last executing test programs: 8m33.36011215s ago: executing program 32 (id=35): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xc8) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) r5 = socket$packet(0x11, 0x3, 0x300) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r7}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES32, @ANYBLOB="0001000000000000000000000000000004000000", @ANYRES32=r8], 0x50) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1f8, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0xa7, 0x3, "2b9843f9ec9106e2c650978d9ae94749286f100a32b23b03b3933b7c655b643b14733afab8ecdf29d5ebc7c512e4f7e416c450e96f73aae05d37a69a3757086c849ee7cbc3ad7fcb438334e0cbc9151f3222dab1d3af4f9461be8ec8ee69d07ed5cbf94f06c010cf6f6ea23ba167b594831efdbc61e83a62d3ecd740abd50157cec58a6ccf980b5b3c7f9ad72655d02d914fac06edf8a437b40f444843e0476f21717c"}, @ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x9d, 0x3, "e0b55ad5fba9d6a820f24e710b4cdb3928044d8a9b5062f9453f6a4ddbb5b4dc8b3ac0752bb323447926de978eb966fc1c0eb1a6913a343dfdb5aafeee0eea681b1904aefac38816723278e5fef538927b3600a3e7a3e1077a8b07564eda4b239192663e5decfc3622a5e5af5ab4581fbe6b8f578800430440c16a44a98fd1c5c426418a85c28363a8b5ae00d41a69feb7b14f114a32d587d6"}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000065bf2b8f7700", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r9}, &(0x7f0000000500), &(0x7f0000000540)='%pB \x00'}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x660}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) 8m17.250023366s ago: executing program 33 (id=298): syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0x20}, {0x6, 0x0, 0x0, 0xfffffff9}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') 8m13.886211239s ago: executing program 34 (id=357): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)) 7m15.099035335s ago: executing program 35 (id=1272): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x0, 0x5, 0x0, 0xd, 0x0, 0x0, 0x0}) 6m8.153765365s ago: executing program 0 (id=2209): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r5, 0x0, 0x42}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0040040000c10000280012800900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000009196bd"], 0x14}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 6m8.153059585s ago: executing program 0 (id=2210): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4120000, &(0x7f0000000e80)=ANY=[@ANYBLOB="756e686964652c68696465006e6f726f636b2c73657373696f6e3d3078303030303030013030303030303030312c686964652c63007b6865636b3d7374726963f4416e6f636fd689c91ceb036442a5e8b65659212a2bbc4e30952aa22edafcc01c50d9545f6d70726573534d6e6f726f636b2c6368657f12106458668eb97fd25f742c696f636861727365743d69736f383835392d31332c63727566742c7065726d6928d7997c17d1c8704a54dc34229c72656374696f2c61756469742c004b32b19ac463afda9675ef356e50e2fb3d253ba1480f27afe645fded942f5957f2992896524e7731fa148037452b21c34c9918911ac37dff04099efbbf3c69c8fb9bdcda4683151bb24329a40b273da9bce1145213686d55a96caab752943c330423edc3876e0b859d57cd6d60dc5220aa1367c24de5e66343c128db17391d25b7aa35001e68df726f9ca1e0bfab6993329f0318602f3c51a28ed0858da3e3c47e95de50cbd34e68dd8517f1b4e1eeab0000000000e7b4ea43ef9e4d817aae8e0d2e71215bc0127620b046361adbde0b60bee63e91aa28d93cd8d79802966dbfacceffe6b1d302c5515d7323f7cca3f665a6964cba6cd16ae40bc68e94ac6b40bf96a55dcefd4024a5d7a848d08bdb5d8bb89b4c1968cf6ae0fd7858fa38b738c1ee6822f2cfdb30c3941199251d603d495ab6ce2ddb8e918e72b9171aaa287f2b19755bdc92109150850d5c14ec2ac32dee0122b28fcb3e88d5096d6352799c5f13f597695adfd21e644379e6a400000000000000000000000000fa41c3f14dca4ef03fed7e6466a4e2d4503979398731ee0fc7487e0b09466d841e2d8e64ed9e0d4333e6a79acee454fdb4fff932f1230000003dc7491f6290c2b85c5ee3e72887918e7ab6c4b297b1ab77e7", @ANYRES16, @ANYBLOB="96648120b39ccb5a42bd8121795a577d4666c2abe88e2e31656397e5d02f8a0275d87b6c57a38cd3d7b15e7a"], 0x1, 0x694, &(0x7f0000001140)="$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") r1 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x92, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40440, 0xe3) unshare(0x6a040000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0xb) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x4, &(0x7f0000000680)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000300)={'nat\x00', 0x0, 0x4, 0x0, [0x4, 0x8, 0x5, 0xa1, 0x6, 0x7], 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x78) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6m8.064878575s ago: executing program 0 (id=2212): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 11) 6m7.814885164s ago: executing program 0 (id=2216): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f00000002c0)={[], [{@uid_eq}]}, 0xff, 0x279, &(0x7f0000001cc0)="$eJzs3T9oJFUcB/DfzO667t0ipzaCqAeiooFwNiLYaKNwIEcQEVSISLCSRIgJVmatbBS0VkllE8TOaCk2wUbQMmqK2FgYBA0WWqzMzm5Yk01MspuZS+bzgWX+vPfmvSX7ffOayQRQWVci4smIqEXEVEQ0IiIZrnA1/1zpH662NmYjut3nfk969fLj3KDd5YjoRMTjEfVB2fL6S9t/bT7z0HtLjQc+XX+xVdT3G7azvfXs7ic33v3i+qPLaf9cu78d/h6T1Bxxrp5E3HEWnd0kknrZI+A4Zt76/Mcs93dGxP29/Dci7Uf2g8VbvmnEIx8f1vbD376/u8ixApPX7Taye2CnC1RO2lsDJ+l0ROT7aTo9na/hf6pdSl9fWHxz6rWFpfm5smcqYFLaEVtPf9X88nJv//29/P9ay/MPXFxZ/p+fWfs529+tlT0aoBD35Jss/1OvrDwcR+T/RpHjAgqT5//tXvLd/6Fajr7///DHwRZ/FzMw4MwdZ/3fd2tRYwJO6JRr9xPkHzjXHry6/4z8Q3XJP1xgjcFOZ2Sx/EN1yT9Ul/xDdQ3nHwColm6z7CeQgbKUPf8AAAAAAAAAAAAAAAAAAAAHrbY2ZgefiV64eXjRtx9F7DwVEfVR/dd67yMevH7k0p9JVm1Pkjcby8v3jXmBMX1W8tPXt/1Sbv/f3Xs2133nv4etw+qtzEd0ssrX5h47+PtL+r+/07v9f8obr47ZwQmk/cwMe+KF4vof5Z+1cvu/vhnxdTb/XMvmn/a+v38ad/W2o+ef9vC/WD6lN7xSDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Nz4NwAA//9U5m2z") openat(0xffffffffffffff9c, 0x0, 0x123340, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x73b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000980)='S', 0x1, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1bffffff, 0x0, 0x0, 0x3d, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6m6.467013771s ago: executing program 0 (id=2229): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}, {@user_xattr}]}, 0xfd, 0x4fa, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000005c0)=""/188, 0xbc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) ioprio_set$pid(0x1, 0x0, 0x6000) lseek(r1, 0xfffffffffffffff8, 0x1) getdents64(r1, &(0x7f0000000140)=""/109, 0x6d) listxattr(&(0x7f0000000a00)='./file1\x00', 0x0, 0x0) 6m6.081468061s ago: executing program 0 (id=2237): socket$inet_tcp(0x2, 0x1, 0x0) getpid() gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0x3f1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0xa, 0x0, 0x1, 'queue1\x00'}) 6m3.293472915s ago: executing program 1 (id=2270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4, 0x0, 0x42}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0040040000c10000280012800900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000009196bd"], 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 6m3.208497364s ago: executing program 1 (id=2272): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 6m3.080717194s ago: executing program 1 (id=2275): signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x6]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0xfffffaa5, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x4, 0x9, 0x20}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0xffffffffffffffff], &(0x7f00000006c0)=[{0x1, 0x1, 0x6, 0x7}, {0x2, 0x1, 0x6, 0x8}, {0x4, 0x4}, {0x2, 0x1, 0xc, 0x7}, {0x3, 0x2, 0xf, 0x7}, {0x5, 0x1, 0xb, 0x8}], 0x10, 0xe25, @void, @value}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x8100) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)}, 0x10) r1 = socket$kcm(0x11, 0x2, 0x0) close(r1) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) readlinkat(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1}, &(0x7f0000000840), &(0x7f0000000880)='%pi6 \x00'}, 0x20) pipe2(&(0x7f0000000900), 0x800) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000001680)={0x9, 0x40000000400000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) 6m2.221064882s ago: executing program 1 (id=2288): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r2 = socket(0x2, 0x3, 0x100000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x9) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000006c0)={{0x5, 0x7f8}, 0x100, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kmem_cache_free\x00', r8, 0x0, 0x400}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}}, {{@in=@rand_addr=0xffffffff, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x4, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 6m2.171132722s ago: executing program 1 (id=2289): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}, {@user_xattr}]}, 0xfd, 0x4fa, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000005c0)=""/188, 0xbc) 6m2.081899352s ago: executing program 6 (id=2290): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0xe54aef35e9c2845d, 0x0, 0x0) r0 = syz_io_uring_setup(0x111, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7ff, 0x6000}) io_uring_enter(r0, 0x1c40, 0x1aa5, 0x60, 0x0, 0x0) 6m1.917618951s ago: executing program 1 (id=2292): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfa, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 6m1.809117041s ago: executing program 6 (id=2294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001c70000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$selinux_context(r1, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb5e4fd27cae43ac5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7ffffffffffff}, 0x18) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r10, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x0, 0xffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x18d6, &(0x7f0000000040), &(0x7f0000ffe000), &(0x7f0000ffe000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6m0.896330229s ago: executing program 6 (id=2298): signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x6]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0xfffffaa5, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x4, 0x9, 0x20}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0xffffffffffffffff], &(0x7f00000006c0)=[{0x1, 0x1, 0x6, 0x7}, {0x2, 0x1, 0x6, 0x8}, {0x4, 0x4}, {0x2, 0x1, 0xc, 0x7}, {0x3, 0x2, 0xf, 0x7}, {0x5, 0x1, 0xb, 0x8}], 0x10, 0xe25, @void, @value}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x8100) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)}, 0x10) r1 = socket$kcm(0x11, 0x2, 0x0) close(r1) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) readlinkat(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1}, &(0x7f0000000840), &(0x7f0000000880)='%pi6 \x00'}, 0x20) pipe2(&(0x7f0000000900), 0x800) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000001680)={0x9, 0x40000000400000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) 6m0.045455578s ago: executing program 6 (id=2302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0xffffffffffffffff, 0x2072800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") unshare(0x2040400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x1014986, &(0x7f0000000140)={[{@inlinecrypt}, {@abort}, {@jqfmt_vfsold}, {@bh}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$eJzs289vFFUcAPDvzLZg+WEr4g9+qFU0Nv5oaUHl4EGNJh40MfGCx9oWgizU0JoIIYrG4NGQeDceTfwLPOnFqCcTr3o3JMRwEU1M1szuDLs77C4U2i5lP59k4L2d17733Tdv9715nQAG1nj2TxKxLSJ+j4jRRra9wHjjvyuXz879c/nsXBK12tt/JfVyf18+O1cULX5ua56ZSCPSz5LY06HepdNnjs9Wqwun8vzU8on3p5ZOn3n22InZowtHF07OHDp08MD0C8/PPHeDkfxX63X2nqytuz9a3Lvr9XcuvDl3+MK7P3+bFPGX4lgl471OPlHr2dwNZ3tLOhnqY0NYkUpEZN01XB//o1GJZueNxmuf9rVxwJqq5bqcPlcD7mBJ9LsFQH8UX/TZ+rc41m/20X+XXm4sgLK4r+RH48xQpNFYGA2X1reraTwiDp/796vsiLW5DwEA0Ob7bP7zTKf5Xxr3t5S7O98bGsv3UnZExL0RsTMi7ouol30gIh5cYf3lTZJr5z/pxZsK7AZl878X872t9vlfWhQZq+S57fXMcHLkWHVhf/6eTMTw5iw/3aOOH1797Ytu51rnf9mR1V/MBfN2XBza3P4z87PLs7cSc6tLn0TsHuoUf3J1JyCJiF0Rsfsm6zj21Dd7u50rxT/SvvlY9lJ7dhX2mWpfRzzZ6P9zUYq/kPTen5y6K6oL+6eKq+Jav/x6/q1u9V+//9dW1v9bOl7/V+MfS1r3a5dWXsf5Pz7vuqaZXPH1vyk65T6cXV4+NR2xKXmj0ejW12ea5Yt8UT6Lf2Jf5/G/I5rvxJ6IyC7ihyLi4Yh4JO+7RyPisYjYVw4sbSZ/euXx95q59gv8duj/+VL/j7UXKfV/M7Epyq90TlSO//hd+29sJm/s8+9gPTWRv5J9/l1v97y1FUmPBt7auwcAAAAbQxoR2yJJJ6+m03RysvE3/DtjS1pdXFp++sjiByfnG88IjMVwWtzpatwPbtwPnc6X9UV+ppQ/kN83/rIyUs9Pzi1W5/sdPAy4rV3Gf+bPSr9bB6w5z2vB4DL+YXAZ/zC4jH8YXB3G/0g/2gGsv07f/x83k7XR9WwMsK5K49+2HwwQ638YXMY/DK7W8d/z+XvgTrI0Er0f3h+ARHp7NGODJSLtW+3pqv/mZI1Hwbb+99dKE/3+ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFgd/wcAAP//nHbk3g==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x183081, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x1, 0x4002, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x40000, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 5m59.836471157s ago: executing program 6 (id=2303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41103, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x96ef}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x50864c3c5b6a2a38, 0xffffffffffffffff, 0x4b17e000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x84}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 5m57.383999782s ago: executing program 6 (id=2318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000001340)=0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r0, @ANYBLOB="7961fcdebf8b000000007e", @ANYRES16=r1, @ANYRESOCT=r1], 0x1c}}, 0x44040) 5m57.340755202s ago: executing program 36 (id=2318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000001340)=0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r0, @ANYBLOB="7961fcdebf8b000000007e", @ANYRES16=r1, @ANYRESOCT=r1], 0x1c}}, 0x44040) 5m50.981877409s ago: executing program 37 (id=2237): socket$inet_tcp(0x2, 0x1, 0x0) getpid() gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0x3f1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0xa, 0x0, 0x1, 'queue1\x00'}) 5m46.611034339s ago: executing program 38 (id=2292): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfa, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 1m39.952919681s ago: executing program 8 (id=6743): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', './file2', [{0x20, 'ex\x00\x00\x00I\xc0\x03\xf1\x98\xccn\xe1\x12M\xf1r]B\xdc\xca\x90I\x9f\xa6\x1f\x11F\xfd\xbc\xd5\xa7\xd2\xd6w\x8c\x88\xbfy\xbb*\xa6\xfd\x8cc\xcb\xda\xc1\xde\xaf\x0e\xd8f=7j\v\xe2\x98\x9a;\x8b\xed\xddr\x8ca\\|J6\xde\x17\x01\t\xeb\x7fK\x8d\xcfG\\Hx\x12G'}, {0x20, ':@'}, {0x20, 'trusted.overlay.upper\x00'}], 0xa, "98ffe8aad460"}, 0x82) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000300000000000000fefffd8e29206e9a82ecf568aeb3c0990bc55e5c8e185fb426a1858ad710ce98b6fe4499523d1792c9d2e36f82da94d4114389efa2f5d74f109f69a1c6c52a250553005741b2e2b9b309d8fd8395b7330ee9dfe890332451b652837b2db176c2387632b718cfe1d59fa04261653502f30f86fe0a6d144f8f2fc1070164591252aef7070416a7e4647916c975643de400"/167], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bda15a08769bcd5107053eaafa98740f8cb9694c01f0000000000", 0x20) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) getpgid(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f00000002c0)}, 0x20) write$qrtrtun(r3, &(0x7f00000016c0)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930e9268649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f403000000203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b671ff8b0bf20420c462aa1bb93218edaa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809586d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495c79ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35c498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c1761f1322b03cc9ea586d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2afc1ec271d9f94673781736471bd90bbac943d39b3d7e03982eb4115efb36862554a8702a0480a4c29ba263282", 0x3ba) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) 1m38.876390108s ago: executing program 8 (id=6754): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000000c0)=""/132) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f0000000280)={0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) flock(r2, 0x2) 1m38.127096647s ago: executing program 8 (id=6770): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r1 = open(&(0x7f0000000000)='./file1\x00', 0x1c927e, 0xb4) fallocate(r1, 0x1, 0x0, 0x1001f0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f0000000180)=[{&(0x7f00000006c0)="97b3408d894e", 0x6}], 0x1, 0xe7b, 0x0, 0x0) 1m37.769726166s ago: executing program 8 (id=6773): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r2, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x0, 0x5, [@random="4a5ddec4265b", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @remote, @multicast]}) 1m37.697595546s ago: executing program 8 (id=6775): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x8f4, 0x0, 0x5, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x78, 0x30, 0x1, 0x3, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x7, 0x0, 0x9, 0x4}, 0xd}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x78}}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xd931d3864d39dcca) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa54000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xc2) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x900000d2) read(r4, 0x0, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1m37.480167856s ago: executing program 8 (id=6780): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='\b', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m22.366009213s ago: executing program 39 (id=6780): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='\b', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m8.509795364s ago: executing program 7 (id=7191): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0xfffffff8, 0xffffffffffffff86, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x2100, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) 1m8.248757924s ago: executing program 7 (id=7198): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xfffff000, 0x0) kexec_load(0x10000000, 0x0, 0x0, 0x0) 1m8.248253824s ago: executing program 7 (id=7199): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4800000000003}, 0x5002, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f0000000000)) (fail_nth: 8) 1m7.984816093s ago: executing program 7 (id=7203): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4800000000003}, 0x5002, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) syslog(0x2, &(0x7f00000004c0)=""/150, 0x96) io_uring_setup(0x3312, &(0x7f00000001c0)={0x0, 0x131b, 0x1, 0x0, 0x35e}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x11, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x107, 0x17, 0x0, 0x20000000) pipe(&(0x7f0000000000)) 1m7.934192823s ago: executing program 7 (id=7205): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@usrquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x511, &(0x7f0000000380)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) inotify_init() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000840)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$netlink(0x10, 0x3, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setns(r3, 0x24020000) syz_clone(0xd53e2180, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 1m7.445213652s ago: executing program 7 (id=7209): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) r2 = io_uring_setup(0x177f, &(0x7f0000000140)) close_range(r2, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000020000008500000086"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r6}, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3000) setsockopt$IPT_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 52.33993325s ago: executing program 40 (id=7209): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) r2 = io_uring_setup(0x177f, &(0x7f0000000140)) close_range(r2, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000020000008500000086"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r6}, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3000) setsockopt$IPT_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 1.732684984s ago: executing program 2 (id=8582): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x3, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000022000000ec196706670000000000000000000000e560517ce0f73e0cd786aa0de3849e665e80382cd45f0bd0a609eb5af113deebcc86481c830b82aed19f2cef6d7a93f66e6e2fc9b3d136b8a598c4c5f996ca210a8dc6a6150c13dbfc91e3cc1edffc212be5553b3949c7d5", @ANYRESHEX=r2, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1414bb000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000ac1414aa000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) r12 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r12, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x48}, 0x4) 1.714057374s ago: executing program 2 (id=8585): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}}, 0x0) 1.685355904s ago: executing program 2 (id=8586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) signalfd(r0, &(0x7f0000000180), 0x8) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x10, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x0, 0xfffffffd}]}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', r4, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000c0a19e153965dff0de1f4200a5"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000024000180060005004e230000030000000200010008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x235272c27981e554}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000008000ca748018200000", @ANYRES32, @ANYBLOB="00000000000000001820", @ANYRES32, @ANYBLOB="000000000000000000000000fcffffff95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 1.607100244s ago: executing program 2 (id=8587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) signalfd(r0, &(0x7f0000000180), 0x8) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x10, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x0, 0xfffffffd}]}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', r4, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000c0a19e153965dff0de1f4200a5"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000024000180060005004e230000030000000200010008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x235272c27981e554}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,tz=UTC,utf8=1,utf8=1,iocharset=iso8859-4,uni_xlate=1,nonumtail=,\x00'], 0x1, 0x189, &(0x7f0000000740)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000008000ca748018200000", @ANYRES32, @ANYBLOB="00000000000000001820", @ANYRES32, @ANYBLOB="000000000000000000000000fcffffff95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 1.559055784s ago: executing program 2 (id=8590): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f6fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784620a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe508185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c6be0ed9257851ed916219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271dbd7387f49e0b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000053046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25132a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a068c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238e3fee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e89884cb73f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182060e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de553"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x0) 711.952422ms ago: executing program 2 (id=8613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) acct(0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000001a0007020000f8ffffffb703000008000000b7040000000000008500000024d62a2387f8b8ec6b703a0ea5e21bafbf73f1080700000000000000989689cc261f62f33e2c48e27166d9f72c2130e9e0"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x808360, 0x20) r6 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r6, 0x0) r7 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) accept4$inet6(r6, 0x0, 0x0, 0x0) sendmsg$tipc(r7, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 442.736712ms ago: executing program 9 (id=8626): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f5f"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1, 0x0, 0x0, @void, @value}, 0x28) 405.300991ms ago: executing program 9 (id=8627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4, 0xffffff7f}, 0x10) 356.824181ms ago: executing program 9 (id=8629): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000aa000000000000000000008500000017000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 330.263631ms ago: executing program 4 (id=8631): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000040), 0x50) 278.342271ms ago: executing program 9 (id=8634): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89fc, &(0x7f0000000080)) 277.480331ms ago: executing program 5 (id=8635): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x286c188, 0x0, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=interleave']) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x80000001}, 0x8, 0x3, 0xffff, 0x0, 0x1, 0xfffffffa, 0x10}, 0x0, 0x7, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000400)={0x2, 0x7f, 0xf00}) socket(0x1d, 0x2, 0x6) epoll_create(0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa8}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 234.192791ms ago: executing program 3 (id=8636): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r1, 0x0) 233.772461ms ago: executing program 9 (id=8637): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:hald_exec_t:s0\x00', 0x6c, 0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 233.193261ms ago: executing program 5 (id=8638): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f5f"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1, 0x0, 0x0, @void, @value}, 0x28) 217.026741ms ago: executing program 4 (id=8639): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, 0x0, &(0x7f0000000440)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000100), 0x20000000}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 216.513691ms ago: executing program 3 (id=8640): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4, 0xffffff7f}, 0x10) 207.20091ms ago: executing program 5 (id=8641): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x0, &(0x7f0000000140)}, 0x10) 156.971091ms ago: executing program 9 (id=8642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000000c0)=""/132) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f0000000280)={0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r7}) flock(r3, 0x2) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x82) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058", @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x15) fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) cachestat(r9, &(0x7f0000000200)={0x4, 0x7fffffff}, &(0x7f0000000300), 0x0) 156.778891ms ago: executing program 5 (id=8643): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f5f", @ANYRES8], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1, 0x0, 0x0, @void, @value}, 0x28) 154.987051ms ago: executing program 3 (id=8644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) signalfd(r0, &(0x7f0000000180), 0x8) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x10, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x0, 0xfffffffd}]}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', r4, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000c0a19e153965dff0de1f4200a5"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000024000180060005004e230000030000000200010008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x235272c27981e554}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000008000ca748018200000", @ANYRES32, @ANYBLOB="00000000000000001820", @ANYRES32, @ANYBLOB="000000000000000000000000fcffffff95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 147.003281ms ago: executing program 5 (id=8645): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f5f", @ANYRES8], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1, 0x0, 0x0, @void, @value}, 0x28) 113.44879ms ago: executing program 5 (id=8646): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRESOCT=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003bf000000f5d11b70d08997a592ba22e47c8f0000000054e6d9018a9c14bfee70e48d4b8480000000ceb40000c7e7ffff483c00e0"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d5237383ae9a33471e18cf6000004000000040031b12682a5f9a0d30000828eaf601049bff3906a98cb356244ff9356a8df24c6c0099a604557db34014a7695de070e358f548b265c713bf3e0bfeb0cad6c12b12cb38f7740c4dff554c34a0c812808ec9332c0c509cc54", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffff, r4}, 0x38) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a9, &(0x7f0000000500)="$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") mknod$loop(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x1) unlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000a40)=""/4098, 0x1002) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001340)="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", 0x134}], 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='sched_switch\x00', r8, 0x0, 0x80}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) 98.60374ms ago: executing program 4 (id=8647): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x1d8, 0x12, 0x600, 0x1d8, 0x202, 0x2a8, 0x220, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private2, @mcast2, [0x2000000], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x3, 0xd43e, 'netbios-ns\x00', {0x2}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 91.549341ms ago: executing program 3 (id=8648): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89fc, &(0x7f0000000080)) 58.6512ms ago: executing program 4 (id=8649): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x286c188, 0x0, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=interleave']) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x80000001}, 0x8, 0x3, 0xffff, 0x0, 0x1, 0xfffffffa, 0x10}, 0x0, 0x7, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000400)={0x2, 0x7f, 0xf00}) socket(0x1d, 0x2, 0x6) epoll_create(0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa8}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 45.9197ms ago: executing program 3 (id=8650): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/70, 0x320000, 0x800}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x8, r4, 0xffffffff}, 0x10) 25.30322ms ago: executing program 4 (id=8651): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r1, 0x0) 2.48849ms ago: executing program 3 (id=8652): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}}, 0x0) 0s ago: executing program 4 (id=8653): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async, rerun: 64) eventfd2(0x0, 0x0) (rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000070000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000780)='ext4_ext_load_extent\x00', r9, 0x0, 0x40000000}, 0x18) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES8=r5, @ANYRES8=r0, @ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYBLOB="31dc3a6e7002f09f4ed61640aae335a8d7566ecb56fdc0a975cc031f16c10e888212f5cc180b2005ac17c064c822af7ab58c54e2903b7cc8ef90aaffa48e0c93fe0206494a77a4ec2e8573b49ce258268b726aa998f814653b7b3d0c2f3167bfb3a54fac8181a098fb273fa5754d5e47b66e006a274e5f46969afe6ecaffdeca"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") (async) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async, rerun: 64) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r11}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES16=r3, @ANYRES32=r8], &(0x7f0000000040)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='h']) kernel console output (not intermixed with test programs): evictable:0kB writepending:256kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:17824kB local_pcp:6124kB free_cma:0kB [ 500.547082][T27617] lowmem_reserve[]: 0 0 0 0 [ 500.547113][T27617] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 500.547367][T27617] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 4*16kB (M) 6*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950380kB [ 500.713299][T27617] Node 0 Normal: 1595*4kB (UME) 21*8kB (UME) 1212*16kB (ME) 757*32kB (UME) 389*64kB (ME) 730*128kB (UME) 709*256kB (UME) 665*512kB (UME) 479*1024kB (UME) 112*2048kB (UM) 662*4096kB (UM) = 4121908kB [ 500.733271][T27617] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 500.742749][T27617] 24496 total pagecache pages [ 500.747739][T27617] 18 pages in swap cache [ 500.751996][T27617] Free swap = 120764kB [ 500.756403][T27617] Total swap = 124996kB [ 500.760589][T27617] 2097051 pages RAM [ 500.764551][T27617] 0 pages HighMem/MovableOnly [ 500.769268][T27617] 80181 pages reserved [ 500.867720][T27636] FAULT_INJECTION: forcing a failure. [ 500.867720][T27636] name failslab, interval 1, probability 0, space 0, times 0 [ 500.880525][T27636] CPU: 0 UID: 0 PID: 27636 Comm: syz.4.7518 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 500.891359][T27636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 500.901451][T27636] Call Trace: [ 500.904896][T27636] [ 500.907891][T27636] dump_stack_lvl+0xf2/0x150 [ 500.912543][T27636] dump_stack+0x15/0x1a [ 500.916863][T27636] should_fail_ex+0x223/0x230 [ 500.921597][T27636] should_failslab+0x8f/0xb0 [ 500.926279][T27636] kmem_cache_alloc_node_noprof+0x59/0x320 [ 500.932123][T27636] ? __alloc_skb+0x10b/0x310 [ 500.937015][T27636] __alloc_skb+0x10b/0x310 [ 500.941474][T27636] ? audit_log_start+0x34c/0x6b0 [ 500.946500][T27636] audit_log_start+0x368/0x6b0 [ 500.951305][T27636] audit_seccomp+0x4b/0x130 [ 500.955848][T27636] __seccomp_filter+0x6fa/0x1180 [ 500.960964][T27636] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 500.966801][T27636] ? vfs_write+0x596/0x920 [ 500.971254][T27636] ? __schedule+0x6fa/0x930 [ 500.975853][T27636] ? __rcu_read_unlock+0x4e/0x70 [ 500.980897][T27636] ? bpf_trace_run2+0x123/0x1d0 [ 500.985804][T27636] __secure_computing+0x9f/0x1c0 [ 500.990909][T27636] syscall_trace_enter+0xd1/0x1f0 [ 500.996021][T27636] ? fpregs_assert_state_consistent+0x83/0xa0 [ 501.002147][T27636] do_syscall_64+0xaa/0x1c0 [ 501.006828][T27636] ? clear_bhb_loop+0x55/0xb0 [ 501.011636][T27636] ? clear_bhb_loop+0x55/0xb0 [ 501.016374][T27636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.022397][T27636] RIP: 0033:0x7fd4ebbd473c [ 501.026893][T27636] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 501.046525][T27636] RSP: 002b:00007fd4ea241030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 501.055031][T27636] RAX: ffffffffffffffda RBX: 00007fd4ebdc5fa0 RCX: 00007fd4ebbd473c [ 501.063046][T27636] RDX: 000000000000000f RSI: 00007fd4ea2410a0 RDI: 0000000000000005 [ 501.071037][T27636] RBP: 00007fd4ea241090 R08: 0000000000000000 R09: 0000000000000000 [ 501.079035][T27636] R10: 0000000024040080 R11: 0000000000000246 R12: 0000000000000001 [ 501.087095][T27636] R13: 0000000000000000 R14: 00007fd4ebdc5fa0 R15: 00007ffd2e953bb8 [ 501.095155][T27636] [ 501.151823][T27638] loop3: detected capacity change from 0 to 8192 [ 501.303771][T27653] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7522'. [ 501.454502][ T6496] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 501.566995][T27669] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7532'. [ 501.689237][T27677] FAULT_INJECTION: forcing a failure. [ 501.689237][T27677] name failslab, interval 1, probability 0, space 0, times 0 [ 501.702086][T27677] CPU: 0 UID: 0 PID: 27677 Comm: syz.2.7536 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 501.712883][T27677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 501.723059][T27677] Call Trace: [ 501.726391][T27677] [ 501.729338][T27677] dump_stack_lvl+0xf2/0x150 [ 501.734021][T27677] dump_stack+0x15/0x1a [ 501.738206][T27677] should_fail_ex+0x223/0x230 [ 501.742911][T27677] should_failslab+0x8f/0xb0 [ 501.747611][T27677] kmem_cache_alloc_noprof+0x52/0x320 [ 501.753021][T27677] ? skb_clone+0x154/0x1f0 [ 501.757518][T27677] skb_clone+0x154/0x1f0 [ 501.761789][T27677] dev_queue_xmit_nit+0x14b/0x680 [ 501.766971][T27677] ? __rcu_read_unlock+0x4e/0x70 [ 501.771988][T27677] dev_hard_start_xmit+0xcc/0x3f0 [ 501.777060][T27677] ? validate_xmit_skb+0x645/0x830 [ 501.782241][T27677] __dev_queue_xmit+0x100a/0x2090 [ 501.787302][T27677] ? __dev_queue_xmit+0x186/0x2090 [ 501.792456][T27677] ? __skb_clone+0x2d0/0x2f0 [ 501.797160][T27677] __netlink_deliver_tap+0x3be/0x4f0 [ 501.802518][T27677] netlink_unicast+0x64a/0x670 [ 501.807321][T27677] netlink_sendmsg+0x5cc/0x6e0 [ 501.812192][T27677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.817550][T27677] __sock_sendmsg+0x140/0x180 [ 501.822302][T27677] ____sys_sendmsg+0x312/0x410 [ 501.827090][T27677] __sys_sendmsg+0x19d/0x230 [ 501.831739][T27677] __x64_sys_sendmsg+0x46/0x50 [ 501.836533][T27677] x64_sys_call+0x2734/0x2dc0 [ 501.841273][T27677] do_syscall_64+0xc9/0x1c0 [ 501.845818][T27677] ? clear_bhb_loop+0x55/0xb0 [ 501.850682][T27677] ? clear_bhb_loop+0x55/0xb0 [ 501.855390][T27677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.861571][T27677] RIP: 0033:0x7f27efc35d29 [ 501.866170][T27677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.885850][T27677] RSP: 002b:00007f27ee2a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.894526][T27677] RAX: ffffffffffffffda RBX: 00007f27efe25fa0 RCX: 00007f27efc35d29 [ 501.902531][T27677] RDX: 000000002000c080 RSI: 00000000200003c0 RDI: 0000000000000003 [ 501.911056][T27677] RBP: 00007f27ee2a1090 R08: 0000000000000000 R09: 0000000000000000 [ 501.919106][T27677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.927210][T27677] R13: 0000000000000000 R14: 00007f27efe25fa0 R15: 00007ffea8df03a8 [ 501.935423][T27677] [ 502.091803][T27690] loop5: detected capacity change from 0 to 2048 [ 502.114986][T27695] loop4: detected capacity change from 0 to 2048 [ 502.135590][T27699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7545'. [ 502.148314][T27690] GPT:first_usable_lbas don't match. [ 502.148318][T27695] GPT:first_usable_lbas don't match. [ 502.148328][T27695] GPT:34 != 290 [ 502.148339][T27695] GPT: Use GNU Parted to correct GPT errors. [ 502.148484][T27695] loop4: p1 p2 p3 [ 502.153829][T27690] GPT:34 != 290 [ 502.153846][T27690] GPT: Use GNU Parted to correct GPT errors. [ 502.154029][T27690] loop5: p1 p2 p3 [ 502.264937][T27695] veth3: entered promiscuous mode [ 502.276247][T27690] veth5: entered promiscuous mode [ 502.423085][ T29] kauditd_printk_skb: 1129 callbacks suppressed [ 502.423158][ T29] audit: type=1326 audit(2000000212.580:61764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27714 comm="syz.3.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414cb05d29 code=0x7ffc0000 [ 502.453277][ T29] audit: type=1326 audit(2000000212.580:61765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27714 comm="syz.3.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414cb05d29 code=0x7ffc0000 [ 502.477008][ T29] audit: type=1326 audit(2000000212.600:61766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27737 comm="syz.9.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd066db5d29 code=0x7ffc0000 [ 502.500799][ T29] audit: type=1326 audit(2000000212.600:61767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27737 comm="syz.9.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd066db5d29 code=0x7ffc0000 [ 502.524453][ T29] audit: type=1326 audit(2000000212.600:61768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27737 comm="syz.9.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd066db5d29 code=0x7ffc0000 [ 502.548152][ T29] audit: type=1326 audit(2000000212.600:61769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27737 comm="syz.9.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd066db5d29 code=0x7ffc0000 [ 502.571895][ T29] audit: type=1326 audit(2000000212.600:61770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27737 comm="syz.9.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd066db5d29 code=0x7ffc0000 [ 502.595609][ T29] audit: type=1326 audit(2000000212.600:61771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27737 comm="syz.9.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fd066db5d29 code=0x7ffc0000 [ 502.619236][ T29] audit: type=1326 audit(2000000212.600:61772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27737 comm="syz.9.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd066db5d29 code=0x7ffc0000 [ 502.642966][ T29] audit: type=1326 audit(2000000212.600:61773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27737 comm="syz.9.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd066db5d29 code=0x7ffc0000 [ 502.726455][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x1 [ 502.734142][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.741587][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.749036][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.756617][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.764188][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.771689][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.779242][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.786822][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.794406][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.802032][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.809590][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.817130][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.832196][ T55] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 502.835424][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.847666][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.855220][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.862755][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.870469][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.877957][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.885437][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.892878][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.900396][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.907876][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.915411][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.922904][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.930370][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.937832][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.945449][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.952877][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.960302][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.967938][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.975396][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.982962][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.990439][ T3375] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 502.998710][ T3375] hid-generic 0000:0003:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 503.084280][T27764] gre1: entered allmulticast mode [ 503.142418][T27768] can: request_module (can-proto-0) failed. [ 503.176024][T27771] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27771 comm=syz.5.7571 [ 503.214958][T27773] loop5: detected capacity change from 0 to 512 [ 503.222255][T27773] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 503.232224][T27773] EXT4-fs (loop5): inodes count not valid: 66 vs 32 [ 503.282274][T27777] loop4: detected capacity change from 0 to 512 [ 503.290669][T27777] EXT4-fs: Ignoring removed orlov option [ 503.302678][T27782] loop5: detected capacity change from 0 to 512 [ 503.309087][T27777] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 503.321451][T27777] EXT4-fs (loop4): orphan cleanup on readonly fs [ 503.329126][T27782] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 503.338768][T27782] System zones: 0-2, 18-18, 34-34 [ 503.339488][T27777] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7573: bg 0: block 248: padding at end of block bitmap is not set [ 503.361805][T27777] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.7573: Failed to acquire dquot type 1 [ 503.373416][T27782] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7576: bg 0: block 248: padding at end of block bitmap is not set [ 503.390197][T27782] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.7576: Failed to acquire dquot type 1 [ 503.403156][T27777] EXT4-fs (loop4): 1 truncate cleaned up [ 503.411585][T27782] EXT4-fs (loop5): 1 truncate cleaned up [ 503.411979][T27777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 503.417845][T27782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.417996][T27782] ext4 filesystem being mounted at /473/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.473911][T25802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.495243][T21591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.569566][T27805] hub 9-0:1.0: USB hub found [ 503.584790][T27805] hub 9-0:1.0: 8 ports detected [ 503.642878][T27796] syz.9.7581[27796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.642935][T27796] syz.9.7581[27796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.655301][T27796] syz.9.7581[27796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.678054][T27815] __nla_validate_parse: 5 callbacks suppressed [ 503.678070][T27815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7588'. [ 503.851255][T27834] netlink: 132 bytes leftover after parsing attributes in process `syz.9.7596'. [ 503.953793][T26983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 504.500227][T27844] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7599'. [ 504.633497][T27857] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7606'. [ 504.651604][T27856] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7606'. [ 504.780008][T27871] loop4: detected capacity change from 0 to 512 [ 504.805303][T27873] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7612'. [ 504.822767][T27871] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 504.831509][T27871] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 504.840958][T27871] EXT4-fs (loop4): orphan cleanup on readonly fs [ 504.842343][T27875] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7613'. [ 504.864070][T27871] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 504.874414][T27871] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 504.889756][T27871] EXT4-fs (loop4): 1 truncate cleaned up [ 504.897350][T27871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 504.988426][T27891] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7620'. [ 505.105269][T26983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 505.585329][T27907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7626'. [ 505.788188][T27912] macvlan0: entered promiscuous mode [ 505.802401][T27912] ipvlan0: entered promiscuous mode [ 505.808544][T27912] ipvlan0: left promiscuous mode [ 505.817931][T27912] macvlan0: left promiscuous mode [ 505.851183][T27916] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7629'. [ 506.024909][T27925] netlink: 'syz.9.7633': attribute type 21 has an invalid length. [ 506.033418][T27925] netlink: 'syz.9.7633': attribute type 1 has an invalid length. [ 506.126158][T27939] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.133432][T27939] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.321948][T25802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.342878][T27961] xt_TPROXY: Can be used only with -p tcp or -p udp [ 506.412731][T27972] loop4: detected capacity change from 0 to 512 [ 506.449950][T27972] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7653: bg 0: block 248: padding at end of block bitmap is not set [ 506.466459][T27972] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.7653: Failed to acquire dquot type 1 [ 506.478414][T27972] EXT4-fs (loop4): 1 truncate cleaned up [ 506.484985][ T6496] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 506.493514][T27972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.507208][T27972] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.531019][T25802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.957885][T27996] syz.9.7660[27996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.957998][T27996] syz.9.7660[27996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.970316][T27996] syz.9.7660[27996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 507.021843][T27998] macvlan0: entered promiscuous mode [ 507.041292][T27998] ipvlan0: entered promiscuous mode [ 507.047191][T27998] ipvlan0: left promiscuous mode [ 507.052291][T27998] macvlan0: left promiscuous mode [ 507.444669][T28011] loop2: detected capacity change from 0 to 512 [ 507.608131][T26983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 507.683052][T28011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.723014][T28011] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.787979][T28011] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.7665: corrupted inode contents [ 507.851496][T28011] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.7665: mark_inode_dirty error [ 507.892232][T28022] loop4: detected capacity change from 0 to 8192 [ 507.909747][T28011] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.7665: corrupted inode contents [ 507.927678][T28026] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 507.940776][T28011] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.7665: mark_inode_dirty error [ 508.074558][ T29] kauditd_printk_skb: 1180 callbacks suppressed [ 508.074579][ T29] audit: type=1400 audit(2000000218.180:62948): avc: denied { create } for pid=28010 comm="syz.2.7665" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 508.101821][ T29] audit: type=1400 audit(2000000218.180:62949): avc: denied { setattr } for pid=28010 comm="syz.2.7665" name="file0" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 508.466847][T20506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.755002][T26982] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 508.952919][T28059] loop2: detected capacity change from 0 to 2048 [ 509.009834][T28059] Alternate GPT is invalid, using primary GPT. [ 509.016453][T28059] loop2: p2 p3 p7 [ 509.159184][T28078] loop4: detected capacity change from 0 to 1764 [ 509.191815][ T29] audit: type=1326 audit(2000000219.350:62950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28084 comm="syz.4.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 509.217027][ T29] audit: type=1326 audit(2000000219.370:62951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28084 comm="syz.4.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 509.241203][ T29] audit: type=1326 audit(2000000219.370:62952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28084 comm="syz.4.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 509.265565][ T29] audit: type=1326 audit(2000000219.380:62953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28084 comm="syz.4.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 509.289202][ T29] audit: type=1326 audit(2000000219.380:62954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28084 comm="syz.4.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 509.313514][ T29] audit: type=1326 audit(2000000219.380:62955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28084 comm="syz.4.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 509.337755][ T29] audit: type=1326 audit(2000000219.380:62956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28084 comm="syz.4.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 509.361427][ T29] audit: type=1326 audit(2000000219.380:62957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28086 comm="syz.9.7694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd066db5d29 code=0x7ffc0000 [ 509.452786][T28089] batadv_slave_1: entered promiscuous mode [ 509.466889][T28088] batadv_slave_1: left promiscuous mode [ 509.716028][T28109] macvlan0: entered promiscuous mode [ 509.722124][T28109] ipvlan0: entered promiscuous mode [ 509.728067][T28109] ipvlan0: left promiscuous mode [ 509.733220][T28109] macvlan0: left promiscuous mode [ 509.775624][T28112] bridge0: port 3(dummy0) entered blocking state [ 509.782063][T28112] bridge0: port 3(dummy0) entered disabled state [ 509.788721][T28112] dummy0: entered allmulticast mode [ 509.794683][T28112] dummy0: entered promiscuous mode [ 509.800135][T28112] bridge0: port 3(dummy0) entered blocking state [ 509.806582][T28112] bridge0: port 3(dummy0) entered forwarding state [ 509.914025][T26983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 510.105246][T28137] netlink: 'syz.5.7710': attribute type 10 has an invalid length. [ 510.114528][T28137] team0: Port device hsr_slave_0 added [ 510.418778][T28158] loop5: detected capacity change from 0 to 2048 [ 510.477966][T28158] GPT:first_usable_lbas don't match. [ 510.483379][T28158] GPT:34 != 290 [ 510.486904][T28158] GPT: Use GNU Parted to correct GPT errors. [ 510.493062][T28158] loop5: p1 p2 p3 [ 510.503166][T28158] __nla_validate_parse: 10 callbacks suppressed [ 510.503184][T28158] netlink: 700 bytes leftover after parsing attributes in process `syz.5.7720'. [ 510.544567][T28158] veth7: entered promiscuous mode [ 510.581270][T28173] loop4: detected capacity change from 0 to 8192 [ 510.715749][T28193] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7735'. [ 510.804481][T28203] bridge_slave_0: left allmulticast mode [ 510.810181][T28203] bridge_slave_0: left promiscuous mode [ 510.816094][T28203] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.826315][T28203] bridge_slave_1: left allmulticast mode [ 510.832025][T28203] bridge_slave_1: left promiscuous mode [ 510.838086][T28203] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.849430][T28203] bond0: (slave bond_slave_0): Releasing backup interface [ 510.858082][T28203] bond0: (slave bond_slave_1): Releasing backup interface [ 510.867572][T28203] team0: Port device team_slave_0 removed [ 510.875173][T28203] team0: Port device team_slave_1 removed [ 510.881669][T28203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.892434][T28203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.901956][T28203] team0: Port device hsr_slave_0 removed [ 511.025126][ T55] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 511.243530][T28225] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7748'. [ 511.579341][T28250] macvlan0: entered promiscuous mode [ 511.586106][T28250] ipvlan0: entered promiscuous mode [ 511.591890][T28250] ipvlan0: left promiscuous mode [ 511.597169][T28250] macvlan0: left promiscuous mode [ 511.712259][T28257] loop2: detected capacity change from 0 to 1024 [ 511.726436][T28257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.758883][T20506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.027819][T28286] FAULT_INJECTION: forcing a failure. [ 512.027819][T28286] name failslab, interval 1, probability 0, space 0, times 0 [ 512.040824][T28286] CPU: 0 UID: 0 PID: 28286 Comm: syz.5.7775 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 512.052038][T28286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 512.062484][T28286] Call Trace: [ 512.062496][T28286] [ 512.062506][T28286] dump_stack_lvl+0xf2/0x150 [ 512.073409][T28286] dump_stack+0x15/0x1a [ 512.077623][T28286] should_fail_ex+0x223/0x230 [ 512.082336][T28286] should_failslab+0x8f/0xb0 [ 512.086969][T28286] kmem_cache_alloc_noprof+0x52/0x320 [ 512.092498][T28286] ? audit_log_start+0x34c/0x6b0 [ 512.097535][T28286] audit_log_start+0x34c/0x6b0 [ 512.102406][T28286] audit_seccomp+0x4b/0x130 [ 512.107051][T28286] __seccomp_filter+0x6fa/0x1180 [ 512.112038][T28286] ? __cond_resched+0x28/0x50 [ 512.116986][T28286] ? kill_fasync+0x133/0x170 [ 512.121725][T28286] ? do_tee+0x82d/0x960 [ 512.125946][T28286] __secure_computing+0x9f/0x1c0 [ 512.130983][T28286] syscall_trace_enter+0xd1/0x1f0 [ 512.136050][T28286] do_syscall_64+0xaa/0x1c0 [ 512.140583][T28286] ? clear_bhb_loop+0x55/0xb0 [ 512.144933][ T6526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 512.145267][T28286] ? clear_bhb_loop+0x55/0xb0 [ 512.157731][T28286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.163720][T28286] RIP: 0033:0x7f51cfe0473c [ 512.168300][T28286] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 512.187943][T28286] RSP: 002b:00007f51ce477030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 512.196437][T28286] RAX: ffffffffffffffda RBX: 00007f51cfff5fa0 RCX: 00007f51cfe0473c [ 512.205115][T28286] RDX: 000000000000000f RSI: 00007f51ce4770a0 RDI: 000000000000000b [ 512.213099][T28286] RBP: 00007f51ce477090 R08: 0000000000000000 R09: 0000000000000000 [ 512.221499][T28286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.229496][T28286] R13: 0000000000000000 R14: 00007f51cfff5fa0 R15: 00007ffd2ff6b6b8 [ 512.237482][T28286] [ 512.323552][T28293] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 512.515876][T28310] loop5: detected capacity change from 0 to 2048 [ 512.567528][T28310] GPT:first_usable_lbas don't match. [ 512.572910][T28310] GPT:34 != 290 [ 512.576551][T28310] GPT: Use GNU Parted to correct GPT errors. [ 512.582777][T28310] loop5: p1 p2 p3 [ 512.609532][T28310] netlink: 700 bytes leftover after parsing attributes in process `syz.5.7785'. [ 512.736078][T28323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.736989][T28324] macvlan0: entered promiscuous mode [ 512.744999][T28323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.761001][T28324] ipvlan0: entered promiscuous mode [ 512.767859][T28324] ipvlan0: left promiscuous mode [ 512.773363][T28324] macvlan0: left promiscuous mode [ 512.817555][T28330] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7795'. [ 512.848593][T28334] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7797'. [ 512.859316][T28332] netlink: 700 bytes leftover after parsing attributes in process `syz.9.7796'. [ 512.880212][T28336] macvlan0: entered promiscuous mode [ 512.888287][T28338] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7799'. [ 512.898635][T28336] ipvlan0: entered promiscuous mode [ 512.905810][T28336] ipvlan0: left promiscuous mode [ 512.911464][T28336] macvlan0: left promiscuous mode [ 513.039993][T28359] syz.5.7809[28359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.040168][T28359] syz.5.7809[28359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.052625][T28359] syz.5.7809[28359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.087821][ T29] kauditd_printk_skb: 1488 callbacks suppressed [ 513.087854][ T29] audit: type=1326 audit(2000000223.250:64444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28341 comm="syz.9.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd066dacce7 code=0x7ffc0000 [ 513.137348][ T29] audit: type=1326 audit(2000000223.300:64445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28341 comm="syz.9.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd066d51f29 code=0x7ffc0000 [ 513.160991][ T29] audit: type=1326 audit(2000000223.300:64446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28341 comm="syz.9.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd066dacce7 code=0x7ffc0000 [ 513.184640][ T29] audit: type=1326 audit(2000000223.300:64447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28341 comm="syz.9.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd066d51f29 code=0x7ffc0000 [ 513.208183][ T29] audit: type=1326 audit(2000000223.300:64448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28341 comm="syz.9.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fd066db5d29 code=0x7ffc0000 [ 513.241562][ T29] audit: type=1326 audit(2000000223.350:64449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28341 comm="syz.9.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd066dacce7 code=0x7ffc0000 [ 513.265312][ T29] audit: type=1326 audit(2000000223.350:64450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28341 comm="syz.9.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd066d51f29 code=0x7ffc0000 [ 513.289160][ T29] audit: type=1326 audit(2000000223.350:64451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28341 comm="syz.9.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fd066db5d29 code=0x7ffc0000 [ 513.312699][ T29] audit: type=1326 audit(2000000223.350:64452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28341 comm="syz.9.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd066dacce7 code=0x7ffc0000 [ 513.336275][ T29] audit: type=1326 audit(2000000223.350:64453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28341 comm="syz.9.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd066d51f29 code=0x7ffc0000 [ 513.360836][ T55] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 513.441559][T28387] loop5: detected capacity change from 0 to 1024 [ 513.452485][T28387] EXT4-fs: Ignoring removed orlov option [ 513.458227][T28387] EXT4-fs: Ignoring removed orlov option [ 513.480995][T28387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.526674][T28387] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.5.7821: corrupted in-inode xattr: bad magic number in in-inode xattr [ 513.533241][T28393] loop2: detected capacity change from 0 to 8192 [ 513.567095][T28387] EXT4-fs (loop5): Remounting filesystem read-only [ 513.590825][T28400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.602261][T28400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.632521][T28387] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 513.645941][T28387] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 513.647804][T28405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7828'. [ 513.654962][T28387] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 513.687979][T28387] tipc: Started in network mode [ 513.692877][T28387] tipc: Node identity 7, cluster identity 4711 [ 513.699243][T28387] tipc: Node number set to 7 [ 514.196256][T28449] netlink: 'syz.4.7847': attribute type 8 has an invalid length. [ 514.293659][T21591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.483715][ T55] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 514.787501][T28480] FAULT_INJECTION: forcing a failure. [ 514.787501][T28480] name failslab, interval 1, probability 0, space 0, times 0 [ 514.800272][T28480] CPU: 0 UID: 0 PID: 28480 Comm: syz.2.7859 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 514.811080][T28480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 514.821177][T28480] Call Trace: [ 514.824496][T28480] [ 514.827433][T28480] dump_stack_lvl+0xf2/0x150 [ 514.832062][T28480] dump_stack+0x15/0x1a [ 514.836270][T28480] should_fail_ex+0x223/0x230 [ 514.841025][T28480] should_failslab+0x8f/0xb0 [ 514.845665][T28480] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 514.851480][T28480] ? sock_alloc_inode+0x34/0xa0 [ 514.856383][T28480] sock_alloc_inode+0x34/0xa0 [ 514.861164][T28480] ? __pfx_sock_alloc_inode+0x10/0x10 [ 514.866584][T28480] alloc_inode+0x3c/0x160 [ 514.871064][T28480] new_inode_pseudo+0x15/0x20 [ 514.875806][T28480] __sock_create+0x12b/0x5a0 [ 514.880521][T28480] __sys_socketpair+0x1be/0x430 [ 514.885543][T28480] __x64_sys_socketpair+0x52/0x60 [ 514.890684][T28480] x64_sys_call+0x1cad/0x2dc0 [ 514.895391][T28480] do_syscall_64+0xc9/0x1c0 [ 514.899943][T28480] ? clear_bhb_loop+0x55/0xb0 [ 514.904703][T28480] ? clear_bhb_loop+0x55/0xb0 [ 514.909429][T28480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.913044][T28484] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7861'. [ 514.915390][T28480] RIP: 0033:0x7f27efc37c7a [ 514.915418][T28480] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.948637][T28480] RSP: 002b:00007f27ee2a0f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 514.957163][T28480] RAX: ffffffffffffffda RBX: 00007f27efe25f01 RCX: 00007f27efc37c7a [ 514.965179][T28480] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 514.973542][T28480] RBP: 00007f27ee2a1090 R08: 0000000000000000 R09: 0000000000000000 [ 514.981786][T28480] R10: 00007f27ee2a0f98 R11: 0000000000000246 R12: 0000000000000005 [ 514.989905][T28480] R13: 0000000000000000 R14: 00007f27efe25fa0 R15: 00007ffea8df03a8 [ 514.997930][T28480] [ 515.001066][T28480] socket: no more sockets [ 515.060869][T28493] macvlan0: entered promiscuous mode [ 515.068219][T28493] ipvlan0: entered promiscuous mode [ 515.074277][T28493] ipvlan0: left promiscuous mode [ 515.079485][T28493] macvlan0: left promiscuous mode [ 515.397536][T28509] vhci_hcd: default hub control req: 0406 v02fe i0000 l0 [ 515.603330][T28544] __nla_validate_parse: 1 callbacks suppressed [ 515.603353][T28544] netlink: 700 bytes leftover after parsing attributes in process `syz.3.7890'. [ 515.644697][T28544] veth3: entered promiscuous mode [ 515.703537][T28549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7891'. [ 515.709180][T28553] : renamed from bond0 (while UP) [ 515.841521][T26982] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 516.310865][T28564] netlink: 'syz.3.7896': attribute type 3 has an invalid length. [ 516.318702][T28564] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.7896'. [ 516.393505][T28583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7905'. [ 516.407626][T28585] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7906'. [ 516.416756][T28585] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7906'. [ 516.888095][T28625] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7922'. [ 517.152014][ T6496] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 517.598957][T28653] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7934'. [ 517.626513][T28656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.635158][T28656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.640327][T28660] SELinux: policydb version 536871040 does not match my version range 15-33 [ 517.653244][T28660] SELinux: failed to load policy [ 517.666263][ T3375] page_pool_release_retry() stalled pool shutdown: id 174, 27 inflight 121 sec [ 517.757157][T28670] FAULT_INJECTION: forcing a failure. [ 517.757157][T28670] name failslab, interval 1, probability 0, space 0, times 0 [ 517.770016][T28670] CPU: 0 UID: 0 PID: 28670 Comm: syz.3.7942 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 517.780806][T28670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 517.790896][T28670] Call Trace: [ 517.794232][T28670] [ 517.797311][T28670] dump_stack_lvl+0xf2/0x150 [ 517.802030][T28670] dump_stack+0x15/0x1a [ 517.806309][T28670] should_fail_ex+0x223/0x230 [ 517.811092][T28670] should_failslab+0x8f/0xb0 [ 517.815785][T28670] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 517.821641][T28670] ? shmem_alloc_inode+0x34/0x50 [ 517.826630][T28670] shmem_alloc_inode+0x34/0x50 [ 517.831513][T28670] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 517.837035][T28670] alloc_inode+0x3c/0x160 [ 517.840707][T28672] loop2: detected capacity change from 0 to 2048 [ 517.841394][T28670] new_inode+0x1e/0x100 [ 517.851990][T28670] shmem_get_inode+0x24e/0x730 [ 517.856876][T28670] shmem_mknod+0x44/0x180 [ 517.861268][T28670] ? __pfx_shmem_create+0x10/0x10 [ 517.866304][T28670] shmem_create+0x34/0x40 [ 517.870703][T28670] path_openat+0xe92/0x1fa0 [ 517.875246][T28670] do_filp_open+0x107/0x230 [ 517.879779][T28670] do_sys_openat2+0xab/0x120 [ 517.884491][T28670] __x64_sys_openat+0xf3/0x120 [ 517.889288][T28670] x64_sys_call+0x2b30/0x2dc0 [ 517.893985][T28670] do_syscall_64+0xc9/0x1c0 [ 517.898518][T28670] ? clear_bhb_loop+0x55/0xb0 [ 517.903264][T28670] ? clear_bhb_loop+0x55/0xb0 [ 517.908010][T28670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.913992][T28670] RIP: 0033:0x7f414cb05d29 [ 517.918449][T28670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.938122][T28670] RSP: 002b:00007f414b177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 517.946604][T28670] RAX: ffffffffffffffda RBX: 00007f414ccf5fa0 RCX: 00007f414cb05d29 [ 517.954583][T28670] RDX: 0000000000048940 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 517.962563][T28670] RBP: 00007f414b177090 R08: 0000000000000000 R09: 0000000000000000 [ 517.970537][T28670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.978604][T28670] R13: 0000000000000000 R14: 00007f414ccf5fa0 R15: 00007ffc862ca1a8 [ 517.986589][T28670] [ 518.011986][T28672] GPT:first_usable_lbas don't match. [ 518.017367][T28672] GPT:34 != 290 [ 518.020936][T28672] GPT: Use GNU Parted to correct GPT errors. [ 518.027086][T28672] loop2: p1 p2 p3 [ 518.070068][T28672] netlink: 700 bytes leftover after parsing attributes in process `syz.2.7943'. [ 518.088770][T28672] veth5: entered promiscuous mode [ 518.456488][T26983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 518.638553][T28702] macvlan0: entered promiscuous mode [ 518.699371][T28702] ipvlan0: entered promiscuous mode [ 518.763250][T28702] ipvlan0: left promiscuous mode [ 518.819185][T28702] macvlan0: left promiscuous mode [ 518.909025][T28713] loop2: detected capacity change from 0 to 1024 [ 518.945882][T28713] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 518.958922][T28713] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 518.967282][T28719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7964'. [ 518.985058][T28719] loop4: detected capacity change from 0 to 1024 [ 518.990510][T28727] loop5: detected capacity change from 0 to 164 [ 519.005822][T28713] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 519.015361][T28713] EXT4-fs (loop2): orphan cleanup on readonly fs [ 519.035683][T28713] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 519.063852][T28713] EXT4-fs (loop2): Remounting filesystem read-only [ 519.076589][T28719] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 519.102423][T28734] loop5: detected capacity change from 0 to 8192 [ 519.110096][T28713] __quota_error: 1008 callbacks suppressed [ 519.110115][T28713] Quota error (device loop2): write_blk: dquota write failed [ 519.123435][T28713] Quota error (device loop2): write_blk: dquota write failed [ 519.130892][T28713] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 519.134973][T28719] JBD2: no valid journal superblock found [ 519.146822][T28719] EXT4-fs (loop4): Could not load journal inode [ 519.151904][T28713] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 519.163375][T28713] EXT4-fs (loop2): 1 orphan inode deleted [ 519.171788][T28713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 519.184170][T28713] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 519.195081][T28713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.288082][ T29] audit: type=1326 audit(2000000229.450:65462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28748 comm="syz.4.7974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 519.339830][ T29] audit: type=1326 audit(2000000229.480:65463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28748 comm="syz.4.7974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 519.364281][ T29] audit: type=1326 audit(2000000229.480:65464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28748 comm="syz.4.7974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 519.388147][ T29] audit: type=1326 audit(2000000229.480:65465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28748 comm="syz.4.7974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 519.412655][ T29] audit: type=1326 audit(2000000229.480:65466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28748 comm="syz.4.7974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 519.437061][ T29] audit: type=1326 audit(2000000229.480:65467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28748 comm="syz.4.7974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 519.468278][T28750] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 519.673741][T26983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 519.901576][T28771] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.908981][T28771] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.025077][T28771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.040445][T28771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.129140][T28771] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.139205][T28771] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.148551][T28771] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.157709][T28771] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.205034][T28771] veth3: left promiscuous mode [ 520.211088][T28780] bridge0: port 4(gretap0) entered blocking state [ 520.217677][T28780] bridge0: port 4(gretap0) entered disabled state [ 520.228448][T28780] gretap0: entered allmulticast mode [ 520.233853][T28774] netlink: 'syz.2.7983': attribute type 10 has an invalid length. [ 520.243496][T28780] gretap0: entered promiscuous mode [ 520.251743][T28780] bridge0: port 4(gretap0) entered blocking state [ 520.258268][T28780] bridge0: port 4(gretap0) entered forwarding state [ 520.270543][T28774] bridge0: port 4(gretap0) entered disabled state [ 520.277218][T28774] bridge0: port 3(dummy0) entered disabled state [ 520.283720][T28774] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.291074][T28774] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.322170][T28774] bridge0: port 4(gretap0) entered blocking state [ 520.328728][T28774] bridge0: port 4(gretap0) entered forwarding state [ 520.335501][T28774] bridge0: port 3(dummy0) entered blocking state [ 520.341864][T28774] bridge0: port 3(dummy0) entered forwarding state [ 520.348467][T28774] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.355694][T28774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.363163][T28774] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.370332][T28774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.381970][T28774] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 520.391196][T28780] gretap0: left allmulticast mode [ 520.396791][T28780] gretap0: left promiscuous mode [ 520.401868][T28780] bridge0: port 4(gretap0) entered disabled state [ 520.416173][T28780] dummy0: left allmulticast mode [ 520.421230][T28780] dummy0: left promiscuous mode [ 520.426491][T28780] bridge0: port 3(dummy0) entered disabled state [ 520.434503][T28780] bridge_slave_1: left allmulticast mode [ 520.440223][T28780] bridge_slave_1: left promiscuous mode [ 520.446145][T28780] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.454515][T28780] bridge_slave_0: left allmulticast mode [ 520.460207][T28780] bridge_slave_0: left promiscuous mode [ 520.466688][T28780] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.481775][T28780] bond0: (slave bridge0): Releasing backup interface [ 520.651444][T28833] macvlan0: entered promiscuous mode [ 520.659406][T28833] ipvlan0: entered promiscuous mode [ 520.665508][T28833] ipvlan0: left promiscuous mode [ 520.670910][T28833] macvlan0: left promiscuous mode [ 520.813982][ T6495] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 520.876174][T28854] __nla_validate_parse: 1 callbacks suppressed [ 520.876195][T28854] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8016'. [ 520.917560][T28861] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8018'. [ 520.919296][T28862] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 520.942902][T28862] loop5: detected capacity change from 0 to 512 [ 520.956166][T28862] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.8019: casefold flag without casefold feature [ 520.969293][T28862] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.8019: couldn't read orphan inode 15 (err -117) [ 520.985970][T28862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.030384][T21591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.445660][T28894] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 521.940188][T28928] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 521.953795][ T6495] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 522.114263][T28941] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8051'. [ 522.176364][T28953] program syz.4.8054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.191812][T28953] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 522.229291][T28953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8054'. [ 522.947487][ T6496] bond0 (unregistering): Released all slaves [ 522.978829][T28963] chnl_net:caif_netlink_parms(): no params data found [ 523.042442][ T6496] tipc: Left network mode [ 523.074639][ T55] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 523.217865][T28990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8064'. [ 523.279111][T28988] macvlan0: entered promiscuous mode [ 523.286764][T28988] ipvlan0: entered promiscuous mode [ 523.294989][T28988] ipvlan0: left promiscuous mode [ 523.300168][T28988] macvlan0: left promiscuous mode [ 523.315949][T28963] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.323133][T28963] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.332392][T28963] bridge_slave_0: entered allmulticast mode [ 523.341150][T28963] bridge_slave_0: entered promiscuous mode [ 523.350133][T28963] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.357623][T28963] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.365800][T28963] bridge_slave_1: entered allmulticast mode [ 523.381438][T28963] bridge_slave_1: entered promiscuous mode [ 523.416977][T28963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.438915][T28963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.477959][T28963] team0: Port device team_slave_0 added [ 523.492439][T28963] team0: Port device team_slave_1 added [ 523.688939][T28963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.696764][T28963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.722986][T28963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.737994][T28963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.745196][T28963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.772272][T28963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.849077][T29019] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8075'. [ 523.877638][T29020] loop2: detected capacity change from 0 to 1024 [ 523.885121][T29020] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 523.916876][T28963] hsr_slave_0: entered promiscuous mode [ 523.928812][T28963] hsr_slave_1: entered promiscuous mode [ 523.937152][T28963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.945164][T28963] Cannot create hsr debugfs directory [ 524.042780][T29020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.118360][T29033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8082'. [ 524.127456][T29033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8082'. [ 524.140635][T29033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8082'. [ 524.194821][ T6495] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 524.271091][T20506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.437881][T28963] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 524.464483][T28963] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 524.482818][T28963] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 524.512488][T28963] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 524.577680][ T29] kauditd_printk_skb: 1140 callbacks suppressed [ 524.577695][ T29] audit: type=1326 audit(2000000234.740:66608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29050 comm="syz.4.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 524.595544][T28963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.637394][ T29] audit: type=1326 audit(2000000234.740:66609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29050 comm="syz.4.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 524.640652][T28963] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.662215][ T29] audit: type=1326 audit(2000000234.740:66610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29050 comm="syz.4.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 524.692105][ T29] audit: type=1326 audit(2000000234.740:66611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29050 comm="syz.4.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 524.716507][ T29] audit: type=1326 audit(2000000234.740:66612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29050 comm="syz.4.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 524.723799][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.740205][ T29] audit: type=1326 audit(2000000234.740:66613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29050 comm="syz.4.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 524.747377][ T6526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.779840][ T29] audit: type=1326 audit(2000000234.740:66614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29050 comm="syz.4.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 524.804428][ T29] audit: type=1326 audit(2000000234.740:66615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29050 comm="syz.4.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 524.808011][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.828178][ T29] audit: type=1326 audit(2000000234.740:66616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29050 comm="syz.4.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 524.835193][ T6526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.867775][ T29] audit: type=1326 audit(2000000234.740:66617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29050 comm="syz.4.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ebbd5d29 code=0x7ffc0000 [ 524.942094][T28963] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 524.952760][T28963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.046303][T28963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.267933][T28963] veth0_vlan: entered promiscuous mode [ 525.277579][T28963] veth1_vlan: entered promiscuous mode [ 525.300100][T28963] veth0_macvtap: entered promiscuous mode [ 525.333874][ T6526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 525.352390][T28963] veth1_macvtap: entered promiscuous mode [ 525.369831][T28963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.380610][T28963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.391194][T28963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.401757][T28963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.411833][T28963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.422972][T28963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.432897][T28963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.443750][T28963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.454557][T28963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.465033][T28963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.475985][T28963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.485325][T28963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.495924][T28963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.505910][T28963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.517216][T28963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.527103][T28963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.537816][T28963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.548367][T28963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.558864][T28963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.568865][T28963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.580084][T28963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.591351][T28963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.605205][T28963] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.614111][T28963] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.622836][T28963] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.631786][T28963] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.048609][T29124] __nla_validate_parse: 2 callbacks suppressed [ 526.048626][T29124] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8112'. [ 526.145970][T29131] loop5: detected capacity change from 0 to 2048 [ 526.195941][T29131] GPT:first_usable_lbas don't match. [ 526.201360][T29131] GPT:34 != 290 [ 526.204910][T29131] GPT: Use GNU Parted to correct GPT errors. [ 526.211222][T29131] loop5: p1 p2 p3 [ 526.230504][T29131] netlink: 700 bytes leftover after parsing attributes in process `syz.5.8115'. [ 526.253984][T29131] veth3: entered promiscuous mode [ 526.289535][T29136] loop4: detected capacity change from 0 to 1024 [ 526.335606][T29140] macvlan0: entered promiscuous mode [ 526.337495][T29136] EXT4-fs: error -4 creating inode table initialization thread [ 526.349576][T29140] ipvlan0: entered promiscuous mode [ 526.360603][T29140] ipvlan0: left promiscuous mode [ 526.369847][T29136] EXT4-fs (loop4): mount failed [ 526.376030][T29140] macvlan0: left promiscuous mode [ 526.434415][T26983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 526.486215][T29157] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 526.501510][T29157] loop5: detected capacity change from 0 to 512 [ 526.530158][T29157] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.8123: casefold flag without casefold feature [ 526.553764][T29157] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.8123: couldn't read orphan inode 15 (err -117) [ 526.602647][T29157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.647754][T28963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.757808][ T6496] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.790871][T29148] chnl_net:caif_netlink_parms(): no params data found [ 526.858309][ T6496] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.908667][ T6496] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.914017][T29212] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 526.928304][T29148] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.928380][T29148] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.928599][T29148] bridge_slave_0: entered allmulticast mode [ 526.929346][T29148] bridge_slave_0: entered promiscuous mode [ 526.940103][T29148] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.940151][T29148] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.940309][T29148] bridge_slave_1: entered allmulticast mode [ 526.941040][T29148] bridge_slave_1: entered promiscuous mode [ 526.977295][T29148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.979269][T29148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.003460][ T6496] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.059922][T29148] team0: Port device team_slave_0 added [ 527.071735][T29148] team0: Port device team_slave_1 added [ 527.120405][ T6496] bridge_slave_1: left allmulticast mode [ 527.126241][ T6496] bridge_slave_1: left promiscuous mode [ 527.132139][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.140997][ T6496] bridge_slave_0: left allmulticast mode [ 527.146783][ T6496] bridge_slave_0: left promiscuous mode [ 527.152541][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.176174][T29225] loop5: detected capacity change from 0 to 8192 [ 527.287807][ T6496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.300451][ T6496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.313753][ T6496] bond0 (unregistering): Released all slaves [ 527.322794][ T6496] bond1 (unregistering): Released all slaves [ 527.331493][T29148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.339274][T29148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.366141][T29148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.385218][T29148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.392328][T29148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.418394][T29148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.466009][T29235] loop2: detected capacity change from 0 to 764 [ 527.520442][T29148] hsr_slave_0: entered promiscuous mode [ 527.527165][T29148] hsr_slave_1: entered promiscuous mode [ 527.543035][T29148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.551351][T29148] Cannot create hsr debugfs directory [ 527.557186][T26983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 527.567613][ T6496] hsr_slave_0: left promiscuous mode [ 527.575397][ T6496] hsr_slave_1: left promiscuous mode [ 527.581902][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.589534][ T6496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.598191][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.606779][ T6496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.617526][ T6496] veth1_macvtap: left promiscuous mode [ 527.623069][ T6496] veth0_macvtap: left promiscuous mode [ 527.628757][ T6496] veth1_vlan: left promiscuous mode [ 527.633131][T29244] netlink: 'syz.3.8153': attribute type 10 has an invalid length. [ 527.634845][ T6496] veth0_vlan: left promiscuous mode [ 527.653262][T29246] loop2: detected capacity change from 0 to 512 [ 527.661094][T29246] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 527.689854][T29246] EXT4-fs (loop2): 1 truncate cleaned up [ 527.705067][T29246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.735674][T20506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.818229][T29244] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.825523][T29244] bridge0: port 2(bridge_slave_1) entered listening state [ 527.832763][T29244] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.839879][T29244] bridge0: port 1(bridge_slave_0) entered listening state [ 527.851193][T29244] : (slave bridge0): Enslaving as an active interface with an up link [ 527.940001][T29256] loop2: detected capacity change from 0 to 764 [ 528.041448][T29264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.051899][T29264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.224476][T29148] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 528.234605][T29148] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 528.243987][T29148] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 528.253060][T29148] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 528.276119][T29276] loop5: detected capacity change from 0 to 512 [ 528.293269][T29148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.295591][T29276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.308786][T29148] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.321805][T29276] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.329543][T26983] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.339301][T26983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.351013][T26982] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.358147][T26982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.378319][T29148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 528.389101][T29148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 528.410254][T28963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.475079][T29148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.506011][T29294] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 528.513474][T29294] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 528.610845][T29148] veth0_vlan: entered promiscuous mode [ 528.621962][T29148] veth1_vlan: entered promiscuous mode [ 528.664095][T26983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 528.699567][T29310] loop4: detected capacity change from 0 to 8192 [ 528.725744][T29148] veth0_macvtap: entered promiscuous mode [ 528.736275][T29148] veth1_macvtap: entered promiscuous mode [ 528.745942][T29300] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 528.763792][T29148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.774271][T29148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.784972][T29148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.795454][T29148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.805418][T29148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.816020][T29148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.826630][T29148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.837198][T29148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.847162][T29148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.858300][T29148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.869155][T29148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.877759][T29148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.889100][T29148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.898981][T29148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.909648][T29148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.920327][T29148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.930788][T29148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.940757][T29148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.951967][T29148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.961823][T29148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.972302][T29148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.983919][T29148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.002332][T29148] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.011861][T29148] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.020671][T29148] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.029652][T29148] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.650818][T29330] chnl_net:caif_netlink_parms(): no params data found [ 529.766300][T29352] bridge0: port 3(gretap0) entered blocking state [ 529.772811][T29352] bridge0: port 3(gretap0) entered disabled state [ 529.844382][T26983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 529.856315][T29352] gretap0: entered allmulticast mode [ 529.912695][T29352] gretap0: entered promiscuous mode [ 529.939486][T29352] bridge0: port 3(gretap0) entered blocking state [ 529.946039][T29352] bridge0: port 3(gretap0) entered forwarding state [ 530.073570][T29330] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.081007][T29330] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.088274][T29330] bridge_slave_0: entered allmulticast mode [ 530.095008][T29330] bridge_slave_0: entered promiscuous mode [ 530.103032][T29330] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.110283][T29330] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.117687][T29330] bridge_slave_1: entered allmulticast mode [ 530.124479][T29330] bridge_slave_1: entered promiscuous mode [ 530.168211][T29330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.181884][T29330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.209341][T29330] team0: Port device team_slave_0 added [ 530.219861][T29330] team0: Port device team_slave_1 added [ 530.222870][T29347] netlink: 'syz.5.8178': attribute type 10 has an invalid length. [ 530.257225][T29347] bridge0: port 3(gretap0) entered disabled state [ 530.263838][T29347] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.271211][T29347] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.303393][T29347] bridge0: port 3(gretap0) entered blocking state [ 530.310004][T29347] bridge0: port 3(gretap0) entered forwarding state [ 530.316760][T29347] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.323851][T29347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.331210][T29347] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.338297][T29347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.352999][T29347] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 530.354647][T29373] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8185'. [ 530.372596][T29330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.379681][T29330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.405932][T29330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.417526][T29330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.424578][T29330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.450730][T29330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.502074][T29376] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8186'. [ 530.546828][T29330] hsr_slave_0: entered promiscuous mode [ 530.556268][T29330] hsr_slave_1: entered promiscuous mode [ 530.562626][T29330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.570787][T29330] Cannot create hsr debugfs directory [ 530.673321][T29330] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.736442][T29330] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.770550][ T29] kauditd_printk_skb: 1052 callbacks suppressed [ 530.770570][ T29] audit: type=1326 audit(2000000240.930:67670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29388 comm="syz.9.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459d975d29 code=0x7ffc0000 [ 530.816588][T29330] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.826653][ T29] audit: type=1326 audit(2000000240.930:67671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29388 comm="syz.9.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459d975d29 code=0x7ffc0000 [ 530.851141][ T29] audit: type=1326 audit(2000000240.930:67672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29388 comm="syz.9.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f459d975d29 code=0x7ffc0000 [ 530.875735][ T29] audit: type=1326 audit(2000000240.930:67673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29388 comm="syz.9.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459d975d29 code=0x7ffc0000 [ 530.899565][ T29] audit: type=1326 audit(2000000240.930:67674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29388 comm="syz.9.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459d975d29 code=0x7ffc0000 [ 530.924113][ T29] audit: type=1326 audit(2000000240.930:67675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29388 comm="syz.9.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f459d975d29 code=0x7ffc0000 [ 530.948090][ T29] audit: type=1326 audit(2000000240.930:67676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29388 comm="syz.9.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459d975d29 code=0x7ffc0000 [ 530.972710][ T29] audit: type=1326 audit(2000000240.930:67677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29388 comm="syz.9.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459d975d29 code=0x7ffc0000 [ 530.997089][ T29] audit: type=1326 audit(2000000240.930:67678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29388 comm="syz.9.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f459d975d29 code=0x7ffc0000 [ 531.020625][ T29] audit: type=1326 audit(2000000240.930:67679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29388 comm="syz.9.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459d975d29 code=0x7ffc0000 [ 531.024515][ T6496] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 531.144057][T29330] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.158601][T29393] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8192'. [ 531.231029][T29330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 531.240173][T29330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 531.249325][T29330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 531.261365][T29397] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 531.261483][T29330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 531.324090][T29330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.339464][T29330] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.353219][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.360459][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.373439][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.380561][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.425768][T29402] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 531.514593][T29330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.618903][T29425] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8203'. [ 531.668168][T29330] veth0_vlan: entered promiscuous mode [ 531.686599][T29330] veth1_vlan: entered promiscuous mode [ 531.728813][T29330] veth0_macvtap: entered promiscuous mode [ 531.740374][T29330] veth1_macvtap: entered promiscuous mode [ 531.798290][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.808857][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.818842][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.829480][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.839372][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.849882][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.859829][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.870458][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.880451][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.890931][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.900925][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.911441][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.922786][T29330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.931749][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.942408][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.952296][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.962799][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.973040][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.983570][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.993719][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.004319][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.014182][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.024656][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.034590][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.045145][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.056010][T29330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.123803][T29330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.132649][T29330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.141767][T29330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.150763][T29330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.214526][ T55] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 532.254513][T29442] loop4: detected capacity change from 0 to 764 [ 532.680804][T29451] loop5: detected capacity change from 0 to 764 [ 532.700161][T29415] Set syz1 is full, maxelem 65536 reached [ 532.947609][T29484] FAULT_INJECTION: forcing a failure. [ 532.947609][T29484] name failslab, interval 1, probability 0, space 0, times 0 [ 532.960509][T29484] CPU: 0 UID: 0 PID: 29484 Comm: syz.4.8218 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 532.971299][T29484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 532.981378][T29484] Call Trace: [ 532.984706][T29484] [ 532.987662][T29484] dump_stack_lvl+0xf2/0x150 [ 532.992296][T29484] dump_stack+0x15/0x1a [ 532.996510][T29484] should_fail_ex+0x223/0x230 [ 533.001280][T29484] should_failslab+0x8f/0xb0 [ 533.005926][T29484] __kmalloc_noprof+0xab/0x3f0 [ 533.010729][T29484] ? group_cpus_evenly+0x199/0x3b0 [ 533.015900][T29484] group_cpus_evenly+0x199/0x3b0 [ 533.020882][T29484] blk_mq_map_queues+0x2f/0x230 [ 533.026013][T29484] blk_mq_update_queue_map+0x1e1/0x210 [ 533.031524][T29484] blk_mq_alloc_tag_set+0x426/0x610 [ 533.036765][T29484] loop_add+0x260/0x590 [ 533.041029][T29484] ? ioctl_has_perm+0x28d/0x2e0 [ 533.045955][T29484] loop_control_ioctl+0xc8/0x440 [ 533.050989][T29484] ? __pfx_loop_control_ioctl+0x10/0x10 [ 533.056594][T29484] __se_sys_ioctl+0xc9/0x140 [ 533.061246][T29484] __x64_sys_ioctl+0x43/0x50 [ 533.065875][T29484] x64_sys_call+0x1690/0x2dc0 [ 533.070578][T29484] do_syscall_64+0xc9/0x1c0 [ 533.075129][T29484] ? clear_bhb_loop+0x55/0xb0 [ 533.079916][T29484] ? clear_bhb_loop+0x55/0xb0 [ 533.084685][T29484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.090633][T29484] RIP: 0033:0x7fd4ebbd5d29 [ 533.095145][T29484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.114787][T29484] RSP: 002b:00007fd4ea1ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.123297][T29484] RAX: ffffffffffffffda RBX: 00007fd4ebdc6160 RCX: 00007fd4ebbd5d29 [ 533.131407][T29484] RDX: ffffffffffffffb6 RSI: 0000000000004c80 RDI: 000000000000000d [ 533.139389][T29484] RBP: 00007fd4ea1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 533.147370][T29484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.155377][T29484] R13: 0000000000000000 R14: 00007fd4ebdc6160 R15: 00007ffd2e953bb8 [ 533.163380][T29484] [ 533.431815][T29505] loop2: detected capacity change from 0 to 512 [ 533.450043][T29505] EXT4-fs (loop2): orphan cleanup on readonly fs [ 533.457702][T29505] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 533.483031][T29505] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 533.495076][T29508] loop3: detected capacity change from 0 to 512 [ 533.499233][T29505] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.8233: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 533.522713][ T6496] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 533.525246][T29505] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.8233: couldn't read orphan inode 13 (err -117) [ 533.543347][T29505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 533.559414][T29508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.572290][T29508] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.590419][T29330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.622349][T27324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.727821][T29523] pimreg: entered allmulticast mode [ 533.767971][T29527] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8241'. [ 533.785546][T29523] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8239'. [ 533.949148][T29544] loop2: detected capacity change from 0 to 764 [ 534.004601][T29548] loop2: detected capacity change from 0 to 2048 [ 534.069054][T29548] GPT:first_usable_lbas don't match. [ 534.074423][T29548] GPT:34 != 290 [ 534.078061][T29548] GPT: Use GNU Parted to correct GPT errors. [ 534.085173][T29548] loop2: p1 p2 p3 [ 534.133585][T29548] netlink: 700 bytes leftover after parsing attributes in process `syz.2.8250'. [ 534.154602][T29548] veth3: entered promiscuous mode [ 534.171913][T29554] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8253'. [ 534.196515][T29552] loop3: detected capacity change from 0 to 764 [ 534.217501][T29556] netlink: 'syz.2.8254': attribute type 10 has an invalid length. [ 534.234964][T29556] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 534.309540][T29570] netlink: 'syz.3.8261': attribute type 10 has an invalid length. [ 534.317761][T29570] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.324924][T29570] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.414580][T29587] FAULT_INJECTION: forcing a failure. [ 534.414580][T29587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.428499][T29587] CPU: 1 UID: 0 PID: 29587 Comm: syz.3.8267 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 534.439564][T29587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 534.449736][T29587] Call Trace: [ 534.453015][T29587] [ 534.456011][T29587] dump_stack_lvl+0xf2/0x150 [ 534.460634][T29587] dump_stack+0x15/0x1a [ 534.464826][T29587] should_fail_ex+0x223/0x230 [ 534.469586][T29587] should_fail+0xb/0x10 [ 534.473798][T29587] should_fail_usercopy+0x1a/0x20 [ 534.478898][T29587] _copy_from_iter+0xd5/0xd00 [ 534.483761][T29587] ? skb_put+0x91/0x100 [ 534.487960][T29587] ? __virt_addr_valid+0x1ed/0x250 [ 534.493148][T29587] ? __check_object_size+0x364/0x520 [ 534.498515][T29587] netlink_sendmsg+0x460/0x6e0 [ 534.503459][T29587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.508772][T29587] __sock_sendmsg+0x140/0x180 [ 534.513531][T29587] ____sys_sendmsg+0x312/0x410 [ 534.518335][T29587] __sys_sendmsg+0x19d/0x230 [ 534.523054][T29587] __x64_sys_sendmsg+0x46/0x50 [ 534.527936][T29587] x64_sys_call+0x2734/0x2dc0 [ 534.532635][T29587] do_syscall_64+0xc9/0x1c0 [ 534.537227][T29587] ? clear_bhb_loop+0x55/0xb0 [ 534.541926][T29587] ? clear_bhb_loop+0x55/0xb0 [ 534.546632][T29587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.552729][T29587] RIP: 0033:0x7f414cb05d29 [ 534.557175][T29587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.576864][T29587] RSP: 002b:00007f414b177038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.585334][T29587] RAX: ffffffffffffffda RBX: 00007f414ccf5fa0 RCX: 00007f414cb05d29 [ 534.593372][T29587] RDX: 0000000000000800 RSI: 0000000020000380 RDI: 0000000000000003 [ 534.601365][T29587] RBP: 00007f414b177090 R08: 0000000000000000 R09: 0000000000000000 [ 534.609364][T29587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.617364][T29587] R13: 0000000000000000 R14: 00007f414ccf5fa0 R15: 00007ffc862ca1a8 [ 534.625369][T29587] [ 534.637310][T29590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8269'. [ 534.647785][T29589] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 534.736208][T26983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 534.799879][T29608] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 534.898977][T29627] loop5: detected capacity change from 0 to 512 [ 534.907246][T29629] FAULT_INJECTION: forcing a failure. [ 534.907246][T29629] name failslab, interval 1, probability 0, space 0, times 0 [ 534.920089][T29629] CPU: 0 UID: 0 PID: 29629 Comm: syz.3.8286 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 534.930940][T29629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 534.941023][T29629] Call Trace: [ 534.944308][T29629] [ 534.947250][T29629] dump_stack_lvl+0xf2/0x150 [ 534.951895][T29629] dump_stack+0x15/0x1a [ 534.956084][T29629] should_fail_ex+0x223/0x230 [ 534.960798][T29629] should_failslab+0x8f/0xb0 [ 534.965457][T29629] kmem_cache_alloc_noprof+0x52/0x320 [ 534.970850][T29629] ? mas_alloc_nodes+0x1e3/0x490 [ 534.975929][T29629] mas_alloc_nodes+0x1e3/0x490 [ 534.980880][T29629] mas_preallocate+0x44a/0x650 [ 534.985759][T29629] __split_vma+0x244/0x6a0 [ 534.990385][T29629] vma_modify+0xd3/0x1e0 [ 534.994745][T29629] vma_modify_policy+0xeb/0x120 [ 534.999695][T29629] mbind_range+0x1d8/0x490 [ 535.004147][T29629] __se_sys_mbind+0x915/0x1160 [ 535.008974][T29629] __x64_sys_mbind+0x78/0x90 [ 535.013610][T29629] x64_sys_call+0x2662/0x2dc0 [ 535.018373][T29629] do_syscall_64+0xc9/0x1c0 [ 535.022914][T29629] ? clear_bhb_loop+0x55/0xb0 [ 535.027848][T29629] ? clear_bhb_loop+0x55/0xb0 [ 535.032569][T29629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.038525][T29629] RIP: 0033:0x7f414cb05d29 [ 535.042985][T29629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.062701][T29629] RSP: 002b:00007f414b177038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 535.071217][T29629] RAX: ffffffffffffffda RBX: 00007f414ccf5fa0 RCX: 00007f414cb05d29 [ 535.079233][T29629] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020001000 [ 535.087235][T29629] RBP: 00007f414b177090 R08: 0000000000000000 R09: 0000000000000000 [ 535.095233][T29629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.103227][T29629] R13: 0000000000000000 R14: 00007f414ccf5fa0 R15: 00007ffc862ca1a8 [ 535.111271][T29629] [ 535.226410][T29640] netlink: 133492 bytes leftover after parsing attributes in process `syz.9.8292'. [ 535.252343][T29640] wireguard0: entered promiscuous mode [ 535.257900][T29640] wireguard0: entered allmulticast mode [ 535.284157][T29650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8296'. [ 535.415130][T29667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8301'. [ 535.587980][T29690] loop3: detected capacity change from 0 to 2048 [ 535.625140][T29690] loop3: p3 < > p4 < > [ 535.629357][T29690] loop3: partition table partially beyond EOD, truncated [ 535.637569][T29700] loop2: detected capacity change from 0 to 128 [ 535.647236][T29700] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 535.661582][T29690] loop3: p3 start 4284289 is beyond EOD, truncated [ 535.672195][T29700] FAT-fs (loop2): bogus number of FAT sectors [ 535.678382][T29700] FAT-fs (loop2): Can't find a valid FAT filesystem [ 535.737241][T29700] nfs4: Unknown parameter '/' [ 535.750285][ T29] kauditd_printk_skb: 426 callbacks suppressed [ 535.750301][ T29] audit: type=1326 audit(2000000245.975:68104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29699 comm="syz.2.8315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 535.804376][ T29] audit: type=1326 audit(2000000246.006:68105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29699 comm="syz.2.8315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 535.828365][ T29] audit: type=1326 audit(2000000246.006:68106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29699 comm="syz.2.8315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 535.852108][ T29] audit: type=1326 audit(2000000246.006:68107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29699 comm="syz.2.8315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 535.875960][ T29] audit: type=1326 audit(2000000246.006:68108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29699 comm="syz.2.8315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 535.900543][ T29] audit: type=1326 audit(2000000246.006:68109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29699 comm="syz.2.8315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 535.924304][ T29] audit: type=1326 audit(2000000246.006:68110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29699 comm="syz.2.8315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 535.948076][ T29] audit: type=1326 audit(2000000246.006:68111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29699 comm="syz.2.8315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 535.971761][ T29] audit: type=1326 audit(2000000246.006:68112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29699 comm="syz.2.8315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 535.995433][ T29] audit: type=1326 audit(2000000246.006:68113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29699 comm="syz.2.8315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 536.030291][ T6526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 536.185521][T29732] Invalid ELF header magic: != ELF [ 536.198836][T29732] loop5: detected capacity change from 0 to 512 [ 536.231005][T29732] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.8328: corrupted in-inode xattr: invalid ea_ino [ 536.244920][T29732] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.8328: couldn't read orphan inode 15 (err -117) [ 536.309710][T29732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.478883][T29745] __nla_validate_parse: 4 callbacks suppressed [ 536.478960][T29745] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8331'. [ 536.511917][T28963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.625366][T29754] loop3: detected capacity change from 0 to 2048 [ 536.667367][T29756] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8335'. [ 536.692105][T29754] GPT:first_usable_lbas don't match. [ 536.697580][T29754] GPT:34 != 290 [ 536.701154][T29754] GPT: Use GNU Parted to correct GPT errors. [ 536.707321][T29754] loop3: p1 p2 p3 [ 536.740186][T29754] netlink: 700 bytes leftover after parsing attributes in process `syz.3.8333'. [ 536.757778][T29754] veth5: entered promiscuous mode [ 537.081758][T29778] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8344'. [ 537.148518][ T6496] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 537.183867][T29786] netlink: 'syz.5.8345': attribute type 10 has an invalid length. [ 537.208917][T29786] bridge0: port 3(gretap0) entered disabled state [ 537.215556][T29786] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.222882][T29786] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.247157][T29794] loop2: detected capacity change from 0 to 764 [ 537.312386][T29800] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8352'. [ 537.330530][T29800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.338101][T29800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.363699][T29806] loop2: detected capacity change from 0 to 1024 [ 537.370956][T29800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.379265][T29800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.388100][T29806] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 537.409886][T29806] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 537.422237][T29806] EXT4-fs (loop2): orphan cleanup on readonly fs [ 537.429476][T29806] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 537.446033][T29806] EXT4-fs (loop2): Remounting filesystem read-only [ 537.453165][T29806] EXT4-fs (loop2): 1 orphan inode deleted [ 537.474020][T29806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 537.494791][T29806] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 537.508750][T29806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.549803][T29806] FAULT_INJECTION: forcing a failure. [ 537.549803][T29806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.561614][T29818] loop4: detected capacity change from 0 to 2048 [ 537.563100][T29806] CPU: 0 UID: 0 PID: 29806 Comm: syz.2.8354 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 537.580199][T29806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 537.590329][T29806] Call Trace: [ 537.593731][T29806] [ 537.596676][T29806] dump_stack_lvl+0xf2/0x150 [ 537.601323][T29806] dump_stack+0x15/0x1a [ 537.605602][T29806] should_fail_ex+0x223/0x230 [ 537.610314][T29806] should_fail+0xb/0x10 [ 537.614509][T29806] should_fail_usercopy+0x1a/0x20 [ 537.619602][T29806] _copy_from_iter+0xd5/0xd00 [ 537.624400][T29806] ? kmalloc_reserve+0x16e/0x190 [ 537.629370][T29806] ? __build_skb_around+0x196/0x1f0 [ 537.634640][T29806] ? __alloc_skb+0x21f/0x310 [ 537.639325][T29806] ? __virt_addr_valid+0x1ed/0x250 [ 537.644472][T29806] ? __check_object_size+0x364/0x520 [ 537.649864][T29806] netlink_sendmsg+0x460/0x6e0 [ 537.654735][T29806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.660115][T29806] __sock_sendmsg+0x140/0x180 [ 537.664859][T29806] ____sys_sendmsg+0x312/0x410 [ 537.669686][T29806] __sys_sendmmsg+0x227/0x4b0 [ 537.674415][T29806] __x64_sys_sendmmsg+0x57/0x70 [ 537.679388][T29806] x64_sys_call+0x29aa/0x2dc0 [ 537.684174][T29806] do_syscall_64+0xc9/0x1c0 [ 537.688789][T29806] ? clear_bhb_loop+0x55/0xb0 [ 537.693522][T29806] ? clear_bhb_loop+0x55/0xb0 [ 537.698259][T29806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.704274][T29806] RIP: 0033:0x7fe8f7f85d29 [ 537.708837][T29806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.728467][T29806] RSP: 002b:00007fe8f65f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 537.737189][T29806] RAX: ffffffffffffffda RBX: 00007fe8f8175fa0 RCX: 00007fe8f7f85d29 [ 537.745186][T29806] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000007 [ 537.753262][T29806] RBP: 00007fe8f65f1090 R08: 0000000000000000 R09: 0000000000000000 [ 537.761254][T29806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.769314][T29806] R13: 0000000000000000 R14: 00007fe8f8175fa0 R15: 00007ffc714ada48 [ 537.777320][T29806] [ 537.805641][T29818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.849117][T29818] program syz.4.8358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 537.858800][T29818] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 537.996370][T25802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.187936][T29846] loop4: detected capacity change from 0 to 8192 [ 538.219809][T29860] macvlan2: entered promiscuous mode [ 538.225211][T29860] vlan1: entered promiscuous mode [ 538.244524][T29860] vlan1: left promiscuous mode [ 538.272449][T29866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8375'. [ 538.307101][T29866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8375'. [ 538.447028][T26983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 538.564402][T29898] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8387'. [ 539.135661][T29919] loop5: detected capacity change from 0 to 1024 [ 539.182538][T29919] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 539.219769][T29919] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 539.237777][T29919] EXT4-fs (loop5): orphan cleanup on readonly fs [ 539.259006][T29919] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 539.272782][T29919] EXT4-fs (loop5): Remounting filesystem read-only [ 539.280454][T29919] EXT4-fs (loop5): 1 orphan inode deleted [ 539.286976][T29919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 539.308543][T29919] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 539.315579][T29919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.418002][T29937] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8404'. [ 539.505412][T29944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8407'. [ 539.517954][T29944] loop2: detected capacity change from 0 to 128 [ 539.524743][T29944] vfat: Bad value for 'nonumtail' [ 539.542852][T26983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 540.362806][T29963] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.371954][T29963] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.381596][T29963] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.390359][T29963] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.399766][T29963] vxlan0: entered promiscuous mode [ 540.405804][T29963] vxlan0: entered allmulticast mode [ 540.413863][T29963] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.422957][T29963] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.422993][T29963] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.423047][T29963] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.453891][T29967] netem: change failed [ 540.531616][T29974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 540.638803][ T6496] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 540.839045][T30002] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30002 comm=syz.5.8433 [ 540.958137][ T29] kauditd_printk_skb: 959 callbacks suppressed [ 540.958153][ T29] audit: type=1326 audit(2000000251.300:69065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30017 comm="syz.2.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 541.003147][ T29] audit: type=1326 audit(2000000251.300:69066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30017 comm="syz.2.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 541.027768][ T29] audit: type=1326 audit(2000000251.300:69067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30017 comm="syz.2.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 541.052154][ T29] audit: type=1326 audit(2000000251.300:69068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30017 comm="syz.2.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 541.075878][ T29] audit: type=1326 audit(2000000251.300:69069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30017 comm="syz.2.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 541.100246][ T29] audit: type=1326 audit(2000000251.300:69070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30017 comm="syz.2.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 541.123997][ T29] audit: type=1326 audit(2000000251.300:69071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30017 comm="syz.2.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 541.148357][ T29] audit: type=1326 audit(2000000251.300:69072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30017 comm="syz.2.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 541.171992][ T29] audit: type=1326 audit(2000000251.300:69073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30017 comm="syz.2.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 541.196264][ T29] audit: type=1326 audit(2000000251.300:69074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30017 comm="syz.2.8438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f7f85d29 code=0x7ffc0000 [ 541.252751][T30023] loop5: detected capacity change from 0 to 128 [ 541.260206][T30023] vfat: Bad value for 'nonumtail' [ 541.312818][T30029] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.321692][T30029] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.330946][T30029] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.339741][T30029] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.351486][T30029] vxlan0: entered promiscuous mode [ 541.356737][T30029] vxlan0: entered allmulticast mode [ 541.379264][T30029] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.388471][T30029] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.397606][T30029] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.407120][T30029] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.547679][T30056] loop2: detected capacity change from 0 to 128 [ 541.569736][T30056] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 541.586424][T30056] FAT-fs (loop2): bogus number of FAT sectors [ 541.592634][T30056] FAT-fs (loop2): Can't find a valid FAT filesystem [ 541.611392][T30056] nfs4: Unknown parameter '/' [ 541.674070][T30072] __nla_validate_parse: 5 callbacks suppressed [ 541.674085][T30072] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8462'. [ 541.690001][T30072] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8462'. [ 541.723278][T30075] netlink: 64 bytes leftover after parsing attributes in process `syz.9.8463'. [ 541.765586][T26983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 541.831177][T30081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.841776][T30081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.363941][T30094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8471'. [ 542.373028][T30094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8471'. [ 542.408221][T30098] loop3: detected capacity change from 0 to 512 [ 542.435443][T30098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.448270][T30098] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 542.477399][T27324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.703008][T30125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.714207][T30125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.771502][T30132] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8485'. [ 542.865713][ T6496] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 542.881747][T30143] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8490'. [ 543.035562][T30159] xt_connbytes: Forcing CT accounting to be enabled [ 543.042594][T30159] Cannot find set identified by id 0 to match [ 543.367486][T30185] FAULT_INJECTION: forcing a failure. [ 543.367486][T30185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.381336][T30185] CPU: 0 UID: 0 PID: 30185 Comm: syz.3.8507 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 543.392149][T30185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 543.402262][T30185] Call Trace: [ 543.405566][T30185] [ 543.408522][T30185] dump_stack_lvl+0xf2/0x150 [ 543.413213][T30185] dump_stack+0x15/0x1a [ 543.417411][T30185] should_fail_ex+0x223/0x230 [ 543.420807][T30188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.422109][T30185] should_fail+0xb/0x10 [ 543.434701][T30185] should_fail_usercopy+0x1a/0x20 [ 543.439760][T30185] _copy_to_user+0x20/0xa0 [ 543.443571][T30188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.444207][T30185] simple_read_from_buffer+0xa0/0x110 [ 543.457325][T30185] proc_fail_nth_read+0xf9/0x140 [ 543.462363][T30185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 543.467925][T30185] vfs_read+0x1a2/0x700 [ 543.472137][T30185] ? __rcu_read_unlock+0x4e/0x70 [ 543.477157][T30185] ? __fget_files+0x17c/0x1c0 [ 543.481909][T30185] ksys_read+0xe8/0x1b0 [ 543.486137][T30185] __x64_sys_read+0x42/0x50 [ 543.490765][T30185] x64_sys_call+0x2874/0x2dc0 [ 543.495530][T30185] do_syscall_64+0xc9/0x1c0 [ 543.500045][T30185] ? clear_bhb_loop+0x55/0xb0 [ 543.504747][T30185] ? clear_bhb_loop+0x55/0xb0 [ 543.509485][T30185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.515561][T30185] RIP: 0033:0x7f414cb0473c [ 543.520006][T30185] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 543.539657][T30185] RSP: 002b:00007f414b177030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 543.548160][T30185] RAX: ffffffffffffffda RBX: 00007f414ccf5fa0 RCX: 00007f414cb0473c [ 543.556242][T30185] RDX: 000000000000000f RSI: 00007f414b1770a0 RDI: 0000000000000006 [ 543.564220][T30185] RBP: 00007f414b177090 R08: 0000000000000000 R09: 0000000000000000 [ 543.572196][T30185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.580174][T30185] R13: 0000000000000000 R14: 00007f414ccf5fa0 R15: 00007ffc862ca1a8 [ 543.588163][T30185] [ 543.596765][T30188] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8510'. [ 543.613163][T30196] 9pnet_fd: Insufficient options for proto=fd [ 543.631062][T30198] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8512'. [ 543.692703][T30204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.701524][T30204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.731398][T30206] xt_cgroup: xt_cgroup: no path or classid specified [ 543.760649][T30211] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 544.135029][T26982] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 544.264751][T30244] loop5: detected capacity change from 0 to 128 [ 544.272078][T30244] EXT4-fs: Ignoring removed nobh option [ 544.289948][T30244] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 544.303158][T30244] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 544.328773][T28963] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 544.350054][T30250] loop5: detected capacity change from 0 to 512 [ 544.357087][T30250] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 544.378171][T30253] FAULT_INJECTION: forcing a failure. [ 544.378171][T30253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.380069][T30250] EXT4-fs (loop5): 1 truncate cleaned up [ 544.391343][T30253] CPU: 1 UID: 0 PID: 30253 Comm: syz.9.8533 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 544.391394][T30253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 544.391407][T30253] Call Trace: [ 544.391416][T30253] [ 544.391426][T30253] dump_stack_lvl+0xf2/0x150 [ 544.391531][T30253] dump_stack+0x15/0x1a [ 544.391589][T30253] should_fail_ex+0x223/0x230 [ 544.391621][T30253] should_fail+0xb/0x10 [ 544.391646][T30253] should_fail_usercopy+0x1a/0x20 [ 544.391677][T30253] _copy_to_user+0x20/0xa0 [ 544.391751][T30253] simple_read_from_buffer+0xa0/0x110 [ 544.391844][T30253] proc_fail_nth_read+0xf9/0x140 [ 544.391878][T30253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 544.391914][T30253] vfs_read+0x1a2/0x700 [ 544.391943][T30253] ? __rcu_read_unlock+0x4e/0x70 [ 544.392057][T30253] ? __fget_files+0x17c/0x1c0 [ 544.398216][T30250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.408473][T30253] ksys_read+0xe8/0x1b0 [ 544.408518][T30253] __x64_sys_read+0x42/0x50 [ 544.408554][T30253] x64_sys_call+0x2874/0x2dc0 [ 544.450287][T30250] EXT4-fs error (device loop5): ext4_find_dest_de:2079: inode #2: block 13: comm +}[@: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 544.452052][T30253] do_syscall_64+0xc9/0x1c0 [ 544.531198][T30253] ? clear_bhb_loop+0x55/0xb0 [ 544.536195][T30253] ? clear_bhb_loop+0x55/0xb0 [ 544.540924][T30253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.546900][T30253] RIP: 0033:0x7f459d97473c [ 544.551393][T30253] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 544.571241][T30253] RSP: 002b:00007f459bfe1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 544.579711][T30253] RAX: ffffffffffffffda RBX: 00007f459db65fa0 RCX: 00007f459d97473c [ 544.588139][T30253] RDX: 000000000000000f RSI: 00007f459bfe10a0 RDI: 0000000000000005 [ 544.596131][T30253] RBP: 00007f459bfe1090 R08: 0000000000000000 R09: 0000000000000000 [ 544.604163][T30253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.612309][T30253] R13: 0000000000000000 R14: 00007f459db65fa0 R15: 00007fff50e02258 [ 544.620327][T30253] [ 544.657805][T28963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.658758][T30264] loop2: detected capacity change from 0 to 128 [ 544.676970][T30264] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 544.689256][T30264] FAT-fs (loop2): bogus number of FAT sectors [ 544.695532][T30264] FAT-fs (loop2): Can't find a valid FAT filesystem [ 544.750316][T30264] nfs4: Unknown parameter '/' [ 544.963059][T30294] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.032694][T30294] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.107132][T30294] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.166583][T30294] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.254288][T30294] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.271572][T30294] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.299751][T30294] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.312225][T30294] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.358042][T30330] loop3: detected capacity change from 0 to 1024 [ 545.378453][T30330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.390675][T30330] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.405440][ T55] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 545.426383][T30338] netlink: zone id is out of range [ 545.434778][T30340] 9pnet_fd: Insufficient options for proto=fd [ 545.485688][T30344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.494977][T30344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.507893][T27324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.564280][T30355] loop3: detected capacity change from 0 to 128 [ 545.574212][T30355] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 545.586607][T30355] FAT-fs (loop3): bogus number of FAT sectors [ 545.593531][T30355] FAT-fs (loop3): Can't find a valid FAT filesystem [ 545.603153][T30355] nfs4: Unknown parameter '/' [ 545.703487][T30368] loop3: detected capacity change from 0 to 1024 [ 545.711304][T30368] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 545.722583][T30368] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 545.733489][T30368] EXT4-fs (loop3): orphan cleanup on readonly fs [ 545.741062][T30368] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 545.752488][T30368] EXT4-fs (loop3): Remounting filesystem read-only [ 545.759372][T30368] EXT4-fs (loop3): 1 orphan inode deleted [ 545.765649][T30368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 545.779202][T30368] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 545.786195][T30368] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.824739][T30377] loop2: detected capacity change from 0 to 128 [ 545.831916][T30377] vfat: Bad value for 'nonumtail' [ 545.953167][T30392] loop3: detected capacity change from 0 to 1024 [ 545.964131][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 545.964146][ T29] audit: type=1326 audit(2000000256.396:69391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.3.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414cb05d29 code=0x7ffc0000 [ 545.995135][ T29] audit: type=1326 audit(2000000256.396:69392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.3.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414cb05d29 code=0x7ffc0000 [ 546.019791][ T29] audit: type=1326 audit(2000000256.396:69393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.3.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f414cb05d29 code=0x7ffc0000 [ 546.045586][ T29] audit: type=1326 audit(2000000256.396:69394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.3.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414cb05d29 code=0x7ffc0000 [ 546.069868][ T29] audit: type=1326 audit(2000000256.396:69395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.3.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f414cb05d29 code=0x7ffc0000 [ 546.094243][ T29] audit: type=1326 audit(2000000256.396:69396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.3.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414cb05d29 code=0x7ffc0000 [ 546.118052][ T29] audit: type=1326 audit(2000000256.396:69397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.3.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f414cb05d29 code=0x7ffc0000 [ 546.142562][ T29] audit: type=1326 audit(2000000256.396:69398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.3.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f414cb05d63 code=0x7ffc0000 [ 546.166191][ T29] audit: type=1326 audit(2000000256.396:69399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.3.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f414cb05d63 code=0x7ffc0000 [ 546.190383][ T29] audit: type=1326 audit(2000000256.396:69400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.3.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414cb05d29 code=0x7ffc0000 [ 546.562531][T30427] loop5: detected capacity change from 0 to 2048 [ 546.571245][T30427] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 546.586686][T30431] xt_connbytes: Forcing CT accounting to be enabled [ 546.598219][ T6526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 546.649161][T30434] __nla_validate_parse: 15 callbacks suppressed [ 546.649176][T30434] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8612'. [ 546.665972][T30434] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8612'. [ 546.755779][T30436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8613'. [ 547.276248][T30501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8644'. [ 547.286017][T30501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8644'. [ 547.321267][T30506] loop5: detected capacity change from 0 to 256 [ 547.432130][T30522] ================================================================== [ 547.440352][T30522] BUG: KCSAN: data-race in mtree_range_walk / rcu_segcblist_enqueue [ 547.448364][T30522] [ 547.450708][T30522] write to 0xffff888104b5eb08 of 8 bytes by task 30520 on cpu 1: [ 547.458450][T30522] rcu_segcblist_enqueue+0x67/0xb0 [ 547.463649][T30522] call_rcu+0x1bd/0x430 [ 547.467826][T30522] mas_replace_node+0x2fa/0x430 [ 547.472699][T30522] mas_wr_store_entry+0x1fbf/0x2d10 [ 547.477911][T30522] mas_store_prealloc+0x6bf/0x960 [ 547.482954][T30522] vma_complete+0x3a7/0x760 [ 547.487466][T30522] __split_vma+0x5d6/0x6a0 [ 547.491899][T30522] vma_modify+0xd3/0x1e0 [ 547.496154][T30522] vma_modify_flags+0xf1/0x120 [ 547.500930][T30522] mprotect_fixup+0x31a/0x5e0 [ 547.505626][T30522] do_mprotect_pkey+0x653/0x960 [ 547.510499][T30522] __x64_sys_mprotect+0x48/0x60 [ 547.515368][T30522] x64_sys_call+0x2770/0x2dc0 [ 547.520077][T30522] do_syscall_64+0xc9/0x1c0 [ 547.524594][T30522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.530530][T30522] [ 547.532864][T30522] read to 0xffff888104b5eb08 of 8 bytes by task 30522 on cpu 0: [ 547.540516][T30522] mtree_range_walk+0x140/0x460 [ 547.545388][T30522] mas_walk+0x16e/0x320 [ 547.549578][T30522] lock_vma_under_rcu+0x95/0x260 [ 547.554557][T30522] exc_page_fault+0x150/0x650 [ 547.559280][T30522] asm_exc_page_fault+0x26/0x30 [ 547.564151][T30522] [ 547.566477][T30522] Reported by Kernel Concurrency Sanitizer on: [ 547.572682][T30522] CPU: 0 UID: 0 PID: 30522 Comm: syz.4.8653 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 547.583469][T30522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 547.593550][T30522] ================================================================== [ 547.819922][ T55] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 548.907065][ T6496] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 549.993665][ T6496] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 550.303386][ T55] tipc: Resetting bearer [ 550.345975][ T55] tipc: Disabling bearer [ 550.358482][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.368829][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.379758][ T55] bond0 (unregistering): Released all slaves [ 550.420939][ T55] tipc: Left network mode [ 550.445275][ T55] hsr_slave_0: left promiscuous mode [ 550.451349][ T55] hsr_slave_1: left promiscuous mode [ 550.457104][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.465638][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.473902][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.481497][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.491943][ T55] veth1_macvtap: left promiscuous mode [ 550.497454][ T55] veth0_macvtap: left promiscuous mode [ 550.503063][ T55] veth1_vlan: left promiscuous mode [ 550.508400][ T55] veth0_vlan: left promiscuous mode [ 550.590268][ T55] team0 (unregistering): Port device team_slave_1 removed [ 550.601367][ T55] team0 (unregistering): Port device team_slave_0 removed [ 550.632325][T12498] infiniband syz0: ib_query_port failed (-19) [ 551.093612][ T6496] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 552.190795][T26983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 553.300389][ T55] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 554.390906][ T55] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 555.482680][ T6526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 556.593818][T26983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!