [ 691.069128][ T8873] 9pnet_rdma: rdma_create_trans (8873): problem binding to privport: 13 [ 691.118430][ T8880] usb usb4: usbfs: process 8880 (syz.2.11063) did not claim interface 0 before use [ 691.179765][ T8887] netlink: 'syz.5.11066': attribute type 4 has an invalid length. [ 691.213324][ T8891] loop6: detected capacity change from 0 to 1024 [ 691.220360][ T8891] EXT4-fs: Invalid want_extra_isize 3 [ 691.229220][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 691.229239][ T29] audit: type=1400 audit(1736563651.533:37784): avc: denied { setopt } for pid=8892 comm="syz.5.11069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 691.266883][ T8893] netem: change failed [ 691.280124][ T29] audit: type=1326 audit(1736563651.573:37785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e8835d29 code=0x7ffc0000 [ 691.304521][ T29] audit: type=1326 audit(1736563651.573:37786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98e8835d29 code=0x7ffc0000 [ 691.328316][ T29] audit: type=1326 audit(1736563651.573:37787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e8835d29 code=0x7ffc0000 [ 691.331135][ T8901] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11069'. [ 691.352820][ T29] audit: type=1326 audit(1736563651.573:37788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98e8835d29 code=0x7ffc0000 [ 691.385588][ T29] audit: type=1326 audit(1736563651.573:37789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e8835d29 code=0x7ffc0000 [ 691.394630][ T8904] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3402, id = 0 [ 691.409290][ T29] audit: type=1326 audit(1736563651.573:37790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e8835d29 code=0x7ffc0000 [ 691.409327][ T29] audit: type=1326 audit(1736563651.573:37791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f98e8835d29 code=0x7ffc0000 [ 691.467598][ T29] audit: type=1326 audit(1736563651.573:37792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e8835d29 code=0x7ffc0000 [ 691.500230][ T29] audit: type=1326 audit(1736563651.573:37793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f98e8835d29 code=0x7ffc0000 [ 691.500721][ T8907] FAULT_INJECTION: forcing a failure. [ 691.500721][ T8907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.537744][ T8907] CPU: 0 UID: 0 PID: 8907 Comm: syz.4.11073 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 691.548570][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 691.558713][ T8907] Call Trace: [ 691.562054][ T8907] [ 691.565006][ T8907] dump_stack_lvl+0xf2/0x150 [ 691.569655][ T8907] dump_stack+0x15/0x1a [ 691.573914][ T8907] should_fail_ex+0x223/0x230 [ 691.578654][ T8907] should_fail+0xb/0x10 [ 691.582878][ T8907] should_fail_usercopy+0x1a/0x20 [ 691.587928][ T8907] _copy_from_iter+0xd5/0xd00 [ 691.592634][ T8907] ? __alloc_skb+0x1b5/0x310 [ 691.597247][ T8907] ? kmalloc_reserve+0x16e/0x190 [ 691.602272][ T8907] ? __build_skb_around+0x196/0x1f0 [ 691.607484][ T8907] ? __alloc_skb+0x21f/0x310 [ 691.612088][ T8907] ? __virt_addr_valid+0x1ed/0x250 [ 691.617371][ T8907] ? __check_object_size+0x364/0x520 [ 691.622670][ T8907] netlink_sendmsg+0x460/0x6e0 [ 691.627458][ T8907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.632757][ T8907] __sock_sendmsg+0x140/0x180 [ 691.637465][ T8907] ____sys_sendmsg+0x312/0x410 [ 691.642243][ T8907] __sys_sendmsg+0x19d/0x230 [ 691.646889][ T8907] __x64_sys_sendmsg+0x46/0x50 [ 691.651675][ T8907] x64_sys_call+0x2734/0x2dc0 [ 691.656360][ T8907] do_syscall_64+0xc9/0x1c0 [ 691.660873][ T8907] ? clear_bhb_loop+0x55/0xb0 [ 691.665562][ T8907] ? clear_bhb_loop+0x55/0xb0 [ 691.670310][ T8907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.676239][ T8907] RIP: 0033:0x7f6195f55d29 [ 691.680667][ T8907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.700386][ T8907] RSP: 002b:00007f61945c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.708811][ T8907] RAX: ffffffffffffffda RBX: 00007f6196145fa0 RCX: 00007f6195f55d29 [ 691.716867][ T8907] RDX: 0000000004048010 RSI: 0000000020000080 RDI: 0000000000000003 [ 691.724846][ T8907] RBP: 00007f61945c1090 R08: 0000000000000000 R09: 0000000000000000 [ 691.732823][ T8907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.740808][ T8907] R13: 0000000000000000 R14: 00007f6196145fa0 R15: 00007ffcac0712c8 [ 691.748796][ T8907] [ 691.825645][ T8914] usb usb4: usbfs: process 8914 (syz.6.11075) did not claim interface 0 before use [ 691.933617][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11080'. [ 691.934462][ T8920] loop6: detected capacity change from 0 to 8192 [ 692.180366][ T8946] netlink: 'syz.3.11088': attribute type 1 has an invalid length. [ 692.424633][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11082'. [ 692.443898][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11092'. [ 692.467769][ T8944] bond1: entered promiscuous mode [ 692.472849][ T8944] bond1: entered allmulticast mode [ 692.478292][ T8944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 692.566485][ T8983] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 692.637822][ T8990] loop3: detected capacity change from 0 to 512 [ 692.665188][ T8990] EXT4-fs (loop3): orphan cleanup on readonly fs [ 692.682331][ T8990] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11094: bg 0: block 248: padding at end of block bitmap is not set [ 692.703312][ T8990] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.11094: Failed to acquire dquot type 1 [ 692.719604][ T9001] usb usb4: usbfs: process 9001 (syz.2.11096) did not claim interface 0 before use [ 692.721011][ T8990] EXT4-fs (loop3): 1 truncate cleaned up [ 692.743663][ T8990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 692.772603][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.837491][ T9019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.849001][ T9019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.036953][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11104'. [ 693.274668][ T9102] usb usb4: usbfs: process 9102 (syz.2.11110) did not claim interface 0 before use [ 693.318188][ T9109] siw: device registration error -23 [ 693.354051][ T9109] netlink: 'syz.5.11114': attribute type 1 has an invalid length. [ 693.362136][ T9109] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11114'. [ 693.491324][ T9132] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 693.567787][ T9137] loop5: detected capacity change from 0 to 512 [ 693.576358][ T9137] EXT4-fs (loop5): orphan cleanup on readonly fs [ 693.584940][ T9137] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11121: bg 0: block 248: padding at end of block bitmap is not set [ 693.603325][ T9137] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.11121: Failed to acquire dquot type 1 [ 693.618876][ T9137] EXT4-fs (loop5): 1 truncate cleaned up [ 693.628259][ T9137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 693.672842][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.793616][ T9152] loop3: detected capacity change from 0 to 8192 [ 693.804533][ T9162] usb usb4: usbfs: process 9162 (syz.5.11126) did not claim interface 0 before use [ 693.969791][ T9188] __nla_validate_parse: 1 callbacks suppressed [ 693.969811][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11129'. [ 694.003539][ T9198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.020299][ T9198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.024812][ T9201] netlink: 'syz.6.11132': attribute type 4 has an invalid length. [ 694.071146][ T9207] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 694.137105][ T9219] loop6: detected capacity change from 0 to 512 [ 694.147670][ T9219] EXT4-fs (loop6): orphan cleanup on readonly fs [ 694.155276][ T9219] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.11133: bg 0: block 248: padding at end of block bitmap is not set [ 694.172634][ T9219] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.11133: Failed to acquire dquot type 1 [ 694.184610][ T9219] EXT4-fs (loop6): 1 truncate cleaned up [ 694.193957][ T9219] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 694.282455][ T3967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.302948][ T9242] syz.2.11134[9242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 694.303063][ T9242] syz.2.11134[9242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 694.318341][ T9242] syz.2.11134[9242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 694.467795][ T9262] usb usb4: usbfs: process 9262 (syz.2.11138) did not claim interface 0 before use [ 694.651248][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11142'. [ 694.945976][ T9325] usb usb4: usbfs: process 9325 (syz.6.11153) did not claim interface 0 before use [ 695.020461][ T9326] lo speed is unknown, defaulting to 1000 [ 695.075164][ T9326] lo speed is unknown, defaulting to 1000 [ 695.418738][ T9334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.427395][ T9334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.850874][ T9354] siw: device registration error -23 [ 695.874973][ T9357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.895338][ T9354] netlink: 'syz.4.11163': attribute type 1 has an invalid length. [ 695.903189][ T9354] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11163'. [ 695.906907][ T9357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.076789][ T9370] netlink: 'syz.3.11168': attribute type 4 has an invalid length. [ 696.105300][ T9375] loop3: detected capacity change from 0 to 512 [ 696.113523][ T9375] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 696.121745][ T9375] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 696.130518][ T9375] EXT4-fs (loop3): 1 truncate cleaned up [ 696.136750][ T9375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.164528][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.172632][ T9382] usb usb4: usbfs: process 9382 (syz.4.11172) did not claim interface 0 before use [ 696.201283][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11171'. [ 696.243713][ T9390] loop3: detected capacity change from 0 to 512 [ 696.261582][ T9390] EXT4-fs (loop3): orphan cleanup on readonly fs [ 696.268370][ T9390] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 696.284147][ T9390] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 696.291519][ T9390] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.11175: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 696.310966][ T9393] siw: device registration error -23 [ 696.311411][ T9390] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.11175: couldn't read orphan inode 13 (err -117) [ 696.328921][ T9390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 696.341938][ T9393] netlink: 'syz.4.11176': attribute type 1 has an invalid length. [ 696.349912][ T9393] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11176'. [ 696.361715][ T9390] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 696.372543][ T9390] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2 [ 696.396565][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.577989][ T9420] netlink: 'syz.2.11180': attribute type 4 has an invalid length. [ 696.693979][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 696.693996][ T29] audit: type=1400 audit(1736563656.983:38003): avc: denied { write } for pid=9433 comm="syz.2.11182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 696.793571][ T9446] usb usb4: usbfs: process 9446 (syz.2.11184) did not claim interface 0 before use [ 697.017116][ T9469] siw: device registration error -23 [ 697.065672][ T9469] netlink: 'syz.6.11187': attribute type 1 has an invalid length. [ 697.073553][ T9469] netlink: 224 bytes leftover after parsing attributes in process `syz.6.11187'. [ 697.089300][ T29] audit: type=1326 audit(1736563657.373:38004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.2.11189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e8835d29 code=0x7ffc0000 [ 697.113014][ T29] audit: type=1326 audit(1736563657.373:38005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.2.11189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e8835d29 code=0x7ffc0000 [ 697.142857][ T9486] loop3: detected capacity change from 0 to 512 [ 697.151819][ T9486] EXT4-fs (loop3): orphan cleanup on readonly fs [ 697.166609][ T9486] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11190: bg 0: block 248: padding at end of block bitmap is not set [ 697.200389][ T9486] Quota error (device loop3): write_blk: dquota write failed [ 697.207846][ T9486] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 697.217873][ T9486] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.11190: Failed to acquire dquot type 1 [ 697.258534][ T9497] 9pnet_rdma: rdma_create_trans (9497): problem binding to privport: 13 [ 697.272358][ T9486] EXT4-fs (loop3): 1 truncate cleaned up [ 697.372471][ T9486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 697.428015][ T9538] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 697.430893][ T9527] 9pnet_fd: Insufficient options for proto=fd [ 697.445558][ T29] audit: type=1326 audit(1736563657.713:38006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.4.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6195f55d29 code=0x7ffc0000 [ 697.469422][ T29] audit: type=1326 audit(1736563657.713:38007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.4.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6195f55d29 code=0x7ffc0000 [ 697.494035][ T29] audit: type=1326 audit(1736563657.723:38008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.4.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6195f55d29 code=0x7ffc0000 [ 697.518733][ T29] audit: type=1326 audit(1736563657.723:38009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.4.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6195f55d29 code=0x7ffc0000 [ 697.542526][ T29] audit: type=1326 audit(1736563657.723:38010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.4.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6195f55d29 code=0x7ffc0000 [ 697.717474][ T9557] siw: device registration error -23 [ 697.797833][ T9563] netlink: 'syz.2.11201': attribute type 1 has an invalid length. [ 697.805813][ T9563] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11201'. [ 697.871572][ T9574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.880590][ T9574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.912291][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.953443][ T9585] usb usb4: usbfs: process 9585 (syz.3.11206) did not claim interface 0 before use [ 698.200774][ T9617] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 698.264477][ T9626] loop3: detected capacity change from 0 to 512 [ 698.284647][ T9626] EXT4-fs (loop3): orphan cleanup on readonly fs [ 698.295788][ T9626] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11208: bg 0: block 248: padding at end of block bitmap is not set [ 698.310785][ T9626] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.11208: Failed to acquire dquot type 1 [ 698.323376][ T9626] EXT4-fs (loop3): 1 truncate cleaned up [ 698.329864][ T9626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 698.379757][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.569737][ T9672] loop6: detected capacity change from 0 to 512 [ 698.589106][ T9672] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 698.602905][ T9672] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 698.631429][ T9672] syz.6.11213[9672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 698.631508][ T9672] syz.6.11213[9672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 698.647303][ T9672] syz.6.11213[9672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 698.845620][ T9722] syz.2.11220[9722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 698.847357][ T3967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.882208][ T9722] syz.2.11220[9722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 698.882296][ T9722] syz.2.11220[9722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 699.111891][ T9739] netlink: 'syz.4.11226': attribute type 4 has an invalid length. [ 699.152307][ T9744] 9pnet_fd: Insufficient options for proto=fd [ 699.194218][ T9747] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11231'. [ 699.218054][ T9752] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11232'. [ 699.309704][ T9759] 9pnet_fd: Insufficient options for proto=fd [ 699.329091][ T9759] loop5: detected capacity change from 0 to 764 [ 699.341697][ T9759] Symlink component flag not implemented [ 699.357953][ T9759] Symlink component flag not implemented (129) [ 699.373395][ T9759] rock: directory entry would overflow storage [ 699.379758][ T9759] rock: sig=0x4f50, size=4, remaining=3 [ 699.385408][ T9759] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 699.499684][ T9773] netlink: 'syz.6.11241': attribute type 4 has an invalid length. [ 699.597701][ T9779] 9pnet_fd: Insufficient options for proto=fd [ 699.601183][ T9780] loop6: detected capacity change from 0 to 512 [ 699.618628][ T9780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.634476][ T9780] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 699.650374][ T9784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11245'. [ 699.694475][ T3967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.715985][ T9786] netlink: 'syz.5.11246': attribute type 1 has an invalid length. [ 699.723946][ T9786] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11246'. [ 699.740688][ T9796] usb usb4: usbfs: process 9796 (syz.6.11248) did not claim interface 0 before use [ 699.802918][ T9804] 9pnet_fd: Insufficient options for proto=fd [ 699.823133][ T9804] loop3: detected capacity change from 0 to 764 [ 699.833239][ T9804] Symlink component flag not implemented [ 699.833660][ T9809] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11254'. [ 699.843253][ T9804] Symlink component flag not implemented (129) [ 699.859447][ T9804] rock: directory entry would overflow storage [ 699.865881][ T9804] rock: sig=0x4f50, size=4, remaining=3 [ 699.871478][ T9804] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 699.904531][ T9814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.913792][ T9814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.968008][ T9823] loop3: detected capacity change from 0 to 512 [ 699.989702][ T9823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.011532][ T9823] ext4 filesystem being mounted at /459/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 700.085742][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.104613][ T9831] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 700.118652][ T9834] usb usb4: usbfs: process 9834 (syz.3.11261) did not claim interface 0 before use [ 700.171924][ T9844] loop5: detected capacity change from 0 to 512 [ 700.177522][ T9847] SELinux: policydb version 0 does not match my version range 15-33 [ 700.187232][ T9847] SELinux: failed to load policy [ 700.187946][ T9844] EXT4-fs (loop5): orphan cleanup on readonly fs [ 700.199110][ T9844] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11260: bg 0: block 248: padding at end of block bitmap is not set [ 700.205975][ T9845] 9pnet_rdma: rdma_create_trans (9845): problem binding to privport: 13 [ 700.216576][ T9844] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.11260: Failed to acquire dquot type 1 [ 700.238724][ T9850] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 700.239071][ T9844] EXT4-fs (loop5): 1 truncate cleaned up [ 700.260012][ T9850] FAULT_INJECTION: forcing a failure. [ 700.260012][ T9850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.273168][ T9850] CPU: 1 UID: 0 PID: 9850 Comm: syz.2.11268 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 700.283955][ T9850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 700.294202][ T9850] Call Trace: [ 700.297492][ T9850] [ 700.300458][ T9850] dump_stack_lvl+0xf2/0x150 [ 700.305171][ T9850] dump_stack+0x15/0x1a [ 700.309398][ T9850] should_fail_ex+0x223/0x230 [ 700.314142][ T9850] should_fail+0xb/0x10 [ 700.318316][ T9850] should_fail_usercopy+0x1a/0x20 [ 700.323371][ T9850] _copy_from_user+0x1e/0xb0 [ 700.328039][ T9850] move_addr_to_kernel+0x82/0x120 [ 700.333086][ T9850] copy_msghdr_from_user+0x271/0x2a0 [ 700.338412][ T9850] __sys_sendmsg+0x13e/0x230 [ 700.343067][ T9850] __x64_sys_sendmsg+0x46/0x50 [ 700.347849][ T9850] x64_sys_call+0x2734/0x2dc0 [ 700.352567][ T9850] do_syscall_64+0xc9/0x1c0 [ 700.357088][ T9850] ? clear_bhb_loop+0x55/0xb0 [ 700.361778][ T9850] ? clear_bhb_loop+0x55/0xb0 [ 700.366470][ T9850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.372458][ T9850] RIP: 0033:0x7f98e8835d29 [ 700.376930][ T9850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.396551][ T9850] RSP: 002b:00007f98e6ea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.404976][ T9850] RAX: ffffffffffffffda RBX: 00007f98e8a25fa0 RCX: 00007f98e8835d29 [ 700.413125][ T9850] RDX: 0000000000000000 RSI: 0000000020002180 RDI: 0000000000000003 [ 700.421129][ T9850] RBP: 00007f98e6ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 700.429113][ T9850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.437249][ T9850] R13: 0000000000000000 R14: 00007f98e8a25fa0 R15: 00007ffd7945da78 [ 700.445249][ T9850] [ 700.453016][ T9844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 700.510583][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.709929][ T9869] 9pnet_fd: Insufficient options for proto=fd [ 700.718460][ T9870] FAULT_INJECTION: forcing a failure. [ 700.718460][ T9870] name failslab, interval 1, probability 0, space 0, times 0 [ 700.731271][ T9870] CPU: 1 UID: 0 PID: 9870 Comm: syz.2.11273 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 700.734668][ T9869] loop3: detected capacity change from 0 to 1024 [ 700.742042][ T9870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 700.742061][ T9870] Call Trace: [ 700.742069][ T9870] [ 700.742079][ T9870] dump_stack_lvl+0xf2/0x150 [ 700.742131][ T9870] dump_stack+0x15/0x1a [ 700.742228][ T9870] should_fail_ex+0x223/0x230 [ 700.742258][ T9870] should_failslab+0x8f/0xb0 [ 700.742298][ T9870] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 700.742370][ T9870] ? sidtab_sid2str_get+0xb8/0x140 [ 700.742414][ T9870] kmemdup_noprof+0x2a/0x60 [ 700.742452][ T9870] sidtab_sid2str_get+0xb8/0x140 [ 700.742484][ T9870] security_sid_to_context_core+0x1eb/0x2f0 [ 700.742519][ T9870] security_sid_to_context_force+0x2a/0x40 [ 700.742575][ T9870] selinux_inode_init_security+0x344/0x3e0 [ 700.742606][ T9870] ? __pfx_shmem_initxattrs+0x10/0x10 [ 700.742642][ T9870] ? __pfx_shmem_initxattrs+0x10/0x10 [ 700.742678][ T9870] security_inode_init_security+0x141/0x330 [ 700.742740][ T9870] shmem_mknod+0xa8/0x180 [ 700.742770][ T9870] ? __pfx_shmem_create+0x10/0x10 [ 700.742803][ T9870] shmem_create+0x34/0x40 [ 700.765947][ T9869] EXT4-fs: Ignoring removed nobh option [ 700.770055][ T9870] path_openat+0xe92/0x1fa0 [ 700.774230][ T9869] EXT4-fs: Ignoring removed nomblk_io_submit option [ 700.778889][ T9870] do_filp_open+0x107/0x230 [ 700.778932][ T9870] do_sys_openat2+0xab/0x120 [ 700.779000][ T9870] __x64_sys_open+0xe6/0x110 [ 700.813305][ T9869] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 700.816119][ T9870] x64_sys_call+0x13e1/0x2dc0 [ 700.816151][ T9870] do_syscall_64+0xc9/0x1c0 [ 700.842381][ T9869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.842961][ T9870] ? clear_bhb_loop+0x55/0xb0 [ 700.917388][ T9870] ? clear_bhb_loop+0x55/0xb0 [ 700.922185][ T9870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.928133][ T9870] RIP: 0033:0x7f98e8835d29 [ 700.932555][ T9870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.952174][ T9870] RSP: 002b:00007f98e6e86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 700.960625][ T9870] RAX: ffffffffffffffda RBX: 00007f98e8a26080 RCX: 00007f98e8835d29 [ 700.968691][ T9870] RDX: 0000000000000000 RSI: 0000000000145142 RDI: 0000000020000240 [ 700.976672][ T9870] RBP: 00007f98e6e86090 R08: 0000000000000000 R09: 0000000000000000 [ 700.984769][ T9870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.992781][ T9870] R13: 0000000000000000 R14: 00007f98e8a26080 R15: 00007ffd7945da78 [ 701.000799][ T9870] [ 701.012293][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.024300][ T9874] netlink: zone id is out of range [ 701.036327][ T9874] siw: device registration error -23 [ 701.146700][ T9882] netlink: 'syz.3.11278': attribute type 1 has an invalid length. [ 701.154579][ T9882] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11278'. [ 701.356323][ T9902] 9pnet_rdma: rdma_create_trans (9902): problem binding to privport: 13 [ 701.404160][ T9906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.415569][ T9906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.431007][ T9906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11287'. [ 701.527415][ T9917] 9pnet_fd: Insufficient options for proto=fd [ 701.546975][ T9917] loop5: detected capacity change from 0 to 764 [ 701.558211][ T9921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11293'. [ 701.744125][ T9933] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11298'. [ 701.803585][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 701.803604][ T29] audit: type=1326 audit(1736563662.093:38327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.5.11301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 701.842099][ T29] audit: type=1326 audit(1736563662.133:38328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.5.11301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 701.866598][ T29] audit: type=1326 audit(1736563662.133:38329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.5.11301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 701.890281][ T29] audit: type=1326 audit(1736563662.133:38330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.5.11301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 701.914732][ T29] audit: type=1326 audit(1736563662.133:38331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.5.11301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 701.939068][ T29] audit: type=1326 audit(1736563662.133:38332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.5.11301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 701.962794][ T29] audit: type=1326 audit(1736563662.133:38333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.5.11301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 701.987234][ T29] audit: type=1326 audit(1736563662.133:38334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.5.11301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 702.010929][ T29] audit: type=1326 audit(1736563662.133:38335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.5.11301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 702.035381][ T29] audit: type=1326 audit(1736563662.133:38336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.5.11301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 702.172822][ T9947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11303'. [ 702.249432][ T9954] 9pnet_fd: Insufficient options for proto=fd [ 702.319995][ T9958] loop6: detected capacity change from 0 to 8192 [ 702.354826][ T9964] netlink: 'syz.5.11311': attribute type 1 has an invalid length. [ 702.392701][ T9974] loop3: detected capacity change from 0 to 512 [ 702.413121][ T9974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.447356][ T9980] usb usb4: usbfs: process 9980 (syz.5.11313) did not claim interface 0 before use [ 702.459925][ T9974] ext4 filesystem being mounted at /476/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 702.664274][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.759557][ T9997] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 702.843185][ T9997] loop5: detected capacity change from 0 to 512 [ 702.853696][ T9997] EXT4-fs (loop5): orphan cleanup on readonly fs [ 702.860808][ T9997] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11322: bg 0: block 248: padding at end of block bitmap is not set [ 702.880249][ T9997] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.11322: Failed to acquire dquot type 1 [ 702.892900][ T9997] EXT4-fs (loop5): 1 truncate cleaned up [ 702.902019][ T9997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 702.970675][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.029779][T10014] loop6: detected capacity change from 0 to 512 [ 703.056784][T10017] loop5: detected capacity change from 0 to 512 [ 703.075322][T10014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.094408][T10014] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 703.110775][T10017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.129362][T10017] ext4 filesystem being mounted at /322/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 703.131479][T10027] usb usb4: usbfs: process 10027 (syz.2.11331) did not claim interface 0 before use [ 703.141692][T10028] program syz.3.11330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 703.164262][T10017] syz.5.11329[10017] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 703.164340][T10017] syz.5.11329[10017] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 703.176129][T10017] syz.5.11329[10017] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 703.180269][T10014] syz.6.11327[10014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 703.272810][T10038] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 703.296596][ T3967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.312547][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.343928][T10042] netlink: 'syz.5.11337': attribute type 4 has an invalid length. [ 703.379181][T10044] loop3: detected capacity change from 0 to 512 [ 703.409002][T10044] EXT4-fs (loop3): orphan cleanup on readonly fs [ 703.433948][T10044] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11335: bg 0: block 248: padding at end of block bitmap is not set [ 703.452648][T10044] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.11335: Failed to acquire dquot type 1 [ 703.474333][T10044] EXT4-fs (loop3): 1 truncate cleaned up [ 703.492463][T10044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 703.585556][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.607664][T10063] loop6: detected capacity change from 0 to 764 [ 703.809738][T10087] 9pnet_fd: Insufficient options for proto=fd [ 703.836957][T10087] loop3: detected capacity change from 0 to 764 [ 703.858053][T10087] Symlink component flag not implemented [ 703.863905][T10087] Symlink component flag not implemented (129) [ 703.872062][T10087] rock: directory entry would overflow storage [ 703.878306][T10087] rock: sig=0x4f50, size=4, remaining=3 [ 703.883911][T10087] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 703.988480][T10102] loop5: detected capacity change from 0 to 512 [ 704.011093][T10102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.029484][T10102] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 704.052639][T10102] bpf_get_probe_write_proto: 2 callbacks suppressed [ 704.052714][T10102] syz.5.11361[10102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.059600][T10102] syz.5.11361[10102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.071265][T10102] syz.5.11361[10102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.144460][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.179836][T10120] loop5: detected capacity change from 0 to 512 [ 704.197447][T10120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.216332][T10120] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 704.238159][T10120] syz.5.11367[10120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.238290][T10120] syz.5.11367[10120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.262323][T10120] syz.5.11367[10120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.311445][T10134] 9pnet_fd: Insufficient options for proto=fd [ 704.342592][T10134] loop3: detected capacity change from 0 to 764 [ 704.357015][T10134] Symlink component flag not implemented [ 704.362916][T10134] Symlink component flag not implemented (129) [ 704.371803][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.383886][T10134] rock: directory entry would overflow storage [ 704.390163][T10134] rock: sig=0x4f50, size=4, remaining=3 [ 704.395864][T10134] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 704.469563][T10140] loop3: detected capacity change from 0 to 512 [ 704.493614][T10140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.519900][T10140] ext4 filesystem being mounted at /496/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 704.540778][T10140] syz.3.11377[10140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.540924][T10140] syz.3.11377[10140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.558667][T10140] syz.3.11377[10140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.677069][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.718754][T10161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.727566][T10161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.766624][T10167] usb usb4: usbfs: process 10167 (syz.3.11386) did not claim interface 0 before use [ 704.949178][T10189] 9pnet_fd: Insufficient options for proto=fd [ 705.411217][T10261] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 705.484249][T10267] loop6: detected capacity change from 0 to 512 [ 705.509908][T10267] EXT4-fs (loop6): orphan cleanup on readonly fs [ 705.518241][T10267] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.11401: bg 0: block 248: padding at end of block bitmap is not set [ 705.538380][T10267] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.11401: Failed to acquire dquot type 1 [ 705.552012][T10267] EXT4-fs (loop6): 1 truncate cleaned up [ 705.560768][T10267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 705.582713][T10278] 9pnet_fd: Insufficient options for proto=fd [ 705.603778][ T3967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.609888][T10278] loop5: detected capacity change from 0 to 764 [ 705.637131][T10283] loop6: detected capacity change from 0 to 512 [ 705.708133][T10283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.736617][T10283] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 705.833324][ T3967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.914673][T10339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.916996][T10336] netlink: zone id is out of range [ 705.924048][T10339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.968667][T10344] loop3: detected capacity change from 0 to 512 [ 705.982412][T10346] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 705.999414][T10344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.015738][T10344] ext4 filesystem being mounted at /503/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 706.032353][T10344] syz.3.11414[10344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 706.068394][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.091193][T10355] loop5: detected capacity change from 0 to 8192 [ 706.194025][T10369] loop5: detected capacity change from 0 to 512 [ 706.219114][T10369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.235763][T10369] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 706.342493][T10383] netlink: 'syz.4.11424': attribute type 1 has an invalid length. [ 706.350752][T10383] __nla_validate_parse: 6 callbacks suppressed [ 706.350770][T10383] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11424'. [ 706.385516][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.445877][T10391] 9pnet_fd: Insufficient options for proto=fd [ 706.468633][T10391] loop3: detected capacity change from 0 to 764 [ 706.511348][T10397] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 706.575938][T10405] loop3: detected capacity change from 0 to 512 [ 706.626563][T10405] EXT4-fs (loop3): orphan cleanup on readonly fs [ 706.638679][T10408] 9pnet_rdma: rdma_create_trans (10408): problem binding to privport: 13 [ 706.651551][T10405] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11431: bg 0: block 248: padding at end of block bitmap is not set [ 706.669611][T10405] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.11431: Failed to acquire dquot type 1 [ 706.681818][T10405] EXT4-fs (loop3): 1 truncate cleaned up [ 706.682500][T10413] loop6: detected capacity change from 0 to 512 [ 706.691484][T10405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 706.708742][T10415] FAULT_INJECTION: forcing a failure. [ 706.708742][T10415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.721992][T10415] CPU: 1 UID: 0 PID: 10415 Comm: syz.5.11437 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 706.730901][T10413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.732852][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 706.732874][T10415] Call Trace: [ 706.732883][T10415] [ 706.761633][T10415] dump_stack_lvl+0xf2/0x150 [ 706.766294][T10415] dump_stack+0x15/0x1a [ 706.770514][T10415] should_fail_ex+0x223/0x230 [ 706.775251][T10415] should_fail+0xb/0x10 [ 706.779437][T10415] should_fail_usercopy+0x1a/0x20 [ 706.782101][T10413] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 706.784512][T10415] _copy_to_user+0x20/0xa0 [ 706.799313][T10415] simple_read_from_buffer+0xa0/0x110 [ 706.804723][T10415] proc_fail_nth_read+0xf9/0x140 [ 706.809714][T10415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 706.815356][T10415] vfs_read+0x1a2/0x700 [ 706.819535][T10415] ? __rcu_read_unlock+0x4e/0x70 [ 706.824562][T10415] ? __fget_files+0x17c/0x1c0 [ 706.829348][T10415] ksys_read+0xe8/0x1b0 [ 706.833577][T10415] __x64_sys_read+0x42/0x50 [ 706.838176][T10415] x64_sys_call+0x2874/0x2dc0 [ 706.842890][T10415] do_syscall_64+0xc9/0x1c0 [ 706.847420][T10415] ? clear_bhb_loop+0x55/0xb0 [ 706.852159][T10415] ? clear_bhb_loop+0x55/0xb0 [ 706.856919][T10415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.862911][T10415] RIP: 0033:0x7f15578f473c [ 706.867356][T10415] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 706.886986][T10415] RSP: 002b:00007f1555f40030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 706.895496][T10415] RAX: ffffffffffffffda RBX: 00007f1557ae6080 RCX: 00007f15578f473c [ 706.903490][T10415] RDX: 000000000000000f RSI: 00007f1555f400a0 RDI: 000000000000000e [ 706.911501][T10415] RBP: 00007f1555f40090 R08: 0000000000000000 R09: 0000000000000000 [ 706.919488][T10415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.927486][T10415] R13: 0000000000000000 R14: 00007f1557ae6080 R15: 00007ffdb505af28 [ 706.935484][T10415] [ 706.939207][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.997389][ T3967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.022793][ T29] kauditd_printk_skb: 508 callbacks suppressed [ 707.022815][ T29] audit: type=1326 audit(1736563667.313:38837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.6.11442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee595d29 code=0x7ffc0000 [ 707.063317][T10429] 9pnet_fd: Insufficient options for proto=fd [ 707.103065][ T29] audit: type=1326 audit(1736563667.353:38838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.6.11442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f60ee595d29 code=0x7ffc0000 [ 707.127013][ T29] audit: type=1326 audit(1736563667.353:38839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.6.11442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee595d29 code=0x7ffc0000 [ 707.146308][T10432] loop3: detected capacity change from 0 to 764 [ 707.150702][ T29] audit: type=1326 audit(1736563667.353:38840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.6.11442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee595d29 code=0x7ffc0000 [ 707.180713][ T29] audit: type=1326 audit(1736563667.353:38841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.6.11442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f60ee595d29 code=0x7ffc0000 [ 707.204386][ T29] audit: type=1400 audit(1736563667.363:38842): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 707.204473][ T29] audit: type=1400 audit(1736563667.363:38843): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.204591][ T29] audit: type=1400 audit(1736563667.363:38844): avc: denied { append } for pid=2982 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 707.204626][ T29] audit: type=1400 audit(1736563667.363:38845): avc: denied { open } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 707.204679][ T29] audit: type=1400 audit(1736563667.363:38846): avc: denied { getattr } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 707.218529][T10429] loop6: detected capacity change from 0 to 764 [ 707.404047][T10432] Symlink component flag not implemented [ 707.424029][T10442] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 707.431851][T10432] Symlink component flag not implemented (129) [ 707.441747][T10440] netlink: 'syz.5.11446': attribute type 4 has an invalid length. [ 707.485156][T10432] rock: directory entry would overflow storage [ 707.491353][T10432] rock: sig=0x4f50, size=4, remaining=3 [ 707.497070][T10432] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 707.500009][T10445] loop6: detected capacity change from 0 to 512 [ 707.542008][T10445] EXT4-fs (loop6): orphan cleanup on readonly fs [ 707.567508][T10445] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.11448: bg 0: block 248: padding at end of block bitmap is not set [ 707.610135][T10445] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.11448: Failed to acquire dquot type 1 [ 707.649950][T10445] EXT4-fs (loop6): 1 truncate cleaned up [ 707.663289][T10456] loop3: detected capacity change from 0 to 512 [ 707.680160][T10445] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 707.719461][T10456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.732811][ T3967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.741715][T10454] netlink: 'syz.2.11451': attribute type 1 has an invalid length. [ 707.749703][T10454] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11451'. [ 707.764821][T10456] ext4 filesystem being mounted at /511/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 707.839468][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.920925][T10486] 9pnet_fd: Insufficient options for proto=fd [ 707.963178][T10486] loop3: detected capacity change from 0 to 764 [ 708.056196][T10506] FAULT_INJECTION: forcing a failure. [ 708.056196][T10506] name failslab, interval 1, probability 0, space 0, times 0 [ 708.068957][T10506] CPU: 1 UID: 0 PID: 10506 Comm: syz.4.11460 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 708.079970][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 708.090054][T10506] Call Trace: [ 708.093399][T10506] [ 708.096377][T10506] dump_stack_lvl+0xf2/0x150 [ 708.101163][T10506] dump_stack+0x15/0x1a [ 708.105359][T10506] should_fail_ex+0x223/0x230 [ 708.110066][T10506] should_failslab+0x8f/0xb0 [ 708.114694][T10506] kmem_cache_alloc_noprof+0x52/0x320 [ 708.120174][T10506] ? skb_clone+0x154/0x1f0 [ 708.124661][T10506] skb_clone+0x154/0x1f0 [ 708.128968][T10506] __netlink_deliver_tap+0x2bd/0x4f0 [ 708.134290][T10506] netlink_unicast+0x64a/0x670 [ 708.139180][T10506] netlink_sendmsg+0x5cc/0x6e0 [ 708.143992][T10506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.149319][T10506] __sock_sendmsg+0x140/0x180 [ 708.154043][T10506] ____sys_sendmsg+0x312/0x410 [ 708.158839][T10506] __sys_sendmsg+0x19d/0x230 [ 708.163493][T10506] __x64_sys_sendmsg+0x46/0x50 [ 708.168369][T10506] x64_sys_call+0x2734/0x2dc0 [ 708.173095][T10506] do_syscall_64+0xc9/0x1c0 [ 708.177671][T10506] ? clear_bhb_loop+0x55/0xb0 [ 708.182467][T10506] ? clear_bhb_loop+0x55/0xb0 [ 708.187175][T10506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.193168][T10506] RIP: 0033:0x7f6195f55d29 [ 708.197672][T10506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.203060][T10519] FAULT_INJECTION: forcing a failure. [ 708.203060][T10519] name failslab, interval 1, probability 0, space 0, times 0 [ 708.217460][T10506] RSP: 002b:00007f61945c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.217553][T10506] RAX: ffffffffffffffda RBX: 00007f6196145fa0 RCX: 00007f6195f55d29 [ 708.217570][T10506] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 708.254667][T10506] RBP: 00007f61945c1090 R08: 0000000000000000 R09: 0000000000000000 [ 708.262715][T10506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.270697][T10506] R13: 0000000000000000 R14: 00007f6196145fa0 R15: 00007ffcac0712c8 [ 708.278708][T10506] [ 708.281743][T10519] CPU: 0 UID: 0 PID: 10519 Comm: syz.3.11461 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 708.292891][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 708.302966][T10519] Call Trace: [ 708.306249][T10519] [ 708.309184][T10519] dump_stack_lvl+0xf2/0x150 [ 708.313803][T10519] dump_stack+0x15/0x1a [ 708.317981][T10519] should_fail_ex+0x223/0x230 [ 708.322674][T10519] should_failslab+0x8f/0xb0 [ 708.327284][T10519] kmem_cache_alloc_noprof+0x52/0x320 [ 708.332692][T10519] ? skb_clone+0x154/0x1f0 [ 708.337208][T10519] skb_clone+0x154/0x1f0 [ 708.341469][T10519] __netlink_deliver_tap+0x2bd/0x4f0 [ 708.346836][T10519] netlink_unicast+0x64a/0x670 [ 708.351664][T10519] netlink_sendmsg+0x5cc/0x6e0 [ 708.356480][T10519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.361872][T10519] __sock_sendmsg+0x140/0x180 [ 708.366644][T10519] ____sys_sendmsg+0x312/0x410 [ 708.371437][T10519] __sys_sendmsg+0x19d/0x230 [ 708.376056][T10519] __x64_sys_sendmsg+0x46/0x50 [ 708.380894][T10519] x64_sys_call+0x2734/0x2dc0 [ 708.385602][T10519] do_syscall_64+0xc9/0x1c0 [ 708.390149][T10519] ? clear_bhb_loop+0x55/0xb0 [ 708.394877][T10519] ? clear_bhb_loop+0x55/0xb0 [ 708.399562][T10519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.405515][T10519] RIP: 0033:0x7f256e965d29 [ 708.409953][T10519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.429599][T10519] RSP: 002b:00007f256cfd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.438032][T10519] RAX: ffffffffffffffda RBX: 00007f256eb55fa0 RCX: 00007f256e965d29 [ 708.446058][T10519] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 708.454098][T10519] RBP: 00007f256cfd7090 R08: 0000000000000000 R09: 0000000000000000 [ 708.462073][T10519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.470235][T10519] R13: 0000000000000000 R14: 00007f256eb55fa0 R15: 00007ffe8cf12e98 [ 708.478281][T10519] [ 708.799476][T10571] 9pnet_rdma: rdma_create_trans (10571): problem binding to privport: 13 [ 708.808333][T10575] FAULT_INJECTION: forcing a failure. [ 708.808333][T10575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.821516][T10575] CPU: 0 UID: 0 PID: 10575 Comm: syz.6.11467 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 708.832466][T10575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 708.842554][T10575] Call Trace: [ 708.845844][T10575] [ 708.848784][T10575] dump_stack_lvl+0xf2/0x150 [ 708.853442][T10575] dump_stack+0x15/0x1a [ 708.857628][T10575] should_fail_ex+0x223/0x230 [ 708.862330][T10575] should_fail+0xb/0x10 [ 708.866546][T10575] should_fail_usercopy+0x1a/0x20 [ 708.871602][T10575] strncpy_from_user+0x25/0x210 [ 708.876502][T10575] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 708.882163][T10575] ? getname_flags+0x81/0x3b0 [ 708.886854][T10575] getname_flags+0xb0/0x3b0 [ 708.891371][T10575] getname+0x17/0x20 [ 708.895308][T10575] path_setxattrat+0x23a/0x310 [ 708.900096][T10575] __x64_sys_setxattr+0x6e/0x90 [ 708.905034][T10575] x64_sys_call+0x2247/0x2dc0 [ 708.909724][T10575] do_syscall_64+0xc9/0x1c0 [ 708.914281][T10575] ? clear_bhb_loop+0x55/0xb0 [ 708.919007][T10575] ? clear_bhb_loop+0x55/0xb0 [ 708.923693][T10575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.929621][T10575] RIP: 0033:0x7f60ee595d29 [ 708.934065][T10575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.953773][T10575] RSP: 002b:00007f60ecc01038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 708.962195][T10575] RAX: ffffffffffffffda RBX: 00007f60ee785fa0 RCX: 00007f60ee595d29 [ 708.970235][T10575] RDX: 0000000020000280 RSI: 0000000020000240 RDI: 0000000020000180 [ 708.978215][T10575] RBP: 00007f60ecc01090 R08: 0000000000000000 R09: 0000000000000000 [ 708.986191][T10575] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001 [ 708.994222][T10575] R13: 0000000000000000 R14: 00007f60ee785fa0 R15: 00007ffd7c5a48d8 [ 709.002245][T10575] [ 709.240238][T10593] program syz.2.11472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 709.408134][T10605] loop6: detected capacity change from 0 to 764 [ 709.445216][T10605] Symlink component flag not implemented [ 709.460984][T10605] Symlink component flag not implemented (129) [ 709.472072][T10605] rock: directory entry would overflow storage [ 709.478371][T10605] rock: sig=0x4f50, size=4, remaining=3 [ 709.483993][T10605] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 709.607883][T10626] netlink: 'syz.6.11483': attribute type 4 has an invalid length. [ 709.823262][T10643] loop5: detected capacity change from 0 to 512 [ 709.847794][T10643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.862730][T10643] ext4 filesystem being mounted at /356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 709.869825][T10649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.881767][T10649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.924464][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.988707][T10659] loop5: detected capacity change from 0 to 764 [ 709.996997][T10659] Symlink component flag not implemented [ 710.002772][T10659] Symlink component flag not implemented (129) [ 710.010670][T10659] rock: directory entry would overflow storage [ 710.016950][T10659] rock: sig=0x4f50, size=4, remaining=3 [ 710.022556][T10659] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 710.087635][T10665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.096318][T10665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.514358][T10682] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 710.634423][T10685] 9pnet_fd: Insufficient options for proto=fd [ 710.669755][T10685] loop6: detected capacity change from 0 to 764 [ 710.903245][T10698] 9pnet_rdma: rdma_create_trans (10698): problem binding to privport: 13 [ 710.916764][T10699] loop6: detected capacity change from 0 to 512 [ 710.937261][T10699] EXT4-fs (loop6): orphan cleanup on readonly fs [ 710.940185][T10704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.953182][T10699] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 710.964803][T10704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.976140][T10699] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 710.982918][T10699] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #13: comm syz.6.11508: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 711.002252][T10699] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.11508: couldn't read orphan inode 13 (err -117) [ 711.015299][T10699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 711.034919][T10699] EXT4-fs error (device loop6): ext4_lookup:1817: inode #2: comm syz.6.11508: deleted inode referenced: 12 [ 711.473151][T10722] netlink: 'syz.3.11516': attribute type 1 has an invalid length. [ 711.481856][T10722] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11516'. [ 711.514478][T10728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.523054][T10728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.660138][T10734] bpf_get_probe_write_proto: 2 callbacks suppressed [ 711.660162][T10734] syz.2.11518[10734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 711.669511][T10734] syz.2.11518[10734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 711.681466][T10734] syz.2.11518[10734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 711.728998][T10736] netlink: zone id is out of range [ 711.952858][T10747] FAULT_INJECTION: forcing a failure. [ 711.952858][T10747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.966758][T10747] CPU: 0 UID: 0 PID: 10747 Comm: syz.6.11523 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 711.977902][T10747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 711.987994][T10747] Call Trace: [ 711.991278][T10747] [ 711.994214][T10747] dump_stack_lvl+0xf2/0x150 [ 711.998902][T10747] dump_stack+0x15/0x1a [ 712.003139][T10747] should_fail_ex+0x223/0x230 [ 712.007977][T10747] should_fail+0xb/0x10 [ 712.012145][T10747] should_fail_usercopy+0x1a/0x20 [ 712.017187][T10747] _copy_from_user+0x1e/0xb0 [ 712.022043][T10747] memdup_user+0x64/0xc0 [ 712.026334][T10747] strndup_user+0x68/0xa0 [ 712.030681][T10747] __se_sys_mount+0x4e/0x2d0 [ 712.035332][T10747] ? fput+0x1c4/0x200 [ 712.039378][T10747] ? ksys_write+0x176/0x1b0 [ 712.043972][T10747] __x64_sys_mount+0x67/0x80 [ 712.048725][T10747] x64_sys_call+0x2c84/0x2dc0 [ 712.053483][T10747] do_syscall_64+0xc9/0x1c0 [ 712.058031][T10747] ? clear_bhb_loop+0x55/0xb0 [ 712.062794][T10747] ? clear_bhb_loop+0x55/0xb0 [ 712.067511][T10747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.073498][T10747] RIP: 0033:0x7f60ee595d29 [ 712.077917][T10747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.097533][T10747] RSP: 002b:00007f60ecc01038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 712.105981][T10747] RAX: ffffffffffffffda RBX: 00007f60ee785fa0 RCX: 00007f60ee595d29 [ 712.113957][T10747] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 712.121932][T10747] RBP: 00007f60ecc01090 R08: 0000000020000300 R09: 0000000000000000 [ 712.129917][T10747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.137893][T10747] R13: 0000000000000000 R14: 00007f60ee785fa0 R15: 00007ffd7c5a48d8 [ 712.145900][T10747] [ 712.150812][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 712.150829][ T29] audit: type=1326 audit(1736563672.453:39203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.2.11525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e8835d29 code=0x7ffc0000 [ 712.171457][T10744] 9pnet_rdma: rdma_create_trans (10744): problem binding to privport: 13 [ 712.201523][T10753] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 712.297620][ T29] audit: type=1326 audit(1736563672.593:39204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.11532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256e965d29 code=0x7ffc0000 [ 712.321398][ T29] audit: type=1326 audit(1736563672.593:39205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.11532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256e965d29 code=0x7ffc0000 [ 712.336684][T10770] FAULT_INJECTION: forcing a failure. [ 712.336684][T10770] name failslab, interval 1, probability 0, space 0, times 0 [ 712.346055][ T29] audit: type=1326 audit(1736563672.593:39206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.11532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f256e965d29 code=0x7ffc0000 [ 712.357751][T10770] CPU: 1 UID: 0 PID: 10770 Comm: syz.6.11533 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 712.357790][T10770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 712.357865][T10770] Call Trace: [ 712.357875][T10770] [ 712.357886][T10770] dump_stack_lvl+0xf2/0x150 [ 712.413309][T10770] dump_stack+0x15/0x1a [ 712.417540][T10770] should_fail_ex+0x223/0x230 [ 712.422303][T10770] should_failslab+0x8f/0xb0 [ 712.426917][T10770] kmem_cache_alloc_noprof+0x52/0x320 [ 712.432347][T10770] ? security_file_alloc+0x32/0x100 [ 712.437638][T10770] security_file_alloc+0x32/0x100 [ 712.442695][T10770] init_file+0x5b/0x1b0 [ 712.446907][T10770] alloc_empty_file+0xea/0x200 [ 712.451714][T10770] path_openat+0x6a/0x1fa0 [ 712.456152][T10770] ? _parse_integer_limit+0x167/0x180 [ 712.461637][T10770] ? _parse_integer+0x27/0x30 [ 712.466322][T10770] ? kstrtoull+0x110/0x140 [ 712.470864][T10770] ? kstrtouint+0x77/0xc0 [ 712.475259][T10770] ? kstrtouint_from_user+0xb0/0xe0 [ 712.480508][T10770] do_filp_open+0x107/0x230 [ 712.485094][T10770] do_sys_openat2+0xab/0x120 [ 712.489712][T10770] __x64_sys_openat+0xf3/0x120 [ 712.494488][T10770] x64_sys_call+0x2b30/0x2dc0 [ 712.499253][T10770] do_syscall_64+0xc9/0x1c0 [ 712.503818][T10770] ? clear_bhb_loop+0x55/0xb0 [ 712.508684][T10770] ? clear_bhb_loop+0x55/0xb0 [ 712.513429][T10770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.519350][T10770] RIP: 0033:0x7f60ee595d29 [ 712.523863][T10770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.543653][T10770] RSP: 002b:00007f60ecc01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 712.552075][T10770] RAX: ffffffffffffffda RBX: 00007f60ee785fa0 RCX: 00007f60ee595d29 [ 712.560052][T10770] RDX: 000000000000275a RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 712.568028][T10770] RBP: 00007f60ecc01090 R08: 0000000000000000 R09: 0000000000000000 [ 712.576007][T10770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.584059][T10770] R13: 0000000000000000 R14: 00007f60ee785fa0 R15: 00007ffd7c5a48d8 [ 712.592116][T10770] [ 712.611687][ T29] audit: type=1326 audit(1736563672.593:39207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.11532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256e965d29 code=0x7ffc0000 [ 712.635596][ T29] audit: type=1326 audit(1736563672.593:39208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.11532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f256e965d29 code=0x7ffc0000 [ 712.659333][ T29] audit: type=1326 audit(1736563672.593:39209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.11532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256e965d29 code=0x7ffc0000 [ 712.683126][ T29] audit: type=1326 audit(1736563672.593:39210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.11532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256e965d29 code=0x7ffc0000 [ 712.706914][ T29] audit: type=1326 audit(1736563672.593:39211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.11532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f256e965d29 code=0x7ffc0000 [ 712.730761][ T29] audit: type=1326 audit(1736563672.593:39212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.11532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256e965d29 code=0x7ffc0000 [ 712.881842][T10772] loop5: detected capacity change from 0 to 8192 [ 712.917610][T10787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.923271][T10777] syz.2.11536[10777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 712.926157][T10787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.951291][T10777] syz.2.11536[10777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 712.951395][T10777] syz.2.11536[10777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 712.976789][T10785] 9pnet_rdma: rdma_create_trans (10785): problem binding to privport: 13 [ 713.063023][T10804] usb usb4: usbfs: process 10804 (syz.4.11545) did not claim interface 0 before use [ 713.083914][T10807] 9pnet_fd: Insufficient options for proto=fd [ 713.200803][T10823] 9pnet_fd: Insufficient options for proto=fd [ 713.362903][T10846] syz.4.11555[10846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 713.363063][T10846] syz.4.11555[10846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 713.375689][T10846] syz.4.11555[10846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 713.396884][T10847] 9pnet_rdma: rdma_create_trans (10847): problem binding to privport: 13 [ 713.457773][T10861] 9pnet_fd: Insufficient options for proto=fd [ 713.470073][T10864] syz.4.11558[10864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 713.703734][T10904] loop3: detected capacity change from 0 to 764 [ 713.748271][T10904] Symlink component flag not implemented [ 713.768066][T10904] Symlink component flag not implemented (129) [ 713.795045][T10904] rock: directory entry would overflow storage [ 713.801245][T10904] rock: sig=0x4f50, size=4, remaining=3 [ 713.807525][T10904] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 714.039599][T10962] 9pnet_fd: Insufficient options for proto=fd [ 714.124982][T10968] usb usb4: usbfs: process 10968 (syz.6.11576) did not claim interface 0 before use [ 714.143093][T10960] loop3: detected capacity change from 0 to 8192 [ 714.165414][T10971] lo speed is unknown, defaulting to 1000 [ 714.202008][T10975] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 714.208562][T10975] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 714.216110][T10975] vhci_hcd vhci_hcd.0: Device attached [ 714.237725][T10975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11577'. [ 714.246939][T10975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11577'. [ 714.247366][T10982] netlink: zone id is out of range [ 714.267327][T10975] bridge0: port 3(ipvlan0) entered blocking state [ 714.273833][T10975] bridge0: port 3(ipvlan0) entered disabled state [ 714.284461][T10975] ipvlan0: entered allmulticast mode [ 714.290698][T10975] bridge0: entered allmulticast mode [ 714.300480][T10975] ipvlan0: left allmulticast mode [ 714.305582][T10975] bridge0: left allmulticast mode [ 714.324782][T10971] lo speed is unknown, defaulting to 1000 [ 714.345501][T10991] sch_tbf: burst 1 is lower than device lo mtu (18) ! [ 714.416527][ T3560] vhci_hcd: vhci_device speed not set [ 714.430485][T11003] 9pnet_fd: Insufficient options for proto=fd [ 714.435293][T11007] 9pnet_fd: Insufficient options for proto=fd [ 714.445005][T11005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11005 comm=syz.5.11579 [ 714.455393][T10976] vhci_hcd: connection closed [ 714.458676][T25705] vhci_hcd: stop threads [ 714.468442][T25705] vhci_hcd: release socket [ 714.473119][T25705] vhci_hcd: disconnect device [ 714.478369][ T3560] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 714.492232][ T3560] usb 5-1: enqueue for inactive port 0 [ 714.504006][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11586'. [ 714.511877][ T3560] usb 5-1: enqueue for inactive port 0 [ 714.540018][ T3560] usb 5-1: enqueue for inactive port 0 [ 714.565962][T11018] netlink: 'syz.3.11592': attribute type 4 has an invalid length. [ 714.615512][ T3560] vhci_hcd: vhci_device speed not set [ 714.708194][T11030] loop3: detected capacity change from 0 to 8192 [ 714.790160][T11040] 9pnet_fd: Insufficient options for proto=fd [ 714.891840][T11050] usb usb4: usbfs: process 11050 (syz.3.11604) did not claim interface 0 before use [ 714.921935][T11052] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 714.943266][T11053] lo speed is unknown, defaulting to 1000 [ 714.977636][T11053] lo speed is unknown, defaulting to 1000 [ 714.993684][T11054] loop3: detected capacity change from 0 to 512 [ 715.013173][T11054] EXT4-fs (loop3): orphan cleanup on readonly fs [ 715.125328][T11054] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11605: bg 0: block 248: padding at end of block bitmap is not set [ 715.181221][T11054] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.11605: Failed to acquire dquot type 1 [ 715.216762][T11054] EXT4-fs (loop3): 1 truncate cleaned up [ 715.263720][T11064] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 715.334684][T11067] loop5: detected capacity change from 0 to 512 [ 715.354976][T11067] EXT4-fs (loop5): orphan cleanup on readonly fs [ 715.372903][T11067] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11608: bg 0: block 248: padding at end of block bitmap is not set [ 715.400946][T11067] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.11608: Failed to acquire dquot type 1 [ 715.422775][T11071] 9pnet_rdma: rdma_create_trans (11071): problem binding to privport: 13 [ 715.451237][T11067] EXT4-fs (loop5): 1 truncate cleaned up [ 715.493722][T11074] 9pnet_fd: Insufficient options for proto=fd [ 715.528427][T11076] netlink: zone id is out of range [ 715.553822][T11078] netlink: 96 bytes leftover after parsing attributes in process `syz.6.11613'. [ 715.565119][T11078] netlink: 133492 bytes leftover after parsing attributes in process `syz.6.11613'. [ 715.676018][T11092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.684566][T11092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.700974][T11095] 9pnet_fd: Insufficient options for proto=fd [ 715.772275][T11101] loop6: detected capacity change from 0 to 8192 [ 715.903530][T11122] FAULT_INJECTION: forcing a failure. [ 715.903530][T11122] name failslab, interval 1, probability 0, space 0, times 0 [ 715.916259][T11122] CPU: 1 UID: 0 PID: 11122 Comm: syz.6.11628 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 715.927153][T11122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 715.937231][T11122] Call Trace: [ 715.940547][T11122] [ 715.943591][T11122] dump_stack_lvl+0xf2/0x150 [ 715.948271][T11122] dump_stack+0x15/0x1a [ 715.952464][T11122] should_fail_ex+0x223/0x230 [ 715.957198][T11122] ? x509_cert_parse+0x69/0x440 [ 715.962088][T11122] should_failslab+0x8f/0xb0 [ 715.966822][T11122] __kmalloc_cache_noprof+0x4e/0x320 [ 715.972140][T11122] x509_cert_parse+0x69/0x440 [ 715.976919][T11122] x509_key_preparse+0x3c/0x400 [ 715.981818][T11122] asymmetric_key_preparse+0x6b/0xc0 [ 715.987183][T11122] __key_create_or_update+0x29f/0x750 [ 715.992651][T11122] key_create_or_update+0x42/0x60 [ 715.997824][T11122] __se_sys_add_key+0x280/0x320 [ 716.002735][T11122] ? fput+0x1c4/0x200 [ 716.006739][T11122] __x64_sys_add_key+0x67/0x80 [ 716.011606][T11122] x64_sys_call+0x2964/0x2dc0 [ 716.016317][T11122] do_syscall_64+0xc9/0x1c0 [ 716.020906][T11122] ? clear_bhb_loop+0x55/0xb0 [ 716.025696][T11122] ? clear_bhb_loop+0x55/0xb0 [ 716.030407][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.036345][T11122] RIP: 0033:0x7f60ee595d29 [ 716.040955][T11122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.060594][T11122] RSP: 002b:00007f60ecc01038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 716.069115][T11122] RAX: ffffffffffffffda RBX: 00007f60ee785fa0 RCX: 00007f60ee595d29 [ 716.077120][T11122] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000020000100 [ 716.081019][T11128] loop5: detected capacity change from 0 to 512 [ 716.085108][T11122] RBP: 00007f60ecc01090 R08: 0000000032467a58 R09: 0000000000000000 [ 716.085135][T11122] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 716.085152][T11122] R13: 0000000000000000 R14: 00007f60ee785fa0 R15: 00007ffd7c5a48d8 [ 716.085177][T11122] [ 716.139457][T11128] ext4 filesystem being mounted at /386/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 716.168038][T11128] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11632'. [ 716.192149][T11144] netlink: 'syz.2.11638': attribute type 4 has an invalid length. [ 716.220834][T11145] loop6: detected capacity change from 0 to 2048 [ 716.252348][T11149] 9pnet_fd: Insufficient options for proto=fd [ 716.259497][T11143] loop3: detected capacity change from 0 to 8192 [ 716.266955][T11145] loop6: p3 < > p4 < > [ 716.271139][T11145] loop6: partition table partially beyond EOD, truncated [ 716.280051][T11149] loop5: detected capacity change from 0 to 764 [ 716.284378][T11145] loop6: p3 start 4284289 is beyond EOD, truncated [ 716.356540][T11155] 9pnet_rdma: rdma_create_trans (11155): problem binding to privport: 13 [ 716.408736][T11162] loop3: detected capacity change from 0 to 512 [ 716.429159][T11165] futex_wake_op: syz.4.11645 tries to shift op by -1; fix this program [ 716.439564][T11162] ext4 filesystem being mounted at /549/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 716.461347][T11169] siw: device registration error -23 [ 716.488101][T11169] netlink: 'syz.4.11646': attribute type 1 has an invalid length. [ 716.496005][T11169] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11646'. [ 716.521700][T11179] usb usb4: usbfs: process 11179 (syz.3.11648) did not claim interface 0 before use [ 716.635681][T11190] loop5: detected capacity change from 0 to 8192 [ 716.645852][T11192] 9pnet_rdma: rdma_create_trans (11192): problem binding to privport: 13 [ 716.676002][T11199] 9pnet_fd: Insufficient options for proto=fd [ 716.720091][T11203] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 716.793806][T11212] usb usb4: usbfs: process 11212 (syz.3.11662) did not claim interface 0 before use [ 716.808302][T11214] siw: device registration error -23 [ 716.834827][T11214] netlink: 'syz.5.11661': attribute type 1 has an invalid length. [ 716.842694][T11214] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11661'. [ 716.878517][T11226] loop5: detected capacity change from 0 to 512 [ 716.943163][T11236] 9pnet_fd: Insufficient options for proto=fd [ 716.950863][T11232] 9pnet_rdma: rdma_create_trans (11232): problem binding to privport: 13 [ 716.984155][T11240] loop5: detected capacity change from 0 to 764 [ 716.992792][T11240] Symlink component flag not implemented [ 716.999098][T11242] FAULT_INJECTION: forcing a failure. [ 716.999098][T11242] name failslab, interval 1, probability 0, space 0, times 0 [ 716.999883][T11240] Symlink component flag not implemented (129) [ 717.011866][T11242] CPU: 1 UID: 0 PID: 11242 Comm: syz.6.11672 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 717.028776][T11242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 717.028795][T11242] Call Trace: [ 717.028804][T11242] [ 717.028872][T11242] dump_stack_lvl+0xf2/0x150 [ 717.042222][T11242] dump_stack+0x15/0x1a [ 717.049736][T11242] should_fail_ex+0x223/0x230 [ 717.058648][T11242] should_failslab+0x8f/0xb0 [ 717.063332][T11242] __kmalloc_noprof+0xab/0x3f0 [ 717.063365][T11242] ? __se_sys_memfd_create+0x230/0x5c0 [ 717.073559][T11242] __se_sys_memfd_create+0x230/0x5c0 [ 717.073595][T11242] __x64_sys_memfd_create+0x31/0x40 [ 717.084191][T11242] x64_sys_call+0x2d4c/0x2dc0 [ 717.084218][T11242] do_syscall_64+0xc9/0x1c0 [ 717.084243][T11242] ? clear_bhb_loop+0x55/0xb0 [ 717.093413][T11242] ? clear_bhb_loop+0x55/0xb0 [ 717.093444][T11242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.102785][T11242] RIP: 0033:0x7f60ee595d29 [ 717.102808][T11242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.113114][T11242] RSP: 002b:00007f60ecc00d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 717.141126][T11242] RAX: ffffffffffffffda RBX: 00000000000005f8 RCX: 00007f60ee595d29 [ 717.141144][T11242] RDX: 00007f60ecc00dec RSI: 0000000000000000 RDI: 00007f60ee612469 [ 717.141160][T11242] RBP: 0000000020000bc0 R08: 00007f60ecc00b07 R09: 0000000000000000 [ 717.157085][T11242] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 717.169460][T11240] rock: directory entry would overflow storage [ 717.173224][T11242] R13: 00007f60ecc00dec R14: 00007f60ecc00df0 R15: 00007ffd7c5a48d8 [ 717.173254][T11242] [ 717.179419][T11240] rock: sig=0x4f50, size=4, remaining=3 [ 717.192972][T11243] loop3: detected capacity change from 0 to 764 [ 717.196712][T11240] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 717.256673][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 717.256691][ T29] audit: type=1326 audit(1736563677.553:39582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.3.11669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256e965d29 code=0x7ffc0000 [ 717.331343][ T29] audit: type=1326 audit(1736563677.623:39583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.5.11678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 717.355877][ T29] audit: type=1326 audit(1736563677.623:39584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.5.11678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 717.363998][T11263] loop5: detected capacity change from 0 to 2048 [ 717.379660][ T29] audit: type=1326 audit(1736563677.623:39585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.5.11678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 717.410816][ T29] audit: type=1326 audit(1736563677.623:39586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.5.11678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 717.435325][ T29] audit: type=1326 audit(1736563677.623:39587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.5.11678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 717.436058][T11265] 9pnet_rdma: rdma_create_trans (11265): problem binding to privport: 13 [ 717.459198][ T29] audit: type=1326 audit(1736563677.623:39588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.5.11678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 717.492093][ T29] audit: type=1326 audit(1736563677.623:39589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.5.11678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 717.516551][ T29] audit: type=1326 audit(1736563677.623:39590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.5.11678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 717.540241][ T29] audit: type=1326 audit(1736563677.623:39591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.5.11678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f15578f5d29 code=0x7ffc0000 [ 717.593896][T11269] netlink: zone id is out of range [ 717.691848][T11286] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 717.706545][T11290] FAULT_INJECTION: forcing a failure. [ 717.706545][T11290] name failslab, interval 1, probability 0, space 0, times 0 [ 717.719378][T11290] CPU: 0 UID: 0 PID: 11290 Comm: syz.2.11692 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 717.730259][T11290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 717.740346][T11290] Call Trace: [ 717.743651][T11290] [ 717.746595][T11290] dump_stack_lvl+0xf2/0x150 [ 717.751242][T11290] dump_stack+0x15/0x1a [ 717.755439][T11290] should_fail_ex+0x223/0x230 [ 717.760138][T11290] should_failslab+0x8f/0xb0 [ 717.764759][T11290] kmem_cache_alloc_noprof+0x52/0x320 [ 717.770167][T11290] ? create_new_namespaces+0x3c/0x430 [ 717.775563][T11290] create_new_namespaces+0x3c/0x430 [ 717.780846][T11290] __se_sys_setns+0x1b4/0xef0 [ 717.785559][T11290] ? fput+0x1c4/0x200 [ 717.789550][T11290] __x64_sys_setns+0x31/0x40 [ 717.794188][T11290] x64_sys_call+0x16ec/0x2dc0 [ 717.798879][T11290] do_syscall_64+0xc9/0x1c0 [ 717.803480][T11290] ? clear_bhb_loop+0x55/0xb0 [ 717.808172][T11290] ? clear_bhb_loop+0x55/0xb0 [ 717.812858][T11290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.818845][T11290] RIP: 0033:0x7f98e8835d29 [ 717.823258][T11290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.842887][T11290] RSP: 002b:00007f98e6ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 717.851345][T11290] RAX: ffffffffffffffda RBX: 00007f98e8a25fa0 RCX: 00007f98e8835d29 [ 717.859325][T11290] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000004 [ 717.867308][T11290] RBP: 00007f98e6ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 717.875348][T11290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.883379][T11290] R13: 0000000000000000 R14: 00007f98e8a25fa0 R15: 00007ffd7945da78 [ 717.891416][T11290] [ 717.972895][T11308] netlink: zone id is out of range [ 718.091170][T11331] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 718.091764][T11333] 9pnet_fd: Insufficient options for proto=fd [ 718.162521][T11341] loop5: detected capacity change from 0 to 512 [ 718.179665][T11341] EXT4-fs (loop5): orphan cleanup on readonly fs [ 718.192208][T11341] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11711: bg 0: block 248: padding at end of block bitmap is not set [ 718.223042][T11341] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.11711: Failed to acquire dquot type 1 [ 718.237915][T11347] netlink: zone id is out of range [ 718.250703][T11341] EXT4-fs (loop5): 1 truncate cleaned up [ 718.337584][T11360] loop5: detected capacity change from 0 to 764 [ 718.342617][T11362] loop6: detected capacity change from 0 to 512 [ 718.351782][T11362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 718.360676][T11360] Symlink component flag not implemented [ 718.366956][T11360] Symlink component flag not implemented (129) [ 718.369084][T11362] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 718.385687][T11360] rock: directory entry would overflow storage [ 718.389077][T11362] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 718.391934][T11360] rock: sig=0x4f50, size=4, remaining=3 [ 718.407027][T11360] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 718.407957][T11362] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 718.435872][T11362] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28 [ 718.448340][T11362] EXT4-fs (loop6): This should not happen!! Data will be lost [ 718.448340][T11362] [ 718.458094][T11362] EXT4-fs (loop6): Total free blocks count 0 [ 718.464099][T11362] EXT4-fs (loop6): Free/Dirty block details [ 718.470043][T11362] EXT4-fs (loop6): free_blocks=39626 [ 718.475375][T11362] EXT4-fs (loop6): dirty_blocks=16 [ 718.480510][T11362] EXT4-fs (loop6): Block reservation details [ 718.486532][T11362] EXT4-fs (loop6): i_reserved_data_blocks=16 [ 718.529888][T11379] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 718.537884][T11374] delete_channel: no stack [ 718.550091][T11380] netlink: zone id is out of range [ 718.557038][T11371] delete_channel: no stack [ 718.609882][T11386] loop3: detected capacity change from 0 to 512 [ 718.636194][T11386] EXT4-fs (loop3): orphan cleanup on readonly fs [ 718.645554][T11386] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11730: bg 0: block 248: padding at end of block bitmap is not set [ 718.658990][T11393] usb usb4: usbfs: process 11393 (syz.5.11735) did not claim interface 0 before use [ 718.687213][T11386] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.11730: Failed to acquire dquot type 1 [ 718.702951][T11396] SELinux: security policydb version 18 (MLS) not backwards compatible [ 718.715308][T11386] EXT4-fs (loop3): 1 truncate cleaned up [ 718.725505][T11396] SELinux: failed to load policy [ 718.742662][T11386] EXT4-fs mount: 15 callbacks suppressed [ 718.742683][T11386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 718.774329][ T1739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.859369][T11410] ================================================================== [ 718.867493][T11410] BUG: KCSAN: data-race in file_update_time / inode_update_timestamps [ 718.875677][T11410] [ 718.878014][T11410] write to 0xffff888167d5782c of 4 bytes by task 11401 on cpu 1: [ 718.885750][T11410] inode_update_timestamps+0x139/0x250 [ 718.887245][T11407] loop3: detected capacity change from 0 to 8192 [ 718.891240][T11410] file_update_time+0x219/0x2b0 [ 718.891272][T11410] fault_dirty_shared_page+0xde/0x340 [ 718.903281][T11412] loop5: detected capacity change from 0 to 512 [ 718.907816][T11410] handle_mm_fault+0x1389/0x2ac0 [ 718.907846][T11410] __get_user_pages+0xf2c/0x2670 [ 718.907874][T11410] faultin_page_range+0x352/0x5d0 [ 718.907901][T11410] do_madvise+0x42b/0x2a70 [ 718.907923][T11410] __x64_sys_madvise+0x61/0x70 [ 718.907946][T11410] x64_sys_call+0x23ab/0x2dc0 [ 718.942899][T11410] do_syscall_64+0xc9/0x1c0 [ 718.947437][T11410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.953360][T11410] [ 718.955689][T11410] read to 0xffff888167d5782c of 4 bytes by task 11410 on cpu 0: [ 718.963322][T11410] file_update_time+0x8b/0x2b0 [ 718.968101][T11410] fault_dirty_shared_page+0xde/0x340 [ 718.973485][T11410] handle_mm_fault+0x1389/0x2ac0 [ 718.978429][T11410] __get_user_pages+0xf2c/0x2670 [ 718.983376][T11410] faultin_page_range+0x352/0x5d0 [ 718.988412][T11410] do_madvise+0x42b/0x2a70 [ 718.992836][T11410] __x64_sys_madvise+0x61/0x70 [ 718.997608][T11410] x64_sys_call+0x23ab/0x2dc0 [ 719.002295][T11410] do_syscall_64+0xc9/0x1c0 [ 719.006806][T11410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.012725][T11410] [ 719.015049][T11410] value changed: 0x088afe83 -> 0x09239503 [ 719.020763][T11410] [ 719.023083][T11410] Reported by Kernel Concurrency Sanitizer on: [ 719.029229][T11410] CPU: 0 UID: 0 PID: 11410 Comm: syz.2.11739 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 719.040085][T11410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 719.050143][T11410] ================================================================== [ 719.082623][T11412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.101434][T11412] ext4 filesystem being mounted at /418/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 719.149724][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.