last executing test programs: 5m44.446910475s ago: executing program 3 (id=1759): msgsnd(0x0, &(0x7f00000001c0)={0x2, "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"}, 0x303, 0x0) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa87000000000000403b"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 5m44.233001184s ago: executing program 3 (id=1760): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x8000, 0x7b67da7bc4244323, 0x1}}}}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x10) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0xfffffffa, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) r8 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0), &(0x7f0000000140)) io_uring_enter(r8, 0x567, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2}, &(0x7f0000000080)=0x14) 5m43.797275082s ago: executing program 3 (id=1767): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x5, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = getpid() setreuid(0xee00, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x10860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r4], 0x1}, 0x58) 5m43.564339891s ago: executing program 3 (id=1769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x21, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214440, &(0x7f0000000540)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@errors_continue}, {@init_itable}, {@noload}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000980)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000500)='./bus\x00', 0x800, 0x102) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae65ddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff402000000000000006ee6afaaf755a3f6a00400", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400", [0x8000000000]}) write$selinux_create(r2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) symlinkat(&(0x7f0000000480)='./file0/file0\x00', r4, &(0x7f00000000c0)='./file0\x00') r5 = gettid() timer_create(0x1, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0xc84e676dc11b, &(0x7f0000001100)={0x77359400}, 0x1) 5m43.108230949s ago: executing program 3 (id=1773): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) memfd_create(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m42.785096487s ago: executing program 3 (id=1786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 5m42.735363237s ago: executing program 32 (id=1786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 5m42.727856147s ago: executing program 4 (id=1790): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071109d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x6, 0x8000, 0x1000, 0x8, {{0x38, 0x4, 0x2, 0xd, 0xe0, 0x68, 0x0, 0x2, 0x29, 0x0, @broadcast, @multicast2, {[@generic={0x88, 0x3, 't'}, @timestamp={0x44, 0x10, 0x32, 0x0, 0x9, [0xf72, 0x7, 0x6]}, @rr={0x7, 0x27, 0xae, [@multicast2, @broadcast, @empty, @loopback, @remote, @empty, @remote, @multicast2, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x54, 0x8d, 0x1, 0x1, [{@multicast2, 0xb}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x6}, {@broadcast, 0x9eba0f3}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x850}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7f}, {@loopback, 0x4}, {@multicast1, 0xffff}]}, @ssrr={0x89, 0x1f, 0x71, [@broadcast, @rand_addr=0x64010101, @rand_addr=0x2, @empty, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010100]}, @ssrr={0x89, 0x1b, 0xec, [@rand_addr=0x64010101, @remote, @broadcast, @local, @multicast1, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x4800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa0, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8080}, 0x24000010) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x6, 0x2, 0x1000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080)}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) 5m42.477317126s ago: executing program 4 (id=1794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 5m42.413407606s ago: executing program 4 (id=1797): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) close(r0) 5m42.346069125s ago: executing program 4 (id=1800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x21, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1600000000000004000000ff"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x1008}, {&(0x7f0000001580)=""/238, 0xf0}], 0x5, 0x0, 0x353}}], 0x40000000000002e, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214440, &(0x7f00000001c0)={[{@minixdf}, {@discard}, {@errors_remount}, {@nobh}]}, 0xfe, 0x558, &(0x7f0000000980)="$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") r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x800, 0x102) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae65ddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff402000000000000006ee6afaaf755a3f6a00400", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400", [0x8000000000]}) write$selinux_create(r4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0x2) iopl(0x3) setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) symlinkat(&(0x7f0000000480)='./file0/file0\x00', r6, &(0x7f00000000c0)='./file0\x00') gettid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5m42.019347204s ago: executing program 4 (id=1810): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) inotify_add_watch(r2, 0x0, 0x20) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x6000, 0x0, 0x0) 5m41.652189822s ago: executing program 4 (id=1818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280), 0x0) close(r2) 5m41.633362183s ago: executing program 33 (id=1818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280), 0x0) close(r2) 3m52.161914598s ago: executing program 0 (id=3697): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xc, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba6f32}) readv(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}], 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) read(r1, &(0x7f0000000140)=""/193, 0xc1) 3m51.923876117s ago: executing program 1 (id=3698): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071109d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x6, 0x8000, 0x1000, 0x8, {{0x32, 0x4, 0x2, 0xd, 0xc8, 0x68, 0x0, 0x2, 0x29, 0x0, @broadcast, @multicast2, {[@generic={0x88, 0x3, 't'}, @timestamp={0x44, 0x10, 0x32, 0x0, 0x9, [0xf72, 0x7, 0x6]}, @rr={0x7, 0x27, 0xae, [@multicast2, @broadcast, @empty, @loopback, @remote, @empty, @remote, @multicast2, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x54, 0x8d, 0x1, 0x1, [{@multicast2, 0xb}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x6}, {@broadcast, 0x9eba0f3}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x850}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7f}, {@loopback, 0x4}, {@multicast1, 0xffff}]}, @ssrr={0x89, 0x1f, 0x71, [@broadcast, @rand_addr=0x64010101, @rand_addr=0x2, @empty, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010100]}, @ssrr={0x89, 0x3, 0xec}, @ra={0x94, 0x4, 0x1}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x4800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa0, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8080}, 0x24000010) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x6, 0x2, 0x1000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r8}, 0x10) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) 3m51.759739666s ago: executing program 1 (id=3699): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 3m51.696187025s ago: executing program 1 (id=3700): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}], 0x1, 0x40, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) close(r4) 3m51.472402194s ago: executing program 1 (id=3703): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), 0x0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="ed6ec1bd6f8018774ece917d0ebb54dc3e5b9e250b892912352c2a70fab88686fe8eae7d1a6541d04642f0c7a8428f933ae0b4e6615160a42ce9d1041674f8cbe7d1bec2d68912233c29131c4ae0c1df5678b57ee834086a5b6e5c5ee7fbcb773c92b539e8bed624b46b6041753a2c4b63fdc5e74b67d0a1219b4638ba9aa8e724c2ee886f8ddc7dd222024e2c6e8efbad477e7937f3e5d29bd320a2fb10988be169f5", 0xa3}], 0x1}, 0x80) 3m51.275335024s ago: executing program 0 (id=3706): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="16000000000000000800000002"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x28, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xed00}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000400000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x18a}, 0x4010, 0x0, 0xac8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 3m51.273163564s ago: executing program 1 (id=3708): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) 3m51.113893713s ago: executing program 1 (id=3709): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000f00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff018e2b8c16cfa7907aeaba966db698a8f5884196c7978169338c7b3962ef59aae3e406fe80268a3d10bf09774bde3c7371f8b4e4520481c43733e84bab0f920e3b79ea5fd08b1891b0e31ddf812f7af2"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000004) 3m51.113283713s ago: executing program 0 (id=3710): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="16000000000000000800000002"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x28, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xed00}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x8, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x2e]}}, &(0x7f0000000640)=""/156, 0x2b, 0x9c, 0x1, 0x4, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000400000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00 '], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 3m50.912496042s ago: executing program 0 (id=3713): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r1, 0x25, 0x2, @void}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="d7128300000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000008000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb196657b7c25bd6b370809dd3efc162238960fe8a4fe14d3f15433e6d68b4906c2ca6b4d324dc6cb2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x4000000) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 3m50.57762643s ago: executing program 0 (id=3720): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) 3m50.49626917s ago: executing program 0 (id=3722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xa, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 3m36.650607089s ago: executing program 34 (id=3709): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000f00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff018e2b8c16cfa7907aeaba966db698a8f5884196c7978169338c7b3962ef59aae3e406fe80268a3d10bf09774bde3c7371f8b4e4520481c43733e84bab0f920e3b79ea5fd08b1891b0e31ddf812f7af2"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000004) 3m36.147869127s ago: executing program 35 (id=3722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xa, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 47.33905327s ago: executing program 8 (id=6993): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x4000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg(r3, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x2000401d) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) close(r3) close(r4) 46.449914515s ago: executing program 8 (id=7016): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 46.300663205s ago: executing program 8 (id=7020): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000ebffffffb7080000000000007b8af80000f8ffffffb703000008000000b7040000000000008500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x200180, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04200000000000000002000000540004803c0001800a0001006c696d69740000002c0002800c000240000000000000000008000540000000000c00014000000000000000010800044000000001140001800b0001007470726f78790000040002800900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x24048001}, 0x4000000) fcntl$dupfd(r1, 0x406, r2) r8 = msgget(0x1, 0x2b0) msgrcv(r8, 0x0, 0x0, 0x1, 0x2000) msgrcv(r8, 0x0, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010008000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r12}, 0x10) 45.456955981s ago: executing program 8 (id=7032): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000000c0)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@auto_da_alloc}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0x1a0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x81000, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r1 = open(&(0x7f0000000500)='./bus\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 44.981271519s ago: executing program 8 (id=7041): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, 0x0, 0x18}}], 0x1, 0x0, 0x0) 44.116164035s ago: executing program 8 (id=7050): socket(0x2, 0x80805, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='mm_page_alloc\x00', r2}, 0x54) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$inet(0x2, 0x80001, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYRES64=r4], 0x38}}, 0x0) 44.093905225s ago: executing program 36 (id=7050): socket(0x2, 0x80805, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='mm_page_alloc\x00', r2}, 0x54) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$inet(0x2, 0x80001, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYRES64=r4], 0x38}}, 0x0) 2.377337111s ago: executing program 2 (id=7785): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}) 2.35358182s ago: executing program 2 (id=7787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, 0x0, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) setresgid(0xee01, 0x0, 0xffffffffffffffff) 1.798204468s ago: executing program 2 (id=7790): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x4, 0x54}, 0x9c) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0x3, '\x00', 0x0, r4, 0x2, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 861.075194ms ago: executing program 2 (id=7811): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1642, 0x0) openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x62) socket(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r4, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'wg0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x2}, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c900200010000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004fd2feae4a7216e251ff016cd448a55fcdf9623fc16a83777ed231e4e8eb2d9ac906ee34ed4ffe7e347d5440012deacc0ca1af2985c30967067d515625f594dccf4e65c850dc80ce935bbd9cbc2e69461b47834f3003a9c1e9581725a1ec1bb9e8fb7faf3868652e1e9358cbc9beba4cb4c6a98aad5904b9bc58f8cf3242cdc586e12a40787aa444c14331a41c5858a81d27868e1e97d3940e304294014abe3ea20a3728c42f865fc6460e4ead91fe062b93fdd3b6a9f63b317078d4ddec301213"]) 766.354063ms ago: executing program 6 (id=7818): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000001000000000000000000000000000000000f00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 734.120723ms ago: executing program 9 (id=7819): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800031bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 733.532473ms ago: executing program 6 (id=7820): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c000000100003"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) getxattr(0x0, &(0x7f0000000300)=@random={'os2.', '-\x00'}, 0x0, 0x0) 668.222883ms ago: executing program 6 (id=7821): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210001, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7f}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x575, &(0x7f0000000b80)="$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") chdir(0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xe01, 0x0) rename(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x352724ee) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000100)={[{@grpjquota}, {@bh}]}, 0xfe, 0x58b, &(0x7f00000008c0)="$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") symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', r0, &(0x7f0000000bc0)='./file7\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200e2fff8b4d6211b6db180f9e5a8aa0f7fc060", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b714000008000000e458886de35f321c483c980085000000c7c038158a0a47323e858fc768e2e737811da271988992c283f6c5954057df433d284146338754a7e5e006c5280cb6e03962b8a692f816896a06f9834f89c0448ad886ae6d03e263221e8e5e4c4f5ee1e742968cd9292f23ec90ab49524ede5505b530efa2682f09d416cb5fc0beaa7c0a0cfcd9680bd7352a65d5ce06561b43a1ab73a5f690ff2f24cfd87854894f40ae6c99a270344b7f5f3063e6ddd1fd2cfa9aa01ca4573664ba39b69b562aa288696e1206c102f5c310b91986405402e635"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 667.705073ms ago: executing program 9 (id=7822): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000000380)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd71, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb7) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000000c0)={0x6, 0x4, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000180)='wlan1\x00'}) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r7 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r7, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r8, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r7}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r6, 0x0, 0x0, 0xffffffffffffffff}]) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2000}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 651.996672ms ago: executing program 6 (id=7823): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x4, 0x800000, 0x3}) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x400, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x18}}], 0x30, 0x4010}, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000440)={r7, @in={{0x2, 0x4e1f, @broadcast}}, [0xfffffffffffffff9, 0x3, 0x6, 0x3, 0x401, 0x7, 0x0, 0x4, 0x6, 0x2000056d, 0x96, 0x40, 0x81c, 0x4, 0x100]}, &(0x7f0000000100)=0x100) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000300008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000040b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) 641.884263ms ago: executing program 7 (id=7824): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x2, 0x73) syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x1003, 0x10, 0x0, 0x100}, &(0x7f0000000240), &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x3, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x7) memfd_create(&(0x7f0000000000)='$\\:]&-!\x00', 0x6) socket(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000bc0)='\xc0\x87:*\x18\xc1k\xa7\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xde\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10x0}, &(0x7f0000000440)=0x14) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x829a}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x829a}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x19, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4e}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x0, 0x3, 0x0, 0x3, 0xb, 0xfffffffffffffff0, 0xffffffffffffffff}, @printk={@x}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x40, 0x3c, &(0x7f00000003c0)=""/60, 0x40f00, 0x8, '\x00', r2, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x2, 0x0, &(0x7f00000004c0)=[{0x2, 0x3, 0xd, 0xc}, {0x5, 0x5, 0x4, 0x3}], 0x10, 0x6, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x19, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4e}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x0, 0x3, 0x0, 0x3, 0xb, 0xfffffffffffffff0, 0xffffffffffffffff}, @printk={@x}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x40, 0x3c, &(0x7f00000003c0)=""/60, 0x40f00, 0x8, '\x00', r2, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x2, 0x0, &(0x7f00000004c0)=[{0x2, 0x3, 0xd, 0xc}, {0x5, 0x5, 0x4, 0x3}], 0x10, 0x6, @void, @value}, 0x94) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x0, 0x6, 0x7f, 0x1100, 0x1, 0x8ed, '\x00', r2, r3, 0x1, 0x5, 0x3, 0x8, @void, @value, @void, @value}, 0x50) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000640)={0x9, 0x7, 0x9, {0x2686, 0x7}, 0x5, 0x800}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x0) r5 = creat(&(0x7f0000000780)='./file0\x00', 0x8) unshare(0x800) (async) unshare(0x800) bind$netlink(r3, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfc, 0x40000000}, 0xc) bind$inet(r5, &(0x7f0000000800)={0x2, 0x4e20, @loopback}, 0x10) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000840)={r4}) openat$null(0xffffffffffffff9c, &(0x7f0000000880), 0x14600, 0x0) capset(&(0x7f00000008c0)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000900)={0x2, 0x3, 0xfd8, 0x9, 0x5}) r6 = getpgrp(0x0) prlimit64(r6, 0x4, &(0x7f0000000940)={0xc, 0x3}, &(0x7f0000000980)) (async) prlimit64(r6, 0x4, &(0x7f0000000940)={0xc, 0x3}, &(0x7f0000000980)) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) perf_event_open(&(0x7f0000000a40)={0x4, 0x80, 0x0, 0x7, 0x2, 0xfc, 0x0, 0x55, 0x40000, 0x149d28de346feec5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x6, 0x3ff}, 0x10000, 0x1, 0x4, 0x9, 0x0, 0x9ce3, 0x1ff, 0x0, 0xfffffffe, 0x0, 0xc54}, r6, 0xc, r3, 0x1) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000ac0)) (async) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000ac0)) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000b00)={0x5, {{0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x0, @mcast2, 0x5}}]}, 0x110) (async) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000b00)={0x5, {{0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x0, @mcast2, 0x5}}]}, 0x110) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000c40)={0x18, 0x0, {0x3, @random="1b937a63b512", 'syzkaller0\x00'}}) write$selinux_load(r3, &(0x7f0000000c80)={0xf97cff8c, 0x8, 'SE Linux', "1273eda9845ea3117f88e8e422"}, 0x1d) (async) write$selinux_load(r3, &(0x7f0000000c80)={0xf97cff8c, 0x8, 'SE Linux', "1273eda9845ea3117f88e8e422"}, 0x1d) 574.686863ms ago: executing program 6 (id=7827): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/249, 0xf9}], 0x1}, 0x0) close(0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_io_uring_setup(0xe02, &(0x7f0000000140)={0x0, 0x4001003, 0x1000, 0x0, 0x800}, &(0x7f0000000400)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) chmod(0x0, 0x4) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0xfff5) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x2, 0x22b9, 0x0}) 573.185823ms ago: executing program 9 (id=7829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 555.090042ms ago: executing program 7 (id=7830): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000001000000000000000000000000000000000f00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 532.611862ms ago: executing program 7 (id=7831): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, 0x0, &(0x7f0000000600)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/11], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000020850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r5}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = io_uring_setup(0x47ba, &(0x7f00000000c0)={0x0, 0xaa8b, 0x40, 0x0, 0x2b4, 0x0, r0}) io_uring_enter(r7, 0x400, 0x0, 0xf, &(0x7f0000000000), 0xffffff94) r8 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0xe, 0x0, r8, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010101, 0x3}, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00', r9}, 0x18) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 496.773512ms ago: executing program 9 (id=7833): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x1100, 0x4, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x38}}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x66288, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x5d2a}, 0x110800, 0x0, 0x0, 0x3, 0x3, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x1c, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 432.261532ms ago: executing program 5 (id=7834): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26080000000000bf67000000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, 0x0, 0x0, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) 381.906631ms ago: executing program 7 (id=7835): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x4, 0x800000, 0x3}) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x400, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x18}}], 0x30, 0x4010}, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000440)={r7, @in={{0x2, 0x4e1f, @broadcast}}, [0xfffffffffffffff9, 0x3, 0x6, 0x3, 0x401, 0x7, 0x0, 0x4, 0x6, 0x2000056d, 0x96, 0x40, 0x81c, 0x4, 0x100]}, &(0x7f0000000100)=0x100) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000300008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000040b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) 345.281972ms ago: executing program 9 (id=7836): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r3, 0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, 0x0) 324.273812ms ago: executing program 7 (id=7837): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x20, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r0], &(0x7f0000000ac0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0, 0x0, 0x40000040}, 0x18) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x6, 0x24, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfff, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xffff, 0x0, 0x4, 0x0, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) close(r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000780), &(0x7f0000000880)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="0100"], 0x1c}}, 0x0) 323.347292ms ago: executing program 9 (id=7838): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) setregid(r2, r2) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r7 = dup2(r6, r5) quotactl_fd$Q_GETFMT(r6, 0xffffffff80000400, r1, &(0x7f0000000100)) sendmmsg$unix(r7, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001240)="2d930a551c006092a5377baca46fefe0516018f62a8ec5a477e46944fb1cc43e43968daeee03e0ad154cbb9c815baa9b3588cc0d8733039be161500eae8dca68f0de37ca75ff45d04156e4b717c890d7d43e55905465604cd4fcea146b1e14c39add8235637491dceaddaa30bbc2f39c300c3a1118f7a8618c8244c88889bf6b54be33f3ecd9c13fad477675814fb490d3da3af62397ed482e206ea505f236ef"}, {&(0x7f0000001300)="eeddb1c6a64e8c573b339c4bf69f16ec9cc77c6e21bcfc3e0cc471ef87ac572028efb252b52236738222a0a69abeb4dbdf04b935ebdc2555f963588f21789016bfa5c0b37eee0c5adc0feafe3f735b26e39f2010fccba1ffe771d0ab2fd1a1144fcb83b3f208a0ff04ecf4677402b39e76995e071c448cf6df9d945b02c41285e4d05ea883e77704c5aa51ed90bee559cbe5445b325798eb3cc6482800705941f30af2bcccc52879f37f611247dc47de42edb33e5b904dda4163d9ea86"}, {&(0x7f0000000a40)="b2d5b04a72d2d28cdfce57d57168f374d80d29a8ba7c3b413a9e41c050836bd3e0ee1b304381c7b36c68191f90aaa5"}, {&(0x7f00000013c0)="ee7d93490a970651b94e70903380b82e2a8bc64f024cd7dbfe372ca0e3f9a1dc09e54a53d8b2b1dc808fb57cde767d63314a5c258d1c31a49b19a26b3e44b4e89bbc15feaf994b904157691f10cffc390c6b689d356fd7450797767f177261f7497962735ad69383a0f35b8d18df1f7f70fbfc67fc79cadc7883db"}, {&(0x7f00000028c0)="6736c1fe1c1259c61e8ef3d53957980bea40b03c4255b4cea2045389b8eab452a9ba2443dfed0340211b318ab12825c73c88e98363c32c15d938363260ff28d0b7f6adf42ebd21e3e105a1023fdbe69cfb434e46e3930cf97fb153b93be71c5059419b54c2563c"}, {&(0x7f00000014c0)="93951907f6a163dceed6bd0738d8c29548dcf6d94f795a13f1b711a5d1d562fa32820f6fe27072dbc1bebeea2dc2afcee19022aee5c4d41d8f7660c33916b8f6efc2d10a22195d156de5d027fe096e73cf1cc0c2b7ef8f750b92d7de6a56a5ba63076e619e31308ea9db695c74241b9b45d22b445a06f394275499880cda75c97bf7fd1e3d064f13beefc7efcb960a2fce9693717ab4a79bee91b8f9a5083d3bcb002f32e75d571a8876205285dce9bf348e93ee337710a4769b1867aaad32fb937402480073f76a6da232ec48df4f0c1971fd0d4f09665c98e54e04c21487a9e465040114789c3ba9a0fccfbd25cfd56c1605f27a5d35594b6b8a6f"}, {&(0x7f0000002600)="130d557d4e6c0021b7ea1e3c3a5b01c1d9e92453fe61c186a837212d56f2759e0abd494d4f1a43834dd0be7c3a1fc555c40c7a5e574d255d251a1c4f0cc56f2688b868947cdd989985680149324f19e40fcc612bc47ffb2686bd28620c6839a7af331fa02b9597deaba54f139e92d6bebedaf4b2135e7aac1f0b3d2474f37b76d4e9b6625fc412351d1feea49cd5e3b67401a797e018de"}, {&(0x7f00000026c0)="0843a0a17c728abe841271e8f818d8e64ab64615d6add8556d6b6e779b46f2d79d75d0ecd16d2b179eaea4bd2fb11c10de394dd681f33a920af31abb616b41e3d0158cc3db63f0ff74ff16ec6e89d658954d4b7e8cf0ff2cbf2c39687bae5d39c5b35695dbb4c3aaa66e9dfe649ee6958dc03e3e2df0ea9dc54032a115ba45faca0b407a7d1cf2649b4c79c59e4a702c9ae4596bccadd43d1e487620d2393141ff7c9e1d00caf7c64b5545f34869ab6cfeaf5b0545217941f44fb0cd37d934da2a588549d71578a5e5692166e2d7155c7b309ae42bcef08c2af9f0a4f0abcf62b7f5e574f5d0f040e9639483d1566ddeca285237a34a58650b"}, {&(0x7f00000015c0)="992fc4947fb1ddb28ddaa636d2b2b9f976f3503ec93042aa0fef42a77e46c960776d23"}, {&(0x7f00000027c0)="219cba9111e0c3cf0a9fa829f0cd40fae9f4076cb2fd43e208aab0c3d871aa6745284c4b6e318f29"}], 0x0, &(0x7f0000002d00)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @cred, @rights, @rights={{0x0, 0x1, 0x1, [r7, r4, r6, 0xffffffffffffffff]}}], 0x0, 0x488c0}}], 0x40000000000029c, 0x40884) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r7, 0xa08519bcffa46986, 0x0, @val=@netfilter={0x1, 0x0, 0x55e4, 0xf3446b358e96a006}}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x3, 0xc, 0x2, 0x0, 0x9f2, 0x8, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7608b11f, 0x2, @perf_config_ext={0x5, 0xfff}, 0x734, 0xe, 0xe6, 0xfe1fec656014f1d7, 0x1, 0xff, 0x9, 0x0, 0xffff}, r0, 0x0, r4, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(&(0x7f0000000400)=@sg0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='aio\x00', 0x380010, &(0x7f0000000580)='\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kfree\x00', r8, 0x0, 0xd32}, 0x18) io_uring_setup(0x177d, 0x0) syz_io_uring_setup(0x27eb, &(0x7f00000007c0)={0x0, 0x59b9, 0x2, 0x0, 0x18}, &(0x7f00000001c0), &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = dup(r9) fsetxattr$security_selinux(r10, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 285.562271ms ago: executing program 5 (id=7839): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}) 224.299331ms ago: executing program 5 (id=7840): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x2, 0x73) syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x1003, 0x10, 0x0, 0x100}, &(0x7f0000000240), &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x3, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x7) memfd_create(&(0x7f0000000000)='$\\:]&-!\x00', 0x6) socket(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000bc0)='\xc0\x87:*\x18\xc1k\xa7\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xde\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10x0) io_destroy(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="0100"], 0x1c}}, 0x0) 304.98µs ago: executing program 2 (id=7845): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x26, 0xa, 0xa54) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000780)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}], ['\x00']}) 0s ago: executing program 2 (id=7846): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) r4 = syz_io_uring_setup(0x2367, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, 0x0, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0xd) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$ \x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000ffdbdf250000000005001200030000000500220001000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048004) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES16=r9, @ANYBLOB="00012bbd7000ffdbdf2504000000060001000b000000080011000000000005001300cc00000006001b004e2100000800090003000000080018007f00000108001700", @ANYRES32=r10, @ANYBLOB="0c00160080000000000000000800090003000000"], 0x60}, 0x1, 0x0, 0x0, 0x449d1}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0xffffffffffffffff}, 0x18) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r13, 0x8983, &(0x7f0000000280)={0x0, 'xfrm0\x00', {}, 0xfbc8}) writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) kernel console output (not intermixed with test programs): on range 15-33 [ 394.633286][T28060] syz.6.6865[28060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.642253][T28075] SELinux: failed to load policy [ 394.993915][T28128] FAULT_INJECTION: forcing a failure. [ 394.993915][T28128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.007086][T28128] CPU: 0 UID: 0 PID: 28128 Comm: syz.7.6879 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 395.017887][T28128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 395.027983][T28128] Call Trace: [ 395.031281][T28128] [ 395.034237][T28128] dump_stack_lvl+0xf2/0x150 [ 395.038913][T28128] dump_stack+0x15/0x1a [ 395.043130][T28128] should_fail_ex+0x223/0x230 [ 395.047951][T28128] should_fail+0xb/0x10 [ 395.052247][T28128] should_fail_usercopy+0x1a/0x20 [ 395.057317][T28128] _copy_to_user+0x20/0xa0 [ 395.061841][T28128] vt_do_kdgkb_ioctl+0x1ad/0x270 [ 395.067023][T28128] vt_ioctl+0xd4a/0x1810 [ 395.071280][T28128] ? tty_jobctrl_ioctl+0x2ab/0x810 [ 395.076448][T28128] tty_ioctl+0x815/0xbe0 [ 395.080709][T28128] ? __pfx_tty_ioctl+0x10/0x10 [ 395.085540][T28128] __se_sys_ioctl+0xc9/0x140 [ 395.090205][T28128] __x64_sys_ioctl+0x43/0x50 [ 395.095027][T28128] x64_sys_call+0x1690/0x2dc0 [ 395.099715][T28128] do_syscall_64+0xc9/0x1c0 [ 395.104260][T28128] ? clear_bhb_loop+0x55/0xb0 [ 395.108947][T28128] ? clear_bhb_loop+0x55/0xb0 [ 395.113719][T28128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.119638][T28128] RIP: 0033:0x7f5a9a9a5d19 [ 395.124067][T28128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.144046][T28128] RSP: 002b:00007f5a99011038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.152475][T28128] RAX: ffffffffffffffda RBX: 00007f5a9ab95fa0 RCX: 00007f5a9a9a5d19 [ 395.160458][T28128] RDX: 0000000020000600 RSI: 0000000000004b48 RDI: 0000000000000004 [ 395.168537][T28128] RBP: 00007f5a99011090 R08: 0000000000000000 R09: 0000000000000000 [ 395.176611][T28128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.184733][T28128] R13: 0000000000000000 R14: 00007f5a9ab95fa0 R15: 00007fff199a6548 [ 395.192725][T28128] [ 395.392612][T28172] loop8: detected capacity change from 0 to 512 [ 395.426704][T28167] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 395.447179][T28172] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.451083][T28167] SELinux: failed to load policy [ 395.478355][T28172] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.535030][T27756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.597582][T28194] loop7: detected capacity change from 0 to 2048 [ 395.668386][T28197] loop8: detected capacity change from 0 to 2048 [ 395.735067][T28197] loop8: p3 < > p4 < > [ 395.740775][T28197] loop8: partition table partially beyond EOD, truncated [ 395.759452][T28197] loop8: p3 start 4284289 is beyond EOD, truncated [ 395.770051][T28197] syz.8.6885[28197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.860725][T28230] loop8: detected capacity change from 0 to 512 [ 395.919190][T28234] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 395.930344][T28234] SELinux: failed to load policy [ 395.941688][T28230] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.955692][T28230] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.985714][ T29] kauditd_printk_skb: 849 callbacks suppressed [ 395.985731][ T29] audit: type=1326 audit(1734854258.478:28169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28246 comm="syz.2.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 396.031991][T27756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.050782][ T29] audit: type=1326 audit(1734854258.520:28170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28246 comm="syz.2.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e33a04680 code=0x7ffc0000 [ 396.075722][ T29] audit: type=1326 audit(1734854258.520:28171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28246 comm="syz.2.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 396.099339][ T29] audit: type=1326 audit(1734854258.520:28172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28246 comm="syz.2.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 396.124552][ T29] audit: type=1326 audit(1734854258.520:28173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28246 comm="syz.2.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 396.149444][ T29] audit: type=1326 audit(1734854258.520:28174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28246 comm="syz.2.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 396.174455][ T29] audit: type=1326 audit(1734854258.520:28175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28246 comm="syz.2.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 396.199663][ T29] audit: type=1326 audit(1734854258.520:28176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28246 comm="syz.2.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 396.223363][ T29] audit: type=1326 audit(1734854258.520:28177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28246 comm="syz.2.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 396.248362][ T29] audit: type=1326 audit(1734854258.530:28178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28246 comm="syz.2.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 396.283877][T28255] loop8: detected capacity change from 0 to 164 [ 396.295911][T28255] Unable to read rock-ridge attributes [ 396.306241][T28255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.333744][T28255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.353626][T28266] __nla_validate_parse: 11 callbacks suppressed [ 396.353724][T28266] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6906'. [ 396.362945][T28256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6905'. [ 396.378719][T28256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6905'. [ 396.390177][T28256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6905'. [ 396.539997][T28255] Unable to read rock-ridge attributes [ 397.283474][T28325] loop6: detected capacity change from 0 to 2048 [ 397.330597][T28337] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6914'. [ 397.351894][T28325] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 397.367227][T28337] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 397.373020][T28325] SELinux: failed to load policy [ 397.386143][T28337] 0ªX¹¦Dö»: entered allmulticast mode [ 397.454648][T28346] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6918'. [ 397.509764][T28349] loop7: detected capacity change from 0 to 512 [ 397.562759][T28349] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 397.579854][T28349] EXT4-fs (loop7): mount failed [ 397.601184][T28355] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.608437][T28355] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.694126][T28355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.745899][T28355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.083721][T28355] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.093580][T28355] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.103399][T28355] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.113221][T28355] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.304655][T28355] netdevsim netdevsim6 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 398.314551][T28355] netdevsim netdevsim6 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 398.324396][T28355] netdevsim netdevsim6 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 398.334199][T28355] netdevsim netdevsim6 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 398.591047][T28442] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 398.600335][T28442] SELinux: failed to load policy [ 398.632477][T28445] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6929'. [ 398.648929][T28447] loop6: detected capacity change from 0 to 512 [ 398.658366][T28447] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 398.670570][T28449] netlink: '+}[@': attribute type 1 has an invalid length. [ 398.677919][T28449] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 398.698896][T28452] loop7: detected capacity change from 0 to 256 [ 398.728015][T28447] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 398.752718][T28447] EXT4-fs (loop6): 1 truncate cleaned up [ 398.759038][T28447] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.777460][T28447] netlink: 47 bytes leftover after parsing attributes in process `syz.6.6930'. [ 398.825873][T28447] netlink: 192 bytes leftover after parsing attributes in process `syz.6.6930'. [ 398.867339][T20906] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.927360][T28478] loop6: detected capacity change from 0 to 512 [ 398.946268][T28478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.962023][T28478] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 399.017651][T28496] loop8: detected capacity change from 0 to 512 [ 399.047495][T28496] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.055332][T28499] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.6940: corrupted xattr block 33: bad e_name length [ 399.073615][T28496] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 399.083964][T28499] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 399.093103][T28499] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.6940: corrupted xattr block 33: bad e_name length [ 399.108418][T28499] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 399.118425][T28499] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.6940: corrupted xattr block 33: bad e_name length [ 399.133269][T28499] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.6940: corrupted xattr block 33: bad e_name length [ 399.147535][T27756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.160495][T28499] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 399.391043][T28537] loop8: detected capacity change from 0 to 1024 [ 399.453464][T28537] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 399.478327][T28537] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.6953: Invalid block bitmap block 0 in block_group 0 [ 399.506900][T28537] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.6953: Failed to acquire dquot type 0 [ 399.553028][T28537] EXT4-fs error (device loop8): ext4_free_blocks:6589: comm syz.8.6953: Freeing blocks not in datazone - block = 0, count = 4096 [ 399.597497][T28537] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.6953: Invalid inode bitmap blk 0 in block_group 0 [ 399.616558][T28557] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 399.623241][T28557] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 399.630904][T28557] vhci_hcd vhci_hcd.0: Device attached [ 399.637489][ T8015] EXT4-fs error (device loop8): ext4_release_dquot:6961: comm kworker/u8:29: Failed to release dquot type 0 [ 399.697363][T28537] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 399.765867][T28537] EXT4-fs (loop8): 1 orphan inode deleted [ 399.825333][ T2967] vhci_hcd: vhci_device speed not set [ 399.833098][T28537] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.852894][T20906] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.882513][ T2967] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 399.911850][T28537] EXT4-fs error (device loop8): ext4_lookup:1813: inode #15: comm syz.8.6953: iget: bad extra_isize 65535 (inode size 256) [ 399.941756][T28557] infiniband syz2: set down [ 399.946340][T28557] infiniband syz2: added team0 [ 399.967371][T28557] RDS/IB: syz2: added [ 399.973102][T28557] smc: adding ib device syz2 with port count 1 [ 399.980758][T28557] smc: ib device syz2 port 1 has pnetid [ 400.107909][T28630] loop7: detected capacity change from 0 to 2048 [ 400.160949][T28630] loop7: p3 < > p4 < > [ 400.165378][T28630] loop7: partition table partially beyond EOD, truncated [ 400.179087][T28636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.192034][T28630] loop7: p3 start 4284289 is beyond EOD, truncated [ 400.199297][T28636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.239462][T27756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.289031][T28647] loop7: detected capacity change from 0 to 128 [ 400.303920][T28647] vfat: Unknown parameter '0x000000000000000400000000000000000000004' [ 400.400436][T28560] vhci_hcd: connection reset by peer [ 400.406326][ T8008] vhci_hcd: stop threads [ 400.410585][ T8008] vhci_hcd: release socket [ 400.415083][ T8008] vhci_hcd: disconnect device [ 400.533521][T28659] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.540783][T28659] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.624432][T28659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.638378][T28659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.677195][T28659] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.687711][T28659] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.698118][T28659] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.708514][T28659] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.750216][ T29] kauditd_printk_skb: 880 callbacks suppressed [ 400.750235][ T29] audit: type=1326 audit(1734874738.488:29055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.7.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 400.791836][ T29] audit: type=1326 audit(1734874738.499:29056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.7.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 400.815696][ T29] audit: type=1326 audit(1734874738.499:29057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.7.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a9a9a4680 code=0x7ffc0000 [ 400.839557][ T29] audit: type=1326 audit(1734874738.520:29058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.7.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 400.863379][ T29] audit: type=1326 audit(1734874738.520:29059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.7.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 400.887263][ T29] audit: type=1326 audit(1734874738.520:29060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.7.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 400.911026][ T29] audit: type=1326 audit(1734874738.520:29061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.7.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 400.934622][ T29] audit: type=1326 audit(1734874738.520:29062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.7.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 400.958362][ T29] audit: type=1326 audit(1734874738.520:29063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.7.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 400.958457][ T29] audit: type=1326 audit(1734874738.520:29064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.7.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 401.180916][T28746] FAULT_INJECTION: forcing a failure. [ 401.180916][T28746] name failslab, interval 1, probability 0, space 0, times 0 [ 401.193691][T28746] CPU: 0 UID: 0 PID: 28746 Comm: syz.5.6982 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 401.204524][T28746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 401.214613][T28746] Call Trace: [ 401.217973][T28746] [ 401.220914][T28746] dump_stack_lvl+0xf2/0x150 [ 401.225583][T28746] dump_stack+0x15/0x1a [ 401.229776][T28746] should_fail_ex+0x223/0x230 [ 401.234473][T28746] should_failslab+0x8f/0xb0 [ 401.239129][T28746] kmem_cache_alloc_noprof+0x52/0x320 [ 401.244655][T28746] ? alloc_empty_file+0xd0/0x200 [ 401.249612][T28746] ? _raw_spin_unlock+0x26/0x50 [ 401.254487][T28746] alloc_empty_file+0xd0/0x200 [ 401.259304][T28746] alloc_file_pseudo+0xc3/0x140 [ 401.264174][T28746] hugetlb_file_setup+0x290/0x3c0 [ 401.269245][T28746] ksys_mmap_pgoff+0x172/0x330 [ 401.274049][T28746] x64_sys_call+0x1940/0x2dc0 [ 401.278900][T28746] do_syscall_64+0xc9/0x1c0 [ 401.283418][T28746] ? clear_bhb_loop+0x55/0xb0 [ 401.288117][T28746] ? clear_bhb_loop+0x55/0xb0 [ 401.292830][T28746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.298819][T28746] RIP: 0033:0x7f61bf795d19 [ 401.303238][T28746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.322902][T28746] RSP: 002b:00007f61bde01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 401.331370][T28746] RAX: ffffffffffffffda RBX: 00007f61bf985fa0 RCX: 00007f61bf795d19 [ 401.339373][T28746] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000000020000000 [ 401.347360][T28746] RBP: 00007f61bde01090 R08: ffffffffffffffff R09: 0000000000000000 [ 401.355433][T28746] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 401.363415][T28746] R13: 0000000000000000 R14: 00007f61bf985fa0 R15: 00007ffc1cff2608 [ 401.371400][T28746] [ 401.416704][T28745] loop6: detected capacity change from 0 to 2048 [ 401.455416][T28745] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 401.459185][T28754] __nla_validate_parse: 8 callbacks suppressed [ 401.459203][T28754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6985'. [ 401.464818][T28745] SELinux: failed to load policy [ 401.487550][T28754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6985'. [ 401.498729][T28754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6985'. [ 401.631076][T28770] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 401.640396][T28770] SELinux: failed to load policy [ 401.701034][T28781] SELinux: syz.5.6995 (28781) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 401.742248][T28789] loop7: detected capacity change from 0 to 128 [ 401.749322][T28789] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 401.762480][T28789] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 401.813875][T28789] netlink: 136 bytes leftover after parsing attributes in process `syz.7.6997'. [ 401.830568][T28789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6997'. [ 401.987073][T28811] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 402.003518][T28811] SELinux: failed to load policy [ 402.059691][T28821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7002'. [ 402.070113][T28821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7002'. [ 402.132122][T28821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7002'. [ 402.183601][T28833] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 402.215809][T28833] SELinux: failed to load policy [ 402.388786][T28873] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7012'. [ 402.588852][T28914] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7017'. [ 402.616252][T28914] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 402.623538][T28914] IPv6: NLM_F_CREATE should be set when creating new route [ 402.630775][T28914] IPv6: NLM_F_CREATE should be set when creating new route [ 402.672528][T28925] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 402.695630][T28925] SELinux: failed to load policy [ 402.801712][T28947] netlink: 'syz.6.7022': attribute type 6 has an invalid length. [ 402.967774][T28934] bpf_get_probe_write_proto: 5 callbacks suppressed [ 402.967796][T28934] syz.6.7022[28934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.982571][T28934] syz.6.7022[28934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.012165][T28934] syz.6.7022[28934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.034114][T28934] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28934 comm=syz.6.7022 [ 403.061015][T28934] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28934 comm=syz.6.7022 [ 403.522735][T29011] loop8: detected capacity change from 0 to 512 [ 403.545853][T29011] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 403.667002][T29011] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 403.698781][T29011] System zones: 1-12 [ 403.738105][T29011] EXT4-fs (loop8): 1 truncate cleaned up [ 403.756826][T29011] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.776700][T29061] team0: Device ipvlan2 failed to register rx_handler [ 403.811791][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 403.831053][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 403.837767][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 403.844260][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 403.845040][T29011] loop8: detected capacity change from 512 to 64 [ 403.850760][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 403.863420][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 403.871809][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 403.880354][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 403.888276][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 403.896450][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 403.926444][T29075] SELinux: syz.6.7037 (29075) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 404.000912][T27756] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 404.020736][T27756] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 404.036002][T27756] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 404.036206][T27756] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 404.036436][T27756] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 404.036730][T27756] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 404.036996][T27756] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 404.037283][T27756] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 404.037480][T27756] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 404.037676][T27756] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 404.278848][T27756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.552959][ T8006] bridge_slave_1: left allmulticast mode [ 404.552981][ T8006] bridge_slave_1: left promiscuous mode [ 404.553075][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.554221][ T8006] bridge_slave_0: left allmulticast mode [ 404.554240][ T8006] bridge_slave_0: left promiscuous mode [ 404.554321][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.699590][ T8006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.717172][ T8006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.723182][ T8006] bond0 (unregistering): Released all slaves [ 404.789378][ T2967] usb 11-1: enqueue for inactive port 0 [ 404.789404][ T2967] usb 11-1: enqueue for inactive port 0 [ 404.854249][ T2967] vhci_hcd: vhci_device speed not set [ 404.870387][ T8006] hsr_slave_0: left promiscuous mode [ 404.870902][ T8006] hsr_slave_1: left promiscuous mode [ 404.871844][ T8006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.872328][ T8006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.989792][ T8006] team0 (unregistering): Port device team_slave_1 removed [ 404.997908][ T8006] team0 (unregistering): Port device team_slave_0 removed [ 405.157678][T29144] SELinux: syz.5.7055 (29144) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 405.443886][T29117] chnl_net:caif_netlink_parms(): no params data found [ 405.648943][ T29] kauditd_printk_skb: 664 callbacks suppressed [ 405.648963][ T29] audit: type=1326 audit(1734899313.630:29729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29195 comm="syz.2.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 405.699787][ T29] audit: type=1326 audit(1734899313.630:29730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29195 comm="syz.2.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 405.723503][ T29] audit: type=1326 audit(1734899313.641:29731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29195 comm="syz.2.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 405.747542][ T29] audit: type=1326 audit(1734899313.641:29732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29195 comm="syz.2.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 405.771253][ T29] audit: type=1326 audit(1734899313.641:29733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29195 comm="syz.2.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 405.795541][ T29] audit: type=1326 audit(1734899313.641:29734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29195 comm="syz.2.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 405.819299][ T29] audit: type=1326 audit(1734899313.641:29735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29195 comm="syz.2.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 405.843246][ T29] audit: type=1326 audit(1734899313.641:29736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29195 comm="syz.2.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 405.888044][T29117] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.889061][ T29] audit: type=1326 audit(1734899313.840:29737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29222 comm="syz.6.7063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d539f5d19 code=0x7ffc0000 [ 405.896729][T29117] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.918915][ T29] audit: type=1326 audit(1734899313.840:29738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29222 comm="syz.6.7063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d539f5d19 code=0x7ffc0000 [ 405.954263][T29117] bridge_slave_0: entered allmulticast mode [ 405.965198][T29117] bridge_slave_0: entered promiscuous mode [ 406.006517][T29117] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.013692][T29117] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.056177][T29117] bridge_slave_1: entered allmulticast mode [ 406.063553][T29117] bridge_slave_1: entered promiscuous mode [ 406.382382][T29117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.507042][T29117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.545658][T29236] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 406.606712][T29236] SELinux: failed to load policy [ 406.640718][T29117] team0: Port device team_slave_0 added [ 406.689960][T29117] team0: Port device team_slave_1 added [ 406.738719][T29117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.747084][T29117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.774386][T29117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.790666][T29117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.797715][T29117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.823669][T29117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.859168][T29117] hsr_slave_0: entered promiscuous mode [ 406.866784][T29117] hsr_slave_1: entered promiscuous mode [ 406.872908][T29117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.881957][T29117] Cannot create hsr debugfs directory [ 407.002171][T29284] __nla_validate_parse: 5 callbacks suppressed [ 407.002196][T29284] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7072'. [ 407.020374][T29117] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 407.037001][T29117] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 407.047160][T29117] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 407.065169][T29117] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 407.128721][T29117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.140676][T29117] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.177962][ T8012] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.185124][ T8012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.218037][ T8012] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.225328][ T8012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.934629][T29117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.042747][T29360] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 408.084823][T29360] SELinux: failed to load policy [ 408.135873][T29375] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7082'. [ 408.241732][T29117] veth0_vlan: entered promiscuous mode [ 408.253608][T29117] veth1_vlan: entered promiscuous mode [ 408.278782][T29117] veth0_macvtap: entered promiscuous mode [ 408.288223][T29117] veth1_macvtap: entered promiscuous mode [ 408.306886][T29117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.317501][T29117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.348588][T29117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.365658][T29117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.376258][T29117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.396379][T29117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.409258][T29117] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.418090][T29117] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.427037][T29117] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.432575][T29395] loop6: detected capacity change from 0 to 512 [ 408.435832][T29117] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.468942][T29395] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 408.492634][T29395] EXT4-fs (loop6): mount failed [ 408.533990][T29406] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7051'. [ 408.534016][T29406] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7051'. [ 408.534086][T29406] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7051'. [ 408.589091][T29408] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 408.603623][T29408] SELinux: failed to load policy [ 409.089269][T29420] SELinux: syz.7.7093 (29420) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 409.120487][T29416] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 409.161516][T29416] SELinux: failed to load policy [ 409.403091][T29437] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7100'. [ 409.412221][T29437] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7100'. [ 409.421719][T29437] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7100'. [ 409.460298][T29439] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 409.470242][T29439] SELinux: failed to load policy [ 410.117616][T29468] loop7: detected capacity change from 0 to 512 [ 410.212129][T29468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.292879][T29468] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 410.467942][ T29] kauditd_printk_skb: 563 callbacks suppressed [ 410.467957][ T29] audit: type=1326 audit(1734911603.681:30301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 410.542587][T29522] SELinux: syz.5.7113 (29522) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 410.566657][ T29] audit: type=1326 audit(1734911603.723:30302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 410.572340][T27346] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.590291][ T29] audit: type=1326 audit(1734911603.723:30303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 410.590332][ T29] audit: type=1326 audit(1734911603.723:30304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 410.590464][ T29] audit: type=1326 audit(1734911603.723:30305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 410.590503][ T29] audit: type=1326 audit(1734911603.723:30306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 410.590537][ T29] audit: type=1326 audit(1734911603.723:30307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 410.590618][ T29] audit: type=1326 audit(1734915698.734:30308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 410.590653][ T29] audit: type=1326 audit(1734915698.734:30309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 410.590691][ T29] audit: type=1326 audit(1734915698.734:30310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 410.975449][T29546] netlink: 132 bytes leftover after parsing attributes in process `syz.9.7114'. [ 411.413840][T29582] loop6: detected capacity change from 0 to 2048 [ 411.554318][T29582] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 411.628568][T29582] SELinux: failed to load policy [ 411.892363][T29597] SELinux: syz.5.7125 (29597) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 412.164065][T29617] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7130'. [ 412.173284][T29617] netem: unknown loss type 13 [ 412.178094][T29617] netem: change failed [ 412.222285][T29617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7130'. [ 412.240751][T29617] (unnamed net_device) (uninitialized): option mode: invalid value (14) [ 412.269136][T29626] team0: Device ipvlan2 failed to register rx_handler [ 412.434188][T29646] netlink: 132 bytes leftover after parsing attributes in process `syz.9.7136'. [ 412.473285][T29652] loop7: detected capacity change from 0 to 1024 [ 412.507345][T29645] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 412.527111][T29652] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.531358][T29645] SELinux: failed to load policy [ 412.623215][T29652] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2793: inode #14: comm +}[@: corrupted in-inode xattr: bad magic number in in-inode xattr [ 412.645593][T29652] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #14: comm +}[@: attempt to clear invalid blocks 1886221359 len 1 [ 412.844807][T29720] SELinux: syz.5.7143 (29720) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 412.891802][T27346] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.948649][T29733] loop7: detected capacity change from 0 to 512 [ 412.956798][T29733] EXT4-fs: inline encryption not supported [ 413.004967][T29741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7150'. [ 413.018228][T29733] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.031157][T29733] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 413.048146][T29733] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7148'. [ 413.083729][T29741] team0 (unregistering): Port device team_slave_0 removed [ 413.097500][T29746] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 413.110220][T29741] team0 (unregistering): Port device team_slave_1 removed [ 413.121717][T29746] SELinux: failed to load policy [ 413.153979][T27346] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.413594][T29776] SELinux: syz.9.7161 (29776) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 413.835517][T29842] loop9: detected capacity change from 0 to 512 [ 413.899606][T29842] EXT4-fs warning (device loop9): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 413.930450][T29860] FAULT_INJECTION: forcing a failure. [ 413.930450][T29860] name failslab, interval 1, probability 0, space 0, times 0 [ 413.943211][T29860] CPU: 1 UID: 0 PID: 29860 Comm: syz.2.7177 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 413.954064][T29860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 413.964225][T29860] Call Trace: [ 413.967516][T29860] [ 413.970508][T29860] dump_stack_lvl+0xf2/0x150 [ 413.975130][T29860] dump_stack+0x15/0x1a [ 413.979372][T29860] should_fail_ex+0x223/0x230 [ 413.984107][T29860] should_failslab+0x8f/0xb0 [ 413.988721][T29860] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 413.995073][T29860] ? security_netlbl_sid_to_secattr+0xc1/0x160 [ 414.001281][T29860] kstrdup+0x38/0x80 [ 414.005195][T29860] security_netlbl_sid_to_secattr+0xc1/0x160 [ 414.011307][T29860] selinux_netlbl_sock_genattr+0xa3/0x260 [ 414.017042][T29860] selinux_netlbl_socket_post_create+0x69/0x100 [ 414.023297][T29860] selinux_mptcp_add_subflow+0xb7/0xd0 [ 414.028770][T29860] security_mptcp_add_subflow+0x3d/0x80 [ 414.034339][T29860] mptcp_subflow_create_socket+0xe8/0x710 [ 414.040098][T29860] __mptcp_nmpc_sk+0xb4/0x3c0 [ 414.044848][T29860] mptcp_listen+0xbb/0x570 [ 414.049278][T29860] __x64_sys_listen+0x109/0x160 [ 414.054208][T29860] x64_sys_call+0x2630/0x2dc0 [ 414.058958][T29860] do_syscall_64+0xc9/0x1c0 [ 414.063542][T29860] ? clear_bhb_loop+0x55/0xb0 [ 414.068231][T29860] ? clear_bhb_loop+0x55/0xb0 [ 414.072918][T29860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.078910][T29860] RIP: 0033:0x7f2e33a05d19 [ 414.083330][T29860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.102985][T29860] RSP: 002b:00007f2e32077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 414.111485][T29860] RAX: ffffffffffffffda RBX: 00007f2e33bf5fa0 RCX: 00007f2e33a05d19 [ 414.119464][T29860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 414.128107][T29860] RBP: 00007f2e32077090 R08: 0000000000000000 R09: 0000000000000000 [ 414.136193][T29860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.144174][T29860] R13: 0000000000000000 R14: 00007f2e33bf5fa0 R15: 00007ffcf7f811a8 [ 414.152211][T29860] [ 414.172087][T29842] EXT4-fs (loop9): mount failed [ 414.719686][T29910] team0: Device ipvlan2 failed to register rx_handler [ 415.236189][T29939] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7189'. [ 415.246893][T29939] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7189'. [ 415.255885][ T29] kauditd_printk_skb: 734 callbacks suppressed [ 415.255903][ T29] audit: type=1326 audit(1734927988.689:31044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29938 comm="syz.2.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 415.273073][T29939] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7189'. [ 415.288673][ T29] audit: type=1326 audit(1734927988.689:31045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29938 comm="syz.2.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 415.337452][ T29] audit: type=1326 audit(1734927988.710:31046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.5.7192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bf795d19 code=0x7ffc0000 [ 415.361378][ T29] audit: type=1326 audit(1734927988.710:31047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.5.7192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bf795d19 code=0x7ffc0000 [ 415.384997][ T29] audit: type=1326 audit(1734927988.710:31048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.5.7192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f61bf795d19 code=0x7ffc0000 [ 415.389973][T29955] SELinux: syz.5.7193 (29955) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 415.408680][ T29] audit: type=1326 audit(1734927988.710:31049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.5.7192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bf795d19 code=0x7ffc0000 [ 415.448761][ T29] audit: type=1326 audit(1734927988.783:31050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29936 comm="syz.7.7189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 415.472473][ T29] audit: type=1326 audit(1734927988.783:31051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29936 comm="syz.7.7189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 415.529788][ T29] audit: type=1326 audit(1734927988.888:31052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29956 comm="syz.7.7196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 415.555096][ T29] audit: type=1326 audit(1734927988.888:31053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29956 comm="syz.7.7196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 415.563847][T29964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7200'. [ 415.587861][T29964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7200'. [ 415.726186][T29972] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.734516][T29972] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.742782][T29972] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.751053][T29972] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.762184][T29972] vxlan0: entered promiscuous mode [ 415.767367][T29972] vxlan0: entered allmulticast mode [ 416.158548][T30060] netem: unknown loss type 13 [ 416.164772][T30060] netem: change failed [ 416.175787][T30060] (unnamed net_device) (uninitialized): option mode: invalid value (14) [ 416.357404][T30082] SELinux: syz.9.7219 (30082) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 416.388807][T30085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.397354][T30085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.656056][T30102] loop9: detected capacity change from 0 to 512 [ 416.693617][T30105] bridge0: port 3(team0) entered disabled state [ 416.700067][T30105] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.707372][T30105] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.721493][T30102] EXT4-fs warning (device loop9): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 416.739270][T30102] EXT4-fs (loop9): mount failed [ 416.996649][T30105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.130301][T30105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.649265][T30105] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.658389][T30105] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.667516][T30105] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.676457][T30105] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.748313][T30187] __nla_validate_parse: 4 callbacks suppressed [ 417.748330][T30187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7229'. [ 417.759660][T30181] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7229'. [ 417.775298][T30181] netem: unknown loss type 13 [ 417.780014][T30181] netem: change failed [ 417.785744][T30187] (unnamed net_device) (uninitialized): option mode: invalid value (14) [ 417.830566][T30193] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7231'. [ 417.839656][T30193] netem: unknown loss type 13 [ 417.844507][T30193] netem: change failed [ 417.852622][T30193] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7231'. [ 417.868405][T30193] (unnamed net_device) (uninitialized): option mode: invalid value (14) [ 417.943829][T30206] SELinux: syz.7.7235 (30206) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 418.237188][T30212] SELinux: Context system_u:object_r:tty_device_t:s0 is not valid (left unmapped). [ 418.557169][T30223] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.567031][T30223] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.576905][T30223] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.587003][T30223] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.846571][T30235] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7245'. [ 418.857019][T30235] netem: unknown loss type 13 [ 418.861773][T30235] netem: change failed [ 419.019288][T30256] SELinux: policydb version 0 does not match my version range 15-33 [ 419.027545][T30256] SELinux: failed to load policy [ 419.116807][T30261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7254'. [ 419.125801][T30261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7254'. [ 419.135625][T30261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7254'. [ 419.205896][T30269] SELinux: syz.2.7258 (30269) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 419.287349][T30276] IPv6: NLM_F_CREATE should be specified when creating new route [ 419.404071][T30284] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 419.414706][T30284] SELinux: failed to load policy [ 419.463717][T30292] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7268'. [ 419.472670][T30292] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7268'. [ 419.523458][T30296] netem: unknown loss type 13 [ 419.528424][T30296] netem: change failed [ 419.607009][T30308] team0: Device ipvlan2 failed to register rx_handler [ 419.864095][T30346] team0: Device ipvlan2 failed to register rx_handler [ 420.025990][T30366] FAULT_INJECTION: forcing a failure. [ 420.025990][T30366] name failslab, interval 1, probability 0, space 0, times 0 [ 420.038738][T30366] CPU: 0 UID: 0 PID: 30366 Comm: +}[@ Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 420.049021][T30366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 420.059191][T30366] Call Trace: [ 420.062525][T30366] [ 420.065468][T30366] dump_stack_lvl+0xf2/0x150 [ 420.070093][T30366] dump_stack+0x15/0x1a [ 420.074278][T30366] should_fail_ex+0x223/0x230 [ 420.079104][T30366] should_failslab+0x8f/0xb0 [ 420.083721][T30366] __kmalloc_node_noprof+0xad/0x410 [ 420.088941][T30366] ? qdisc_alloc+0x65/0x450 [ 420.093464][T30366] qdisc_alloc+0x65/0x450 [ 420.097937][T30366] qdisc_create+0xe5/0xae0 [ 420.102480][T30366] ? __nla_parse+0x40/0x60 [ 420.106972][T30366] tc_modify_qdisc+0x65f/0x1050 [ 420.111855][T30366] ? ns_capable+0x7d/0xb0 [ 420.116274][T30366] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 420.121633][T30366] rtnetlink_rcv_msg+0x6aa/0x710 [ 420.126623][T30366] ? avc_has_perm_noaudit+0x1cc/0x210 [ 420.132018][T30366] netlink_rcv_skb+0x12c/0x230 [ 420.136922][T30366] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 420.142452][T30366] rtnetlink_rcv+0x1c/0x30 [ 420.146956][T30366] netlink_unicast+0x599/0x670 [ 420.151734][T30366] netlink_sendmsg+0x5cc/0x6e0 [ 420.156661][T30366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.161998][T30366] __sock_sendmsg+0x140/0x180 [ 420.166753][T30366] ____sys_sendmsg+0x312/0x410 [ 420.171553][T30366] __sys_sendmsg+0x19d/0x230 [ 420.176281][T30366] __x64_sys_sendmsg+0x46/0x50 [ 420.181160][T30366] x64_sys_call+0x2734/0x2dc0 [ 420.185889][T30366] do_syscall_64+0xc9/0x1c0 [ 420.190429][T30366] ? clear_bhb_loop+0x55/0xb0 [ 420.195182][T30366] ? clear_bhb_loop+0x55/0xb0 [ 420.199900][T30366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.205908][T30366] RIP: 0033:0x7f2e33a05d19 [ 420.210415][T30366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.230138][T30366] RSP: 002b:00007f2e32077038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.238592][T30366] RAX: ffffffffffffffda RBX: 00007f2e33bf5fa0 RCX: 00007f2e33a05d19 [ 420.246638][T30366] RDX: 0000000020000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 420.254624][T30366] RBP: 00007f2e32077090 R08: 0000000000000000 R09: 0000000000000000 [ 420.262646][T30366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.270627][T30366] R13: 0000000000000000 R14: 00007f2e33bf5fa0 R15: 00007ffcf7f811a8 [ 420.278616][T30366] [ 420.288772][ T29] kauditd_printk_skb: 973 callbacks suppressed [ 420.288789][ T29] audit: type=1400 audit(1734948468.997:32026): avc: denied { sqpoll } for pid=30353 comm="syz.6.7293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 420.321049][ T29] audit: type=1326 audit(1734948469.028:32027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30371 comm="syz.2.7301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 420.344830][ T29] audit: type=1326 audit(1734948469.028:32028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30371 comm="syz.2.7301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 420.369938][ T29] audit: type=1400 audit(1734948469.028:32029): avc: denied { relabelfrom } for pid=30353 comm="syz.6.7293" name="NETLINK" dev="sockfs" ino=73801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 420.394756][ T29] audit: type=1400 audit(1734948469.028:32030): avc: denied { relabelto } for pid=30353 comm="syz.6.7293" name="NETLINK" dev="sockfs" ino=73801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 420.420621][ T29] audit: type=1326 audit(1734948469.070:32031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30371 comm="syz.2.7301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 420.444459][ T29] audit: type=1326 audit(1734948469.070:32032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30371 comm="syz.2.7301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 420.468133][ T29] audit: type=1326 audit(1734948469.070:32033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30371 comm="syz.2.7301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 420.492092][ T29] audit: type=1326 audit(1734948469.070:32034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30371 comm="syz.2.7301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 420.516059][ T29] audit: type=1326 audit(1734948469.070:32035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30371 comm="syz.2.7301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 420.687638][T30396] team0: Device ipvlan2 failed to register rx_handler [ 420.699927][T30398] netem: unknown loss type 13 [ 420.704682][T30398] netem: change failed [ 421.011270][T30422] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.018505][T30422] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.108089][T30422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.122585][T30422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.160160][T30422] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.169323][T30422] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.178436][T30422] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.187451][T30422] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.204608][T30432] team0: Device ipvlan2 failed to register rx_handler [ 421.231673][T30452] bridge_slave_1: left allmulticast mode [ 421.237407][T30452] bridge_slave_1: left promiscuous mode [ 421.243240][T30452] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.259330][T30452] bridge1: port 1(bridge_slave_1) entered blocking state [ 421.266456][T30452] bridge1: port 1(bridge_slave_1) entered disabled state [ 421.290485][T30452] bridge_slave_1: entered allmulticast mode [ 421.297107][T30452] bridge_slave_1: entered promiscuous mode [ 421.556924][T30484] netem: unknown loss type 13 [ 421.561664][T30484] netem: change failed [ 421.614981][T30491] syz.2.7348[30491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.615092][T30491] syz.2.7348[30491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.627837][T30493] IPVS: length: 157 != 8 [ 421.641122][T30491] syz.2.7348[30491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.982559][T30527] SELinux: syz.6.7362 (30527) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 422.011781][T30527] IPv6: NLM_F_CREATE should be specified when creating new route [ 422.474080][T30577] team0: Device ipvlan2 failed to register rx_handler [ 422.575745][T30589] IPv6: NLM_F_CREATE should be specified when creating new route [ 422.589027][T30589] FAULT_INJECTION: forcing a failure. [ 422.589027][T30589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.591171][T30591] syz.6.7386[30591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.603574][T30589] CPU: 1 UID: 0 PID: 30589 Comm: syz.7.7385 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 422.604536][T30591] syz.6.7386[30591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.614969][T30589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 422.614990][T30589] Call Trace: [ 422.614999][T30589] [ 422.615009][T30589] dump_stack_lvl+0xf2/0x150 [ 422.615053][T30589] dump_stack+0x15/0x1a [ 422.626653][T30591] syz.6.7386[30591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.637298][T30589] should_fail_ex+0x223/0x230 [ 422.637340][T30589] should_fail+0xb/0x10 [ 422.683057][T30589] should_fail_usercopy+0x1a/0x20 [ 422.688186][T30589] _copy_to_user+0x20/0xa0 [ 422.692654][T30589] simple_read_from_buffer+0xa0/0x110 [ 422.698068][T30589] proc_fail_nth_read+0xf9/0x140 [ 422.703068][T30589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 422.708653][T30589] vfs_read+0x1a2/0x700 [ 422.712955][T30589] ? __rcu_read_unlock+0x4e/0x70 [ 422.718005][T30589] ? __fget_files+0x17c/0x1c0 [ 422.722756][T30589] ksys_read+0xe8/0x1b0 [ 422.726991][T30589] __x64_sys_read+0x42/0x50 [ 422.731530][T30589] x64_sys_call+0x2874/0x2dc0 [ 422.736222][T30589] do_syscall_64+0xc9/0x1c0 [ 422.740730][T30589] ? clear_bhb_loop+0x55/0xb0 [ 422.745418][T30589] ? clear_bhb_loop+0x55/0xb0 [ 422.750156][T30589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.756409][T30589] RIP: 0033:0x7f5a9a9a472c [ 422.760845][T30589] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 422.780585][T30589] RSP: 002b:00007f5a99011030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 422.789006][T30589] RAX: ffffffffffffffda RBX: 00007f5a9ab95fa0 RCX: 00007f5a9a9a472c [ 422.797113][T30589] RDX: 000000000000000f RSI: 00007f5a990110a0 RDI: 0000000000000007 [ 422.805088][T30589] RBP: 00007f5a99011090 R08: 0000000000000000 R09: 0000000000000000 [ 422.813079][T30589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 422.821227][T30589] R13: 0000000000000000 R14: 00007f5a9ab95fa0 R15: 00007fff199a6548 [ 422.829276][T30589] [ 422.872018][T30603] __nla_validate_parse: 31 callbacks suppressed [ 422.872033][T30603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7391'. [ 422.887423][T30603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7391'. [ 422.896521][T30603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7391'. [ 422.926815][T30605] xt_cluster: node mask cannot exceed total number of nodes [ 423.005962][T30611] team0: Device ipvlan2 failed to register rx_handler [ 423.207534][T30629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7402'. [ 423.217953][T30629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7402'. [ 423.228724][T30629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7402'. [ 423.642645][T30648] team0: Device ipvlan2 failed to register rx_handler [ 424.026889][T30667] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 424.041774][T30667] SELinux: failed to load policy [ 424.168150][T30681] team0: Device ipvlan2 failed to register rx_handler [ 424.738489][T30700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7429'. [ 424.845143][T30702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7430'. [ 425.064005][ T29] kauditd_printk_skb: 1311 callbacks suppressed [ 425.064088][ T29] audit: type=1326 audit(2000028667.812:33347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.6.7435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d539f5d19 code=0x7ffc0000 [ 425.114016][T30719] team0: Device ipvlan2 failed to register rx_handler [ 425.147338][ T29] audit: type=1326 audit(2000028667.843:33348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.6.7435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d539f5d19 code=0x7ffc0000 [ 425.172557][ T29] audit: type=1326 audit(2000028667.843:33349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.6.7435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d539f5d19 code=0x7ffc0000 [ 425.197721][ T29] audit: type=1326 audit(2000028667.843:33350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.6.7435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d539f5d19 code=0x7ffc0000 [ 425.222635][ T29] audit: type=1326 audit(2000028667.843:33351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.6.7435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d539f5d19 code=0x7ffc0000 [ 425.247613][ T29] audit: type=1326 audit(2000028667.843:33352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.6.7435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d539f5d19 code=0x7ffc0000 [ 425.272814][ T29] audit: type=1326 audit(2000028667.843:33353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.6.7435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d539f5d19 code=0x7ffc0000 [ 425.297868][ T29] audit: type=1326 audit(2000028667.843:33354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.6.7435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f6d539f5d19 code=0x7ffc0000 [ 425.322892][ T29] audit: type=1326 audit(2000032762.859:33355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.6.7435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d539f5d19 code=0x7ffc0000 [ 425.347967][ T29] audit: type=1326 audit(2000032762.859:33356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.6.7435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d539f5d19 code=0x7ffc0000 [ 425.445010][T30724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7436'. [ 425.462848][T30724] IPVS: Error joining to the multicast group [ 425.658156][T30728] netlink: 'syz.7.7437': attribute type 4 has an invalid length. [ 425.858243][T30745] team0: Device ipvlan2 failed to register rx_handler [ 426.034877][T30763] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 426.045645][T30763] SELinux: failed to load policy [ 426.138741][T30780] syz_tun: entered promiscuous mode [ 426.145618][T30781] ucma_write: process 681 (syz.2.7458) changed security contexts after opening file descriptor, this is not allowed. [ 426.161064][T30780] batadv_slave_1: entered promiscuous mode [ 426.168345][T30780] hsr1: entered allmulticast mode [ 426.173652][T30780] syz_tun: entered allmulticast mode [ 426.179017][T30780] batadv_slave_1: entered allmulticast mode [ 426.274819][T30788] x_tables: duplicate underflow at hook 2 [ 426.942968][T30783] syz.9.7462 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 426.955466][T30783] CPU: 1 UID: 0 PID: 30783 Comm: syz.9.7462 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 426.966272][T30783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 426.976412][T30783] Call Trace: [ 426.979736][T30783] [ 426.982725][T30783] dump_stack_lvl+0xf2/0x150 [ 426.987345][T30783] dump_stack+0x15/0x1a [ 426.991545][T30783] dump_header+0x83/0x2d0 [ 426.995929][T30783] oom_kill_process+0x341/0x4c0 [ 427.000890][T30783] out_of_memory+0x9af/0xbe0 [ 427.005493][T30783] ? css_next_descendant_pre+0x11c/0x140 [ 427.011155][T30783] mem_cgroup_out_of_memory+0x13e/0x190 [ 427.016734][T30783] try_charge_memcg+0x508/0x7f0 [ 427.021603][T30783] charge_memcg+0x50/0xc0 [ 427.026012][T30783] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 427.032026][T30783] __read_swap_cache_async+0x236/0x480 [ 427.037514][T30783] swap_cluster_readahead+0x279/0x3f0 [ 427.042963][T30783] swapin_readahead+0xe4/0x6f0 [ 427.047751][T30783] ? __rcu_read_unlock+0x34/0x70 [ 427.052746][T30783] ? swap_cache_get_folio+0x77/0x210 [ 427.058135][T30783] do_swap_page+0x31b/0x2550 [ 427.062742][T30783] ? __rcu_read_lock+0x36/0x50 [ 427.067743][T30783] ? __pfx_default_wake_function+0x10/0x10 [ 427.073652][T30783] handle_mm_fault+0x8e4/0x2ac0 [ 427.078575][T30783] exc_page_fault+0x3b9/0x650 [ 427.083328][T30783] asm_exc_page_fault+0x26/0x30 [ 427.088286][T30783] RIP: 0033:0x7faf45f58573 [ 427.092787][T30783] Code: 3a 08 00 48 8d 3d 36 3a 08 00 e8 28 49 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d be 3f 19 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 427.112410][T30783] RSP: 002b:00007fff6899e598 EFLAGS: 00010293 [ 427.118504][T30783] RAX: 00000000fffffffa RBX: 00007faf46115fa0 RCX: 0000000000000000 [ 427.126627][T30783] RDX: 00007fff6899e5b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.134612][T30783] RBP: 00007faf46117ba0 R08: 000000001b6a683c R09: 7fffffffffffffff [ 427.142595][T30783] R10: 0000000000000000 R11: 0000000000000010 R12: 000000000006c4b0 [ 427.150575][T30783] R13: 00007faf46116080 R14: 0000000000000032 R15: ffffffffffffffff [ 427.158593][T30783] [ 427.163098][T30783] memory: usage 307200kB, limit 307200kB, failcnt 83 [ 427.171080][T30783] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 427.180385][T30783] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 427.189062][T30783] Memory cgroup stats for /syz9: [ 427.189562][T30783] cache 0 [ 427.198945][T30783] rss 4096 [ 427.203373][T30783] shmem 0 [ 427.206328][T30783] mapped_file 0 [ 427.209902][T30783] dirty 0 [ 427.214331][T30783] writeback 12288 [ 427.218025][T30783] workingset_refault_anon 5 [ 427.223977][T30783] workingset_refault_file 0 [ 427.228509][T30783] swap 188416 [ 427.233544][T30783] swapcached 16384 [ 427.237358][T30783] pgpgin 63634 [ 427.242244][T30783] pgpgout 63630 [ 427.245831][T30783] pgfault 15688 [ 427.250748][T30783] pgmajfault 3 [ 427.254151][T30783] inactive_anon 0 [ 427.257855][T30783] active_anon 16384 [ 427.263181][T30783] inactive_file 0 [ 427.266827][T30783] active_file 0 [ 427.271749][T30783] unevictable 0 [ 427.275280][T30783] hierarchical_memory_limit 314572800 [ 427.282095][T30783] hierarchical_memsw_limit 9223372036854771712 [ 427.289389][T30783] total_cache 0 [ 427.292851][T30783] total_rss 4096 [ 427.296386][T30783] total_shmem 0 [ 427.300948][T30783] total_mapped_file 0 [ 427.304955][T30783] total_dirty 0 [ 427.309758][T30783] total_writeback 12288 [ 427.314422][T30783] total_workingset_refault_anon 5 [ 427.320563][T30783] total_workingset_refault_file 0 [ 427.326773][T30783] total_swap 188416 [ 427.330640][T30783] total_swapcached 16384 [ 427.334893][T30783] total_pgpgin 63634 [ 427.340006][T30783] total_pgpgout 63630 [ 427.343998][T30783] total_pgfault 15688 [ 427.349124][T30783] total_pgmajfault 3 [ 427.353148][T30783] total_inactive_anon 0 [ 427.358569][T30783] total_active_anon 16384 [ 427.362949][T30783] total_inactive_file 0 [ 427.368248][T30783] total_active_file 0 [ 427.372239][T30783] total_unevictable 0 [ 427.377379][T30783] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.7462,pid=30783,uid=0 [ 427.393298][T30783] Memory cgroup out of memory: Killed process 30783 (syz.9.7462) total-vm:95564kB, anon-rss:916kB, file-rss:22380kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 427.452335][T30808] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 427.461763][T30808] SELinux: failed to load policy [ 427.806578][T30834] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 427.818987][T30834] SELinux: failed to load policy [ 427.853795][T30840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7483'. [ 427.862836][T30840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7483'. [ 427.894094][T30840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7483'. [ 427.908970][T30842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7484'. [ 427.919320][T30842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7484'. [ 427.947788][T30842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7484'. [ 427.965534][T30848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7487'. [ 428.000577][T30851] team0: Device ipvlan2 failed to register rx_handler [ 428.029659][T30853] FAULT_INJECTION: forcing a failure. [ 428.029659][T30853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.043036][T30853] CPU: 0 UID: 0 PID: 30853 Comm: +}[@ Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 428.053389][T30853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 428.063479][T30853] Call Trace: [ 428.066824][T30853] [ 428.070129][T30853] dump_stack_lvl+0xf2/0x150 [ 428.074836][T30853] dump_stack+0x15/0x1a [ 428.079037][T30853] should_fail_ex+0x223/0x230 [ 428.083748][T30853] should_fail+0xb/0x10 [ 428.087947][T30853] should_fail_usercopy+0x1a/0x20 [ 428.093033][T30853] _copy_to_user+0x20/0xa0 [ 428.097559][T30853] simple_read_from_buffer+0xa0/0x110 [ 428.102977][T30853] proc_fail_nth_read+0xf9/0x140 [ 428.107999][T30853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 428.113597][T30853] vfs_read+0x1a2/0x700 [ 428.117780][T30853] ? __rcu_read_unlock+0x4e/0x70 [ 428.122745][T30853] ? __fget_files+0x17c/0x1c0 [ 428.127558][T30853] ksys_read+0xe8/0x1b0 [ 428.131738][T30853] __x64_sys_read+0x42/0x50 [ 428.136265][T30853] x64_sys_call+0x2874/0x2dc0 [ 428.141027][T30853] do_syscall_64+0xc9/0x1c0 [ 428.145662][T30853] ? clear_bhb_loop+0x55/0xb0 [ 428.150362][T30853] ? clear_bhb_loop+0x55/0xb0 [ 428.155100][T30853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.161047][T30853] RIP: 0033:0x7f61bf79472c [ 428.165511][T30853] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 428.185148][T30853] RSP: 002b:00007f61bde01030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 428.193584][T30853] RAX: ffffffffffffffda RBX: 00007f61bf985fa0 RCX: 00007f61bf79472c [ 428.201576][T30853] RDX: 000000000000000f RSI: 00007f61bde010a0 RDI: 0000000000000006 [ 428.209561][T30853] RBP: 00007f61bde01090 R08: 0000000000000000 R09: 0000000000000000 [ 428.217632][T30853] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000001 [ 428.226104][T30853] R13: 0000000000000000 R14: 00007f61bf985fa0 R15: 00007ffc1cff2608 [ 428.234183][T30853] [ 428.398699][T30867] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7493'. [ 428.409110][T30867] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7493'. [ 428.468726][T30867] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7493'. [ 429.042557][T30894] SELinux: syz.7.7501 (30894) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 429.216876][T30902] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 429.236064][T30902] SELinux: failed to load policy [ 429.336792][T30905] team0: Device ipvlan2 failed to register rx_handler [ 429.648447][T30967] veth0_vlan: entered allmulticast mode [ 429.665956][T30967] ÿÿÿÿÿÿ: renamed from vlan1 [ 429.799102][T30985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.810705][T30985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.852101][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 429.852118][ T29] audit: type=1326 audit(2000032767.835:33732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.7.7516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 429.889416][ T29] audit: type=1326 audit(2000032767.877:33733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.7.7516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 429.913708][ T29] audit: type=1326 audit(2000032767.877:33734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.7.7516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 429.937336][ T29] audit: type=1326 audit(2000032767.877:33735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.7.7516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 429.961043][ T29] audit: type=1326 audit(2000032767.877:33736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.7.7516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 429.984691][ T29] audit: type=1326 audit(2000032767.877:33737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.7.7516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 430.007897][T30986] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 430.008275][ T29] audit: type=1326 audit(2000032767.877:33738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.7.7516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 430.040918][ T29] audit: type=1326 audit(2000032767.877:33739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.7.7516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 430.064602][ T29] audit: type=1326 audit(2000032767.877:33740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.7.7516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 430.088327][ T29] audit: type=1326 audit(2000032767.877:33741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30987 comm="syz.7.7516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 430.091828][T30986] SELinux: failed to load policy [ 430.171382][T30995] SELinux: syz.6.7517 (30995) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 430.700760][T31037] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 430.701023][T31037] SELinux: failed to load policy [ 430.780948][T31042] SELinux: syz.7.7528 (31042) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 431.494254][ T8754] hid-generic 0039:0004:0007.0007: hidraw0: HID v0.07 Device [syz0] on syz0 [ 431.515003][T31128] syzkaller0: entered promiscuous mode [ 431.522006][T31128] syzkaller0: entered allmulticast mode [ 431.579836][T31142] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 431.589561][T31142] SELinux: failed to load policy [ 431.599288][T31144] smc: net device bond0 erased user defined pnetid SYZ0 [ 432.180923][T31156] SELinux: syz.2.7544 (31156) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 432.298956][T31169] x_tables: duplicate underflow at hook 2 [ 432.510972][T31180] FAULT_INJECTION: forcing a failure. [ 432.510972][T31180] name failslab, interval 1, probability 0, space 0, times 0 [ 432.525123][T31180] CPU: 1 UID: 0 PID: 31180 Comm: syz.7.7551 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 432.536388][T31180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 432.546517][T31180] Call Trace: [ 432.549932][T31180] [ 432.553200][T31180] dump_stack_lvl+0xf2/0x150 [ 432.557960][T31180] dump_stack+0x15/0x1a [ 432.562174][T31180] should_fail_ex+0x223/0x230 [ 432.566906][T31180] should_failslab+0x8f/0xb0 [ 432.571717][T31180] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 432.578092][T31180] ? audit_log_vformat+0x23a/0x490 [ 432.583254][T31180] ? sidtab_sid2str_get+0xb8/0x140 [ 432.588416][T31180] kmemdup_noprof+0x2a/0x60 [ 432.593079][T31180] sidtab_sid2str_get+0xb8/0x140 [ 432.598059][T31180] security_sid_to_context_core+0x1eb/0x2f0 [ 432.604017][T31180] security_sid_to_context+0x27/0x30 [ 432.609339][T31180] avc_audit_post_callback+0x10d/0x530 [ 432.614912][T31180] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 432.621045][T31180] common_lsm_audit+0x90f/0x1010 [ 432.626018][T31180] ? avc_denied+0xf1/0x110 [ 432.630513][T31180] slow_avc_audit+0xf9/0x140 [ 432.635189][T31180] selinux_capable+0x1a0/0x260 [ 432.640002][T31180] security_capable+0x81/0x90 [ 432.644773][T31180] file_ns_capable+0x45/0x70 [ 432.649534][T31180] netlink_capable+0x6c/0xa0 [ 432.654170][T31180] audit_receive+0x3cb/0x2a20 [ 432.658874][T31180] ? __netlink_lookup+0x253/0x290 [ 432.663984][T31180] netlink_unicast+0x599/0x670 [ 432.668921][T31180] netlink_sendmsg+0x5cc/0x6e0 [ 432.673729][T31180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.679028][T31180] __sock_sendmsg+0x140/0x180 [ 432.683728][T31180] ____sys_sendmsg+0x312/0x410 [ 432.688506][T31180] __sys_sendmsg+0x19d/0x230 [ 432.693164][T31180] __x64_sys_sendmsg+0x46/0x50 [ 432.697963][T31180] x64_sys_call+0x2734/0x2dc0 [ 432.702665][T31180] do_syscall_64+0xc9/0x1c0 [ 432.707178][T31180] ? clear_bhb_loop+0x55/0xb0 [ 432.711921][T31180] ? clear_bhb_loop+0x55/0xb0 [ 432.716783][T31180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.722719][T31180] RIP: 0033:0x7f5a9a9a5d19 [ 432.727139][T31180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.746859][T31180] RSP: 002b:00007f5a99011038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.755277][T31180] RAX: ffffffffffffffda RBX: 00007f5a9ab95fa0 RCX: 00007f5a9a9a5d19 [ 432.763332][T31180] RDX: 0000000004000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 432.771312][T31180] RBP: 00007f5a99011090 R08: 0000000000000000 R09: 0000000000000000 [ 432.779293][T31180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 432.787404][T31180] R13: 0000000000000000 R14: 00007f5a9ab95fa0 R15: 00007fff199a6548 [ 432.795421][T31180] [ 432.819622][T31182] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 432.830313][T31182] SELinux: failed to load policy [ 433.245599][T31260] FAULT_INJECTION: forcing a failure. [ 433.245599][T31260] name failslab, interval 1, probability 0, space 0, times 0 [ 433.259839][T31260] CPU: 1 UID: 0 PID: 31260 Comm: syz.5.7559 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 433.270674][T31260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 433.280754][T31260] Call Trace: [ 433.284056][T31260] [ 433.286995][T31260] dump_stack_lvl+0xf2/0x150 [ 433.291653][T31260] dump_stack+0x15/0x1a [ 433.295927][T31260] should_fail_ex+0x223/0x230 [ 433.300624][T31260] should_failslab+0x8f/0xb0 [ 433.305250][T31260] kmem_cache_alloc_noprof+0x52/0x320 [ 433.310690][T31260] ? security_inode_alloc+0x37/0x100 [ 433.316199][T31260] security_inode_alloc+0x37/0x100 [ 433.321392][T31260] inode_init_always_gfp+0x4a2/0x4f0 [ 433.326709][T31260] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 433.332260][T31260] alloc_inode+0x82/0x160 [ 433.336598][T31260] new_inode+0x1e/0x100 [ 433.340948][T31260] shmem_get_inode+0x24e/0x730 [ 433.345731][T31260] __shmem_file_setup+0x127/0x1f0 [ 433.350769][T31260] shmem_file_setup+0x3b/0x50 [ 433.355643][T31260] __se_sys_memfd_create+0x31d/0x5c0 [ 433.360944][T31260] __x64_sys_memfd_create+0x31/0x40 [ 433.366157][T31260] x64_sys_call+0x2d4c/0x2dc0 [ 433.370875][T31260] do_syscall_64+0xc9/0x1c0 [ 433.375439][T31260] ? clear_bhb_loop+0x55/0xb0 [ 433.380190][T31260] ? clear_bhb_loop+0x55/0xb0 [ 433.384960][T31260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.390896][T31260] RIP: 0033:0x7f61bf795d19 [ 433.395362][T31260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.415058][T31260] RSP: 002b:00007f61bde00e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 433.423497][T31260] RAX: ffffffffffffffda RBX: 00000000000004da RCX: 00007f61bf795d19 [ 433.431512][T31260] RDX: 00007f61bde00ef0 RSI: 0000000000000000 RDI: 00007f61bf812381 [ 433.439495][T31260] RBP: 0000000020000140 R08: 00007f61bde00bb7 R09: 00007f61bde00e40 [ 433.447515][T31260] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000080 [ 433.455581][T31260] R13: 00007f61bde00ef0 R14: 00007f61bde00eb0 R15: 0000000020000700 [ 433.463566][T31260] [ 433.509551][T31274] __nla_validate_parse: 12 callbacks suppressed [ 433.509574][T31274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7560'. [ 433.525080][T31274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7560'. [ 433.544763][T31274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7560'. [ 433.965475][T31349] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 433.999057][T31353] SELinux: syz.7.7566 (31353) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 434.014907][T31349] SELinux: failed to load policy [ 434.463023][T31403] FAULT_INJECTION: forcing a failure. [ 434.463023][T31403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.477503][T31403] CPU: 1 UID: 0 PID: 31403 Comm: syz.7.7582 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 434.488377][T31403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 434.498470][T31403] Call Trace: [ 434.501791][T31403] [ 434.504747][T31403] dump_stack_lvl+0xf2/0x150 [ 434.509462][T31403] dump_stack+0x15/0x1a [ 434.513694][T31403] should_fail_ex+0x223/0x230 [ 434.518411][T31403] should_fail+0xb/0x10 [ 434.522710][T31403] should_fail_usercopy+0x1a/0x20 [ 434.527782][T31403] _copy_from_iter+0xd5/0xd00 [ 434.532547][T31403] ? kmalloc_reserve+0x16e/0x190 [ 434.537635][T31403] ? __build_skb_around+0x196/0x1f0 [ 434.542937][T31403] ? __alloc_skb+0x21f/0x310 [ 434.547641][T31403] ? __virt_addr_valid+0x1ed/0x250 [ 434.552972][T31403] ? __check_object_size+0x364/0x520 [ 434.558296][T31403] netlink_sendmsg+0x460/0x6e0 [ 434.563111][T31403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.568492][T31403] __sock_sendmsg+0x140/0x180 [ 434.573232][T31403] ____sys_sendmsg+0x312/0x410 [ 434.578099][T31403] __sys_sendmsg+0x19d/0x230 [ 434.582779][T31403] __x64_sys_sendmsg+0x46/0x50 [ 434.587577][T31403] x64_sys_call+0x2734/0x2dc0 [ 434.592390][T31403] do_syscall_64+0xc9/0x1c0 [ 434.597001][T31403] ? clear_bhb_loop+0x55/0xb0 [ 434.601711][T31403] ? clear_bhb_loop+0x55/0xb0 [ 434.606536][T31403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.612583][T31403] RIP: 0033:0x7f5a9a9a5d19 [ 434.617121][T31403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.637107][T31403] RSP: 002b:00007f5a99011038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.645650][T31403] RAX: ffffffffffffffda RBX: 00007f5a9ab95fa0 RCX: 00007f5a9a9a5d19 [ 434.653640][T31403] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 434.661647][T31403] RBP: 00007f5a99011090 R08: 0000000000000000 R09: 0000000000000000 [ 434.669654][T31403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.677646][T31403] R13: 0000000000000000 R14: 00007f5a9ab95fa0 R15: 00007fff199a6548 [ 434.685721][T31403] [ 434.711970][ T29] kauditd_printk_skb: 594 callbacks suppressed [ 434.712027][ T29] audit: type=1326 audit(2000069856.937:34336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.7.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5a9a9a472c code=0x7ffc0000 [ 434.744835][ T29] audit: type=1326 audit(2000069856.979:34337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.7.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5a9a9a47cf code=0x7ffc0000 [ 434.769698][ T29] audit: type=1326 audit(2000069856.979:34338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.7.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5a9a9a497a code=0x7ffc0000 [ 434.794517][ T29] audit: type=1326 audit(2000069856.979:34339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.7.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 434.819565][ T29] audit: type=1326 audit(2000069856.979:34340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.7.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 434.916677][T31409] SELinux: syz.7.7585 (31409) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 434.972650][ T29] audit: type=1326 audit(2000069857.189:34341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31404 comm="syz.9.7583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf45f25d19 code=0x7ffc0000 [ 434.997702][ T29] audit: type=1326 audit(2000069857.189:34342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31404 comm="syz.9.7583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faf45f25d19 code=0x7ffc0000 [ 435.022763][ T29] audit: type=1326 audit(2000069857.189:34343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31404 comm="syz.9.7583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf45f25d19 code=0x7ffc0000 [ 435.047831][ T29] audit: type=1326 audit(2000069857.189:34344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31404 comm="syz.9.7583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7faf45f25d19 code=0x7ffc0000 [ 435.071698][ T29] audit: type=1326 audit(2000069857.189:34345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31404 comm="syz.9.7583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf45f25d19 code=0x7ffc0000 [ 435.103183][T31411] FAULT_INJECTION: forcing a failure. [ 435.103183][T31411] name failslab, interval 1, probability 0, space 0, times 0 [ 435.117267][T31411] CPU: 1 UID: 0 PID: 31411 Comm: syz.6.7584 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 435.128074][T31411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 435.138176][T31411] Call Trace: [ 435.141502][T31411] [ 435.144485][T31411] dump_stack_lvl+0xf2/0x150 [ 435.149288][T31411] dump_stack+0x15/0x1a [ 435.153543][T31411] should_fail_ex+0x223/0x230 [ 435.158393][T31411] should_failslab+0x8f/0xb0 [ 435.163086][T31411] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 435.169531][T31411] ? audit_log_vformat+0x23a/0x490 [ 435.174737][T31411] ? sidtab_sid2str_get+0xb8/0x140 [ 435.179935][T31411] kmemdup_noprof+0x2a/0x60 [ 435.184546][T31411] sidtab_sid2str_get+0xb8/0x140 [ 435.189515][T31411] security_sid_to_context_core+0x1eb/0x2f0 [ 435.195442][T31411] security_sid_to_context+0x27/0x30 [ 435.200772][T31411] avc_audit_post_callback+0x10d/0x530 [ 435.206280][T31411] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 435.212480][T31411] common_lsm_audit+0x90f/0x1010 [ 435.217499][T31411] ? avc_denied+0xf1/0x110 [ 435.221994][T31411] slow_avc_audit+0xf9/0x140 [ 435.226786][T31411] avc_has_perm+0x129/0x160 [ 435.231438][T31411] sel_write_validatetrans+0xdc/0x370 [ 435.237014][T31411] ? __pfx_sel_write_validatetrans+0x10/0x10 [ 435.243111][T31411] vfs_write+0x281/0x920 [ 435.247411][T31411] ? __fget_files+0x17c/0x1c0 [ 435.252129][T31411] ksys_write+0xe8/0x1b0 [ 435.256413][T31411] __x64_sys_write+0x42/0x50 [ 435.261038][T31411] x64_sys_call+0x287e/0x2dc0 [ 435.265758][T31411] do_syscall_64+0xc9/0x1c0 [ 435.270275][T31411] ? clear_bhb_loop+0x55/0xb0 [ 435.274999][T31411] ? clear_bhb_loop+0x55/0xb0 [ 435.279744][T31411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.285707][T31411] RIP: 0033:0x7f6d539f5d19 [ 435.290269][T31411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.310026][T31411] RSP: 002b:00007f6d52046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 435.318640][T31411] RAX: ffffffffffffffda RBX: 00007f6d53be6080 RCX: 00007f6d539f5d19 [ 435.326658][T31411] RDX: 000000000000005b RSI: 0000000020000180 RDI: 0000000000000003 [ 435.334691][T31411] RBP: 00007f6d52046090 R08: 0000000000000000 R09: 0000000000000000 [ 435.342689][T31411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.350694][T31411] R13: 0000000000000000 R14: 00007f6d53be6080 R15: 00007ffc991e4b18 [ 435.358703][T31411] [ 435.713212][T31430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7592'. [ 435.723581][T31430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7592'. [ 435.770252][T31432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.789808][T31430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7592'. [ 435.805836][T31432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.952185][T31445] FAULT_INJECTION: forcing a failure. [ 435.952185][T31445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.965309][T31445] CPU: 0 UID: 0 PID: 31445 Comm: syz.5.7598 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 435.976225][T31445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 435.986310][T31445] Call Trace: [ 435.989671][T31445] [ 435.992712][T31445] dump_stack_lvl+0xf2/0x150 [ 435.997395][T31445] dump_stack+0x15/0x1a [ 436.001575][T31445] should_fail_ex+0x223/0x230 [ 436.006267][T31445] should_fail+0xb/0x10 [ 436.010471][T31445] should_fail_usercopy+0x1a/0x20 [ 436.015513][T31445] copy_page_from_iter_atomic+0x228/0xf80 [ 436.021360][T31445] ? shmem_write_begin+0xa2/0x180 [ 436.026406][T31445] ? shmem_write_begin+0xda/0x180 [ 436.031454][T31445] generic_perform_write+0x2f1/0x4a0 [ 436.036772][T31445] shmem_file_write_iter+0xc2/0xe0 [ 436.041932][T31445] do_iter_readv_writev+0x394/0x450 [ 436.047252][T31445] vfs_writev+0x2d4/0x880 [ 436.051647][T31445] ? __seccomp_filter+0x6fa/0x1180 [ 436.057080][T31445] __se_sys_pwritev2+0x100/0x1c0 [ 436.062053][T31445] __x64_sys_pwritev2+0x78/0x90 [ 436.066942][T31445] x64_sys_call+0x2afe/0x2dc0 [ 436.071654][T31445] do_syscall_64+0xc9/0x1c0 [ 436.076221][T31445] ? clear_bhb_loop+0x55/0xb0 [ 436.080907][T31445] ? clear_bhb_loop+0x55/0xb0 [ 436.085606][T31445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.091616][T31445] RIP: 0033:0x7f61bf795d19 [ 436.096039][T31445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.115715][T31445] RSP: 002b:00007f61bde01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 436.124156][T31445] RAX: ffffffffffffffda RBX: 00007f61bf985fa0 RCX: 00007f61bf795d19 [ 436.132136][T31445] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000003 [ 436.140119][T31445] RBP: 00007f61bde01090 R08: 0000000000000000 R09: 0000000000000001 [ 436.148134][T31445] R10: 0000000000000e84 R11: 0000000000000246 R12: 0000000000000001 [ 436.156117][T31445] R13: 0000000000000000 R14: 00007f61bf985fa0 R15: 00007ffc1cff2608 [ 436.164109][T31445] [ 436.255154][T31456] SELinux: syz.5.7604 (31456) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 436.377206][T31460] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7605'. [ 436.386258][T31460] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7605'. [ 436.506425][T31461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7603'. [ 436.546575][T31460] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7605'. [ 436.819058][T31470] random: crng reseeded on system resumption [ 437.256940][T31500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31500 comm=syz.5.7616 [ 437.312203][T31500] netlink: 'syz.5.7616': attribute type 1 has an invalid length. [ 437.328122][T31504] SELinux: syz.6.7619 (31504) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 437.384594][T31500] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 437.685488][T31523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31523 comm=syz.5.7624 [ 437.763158][T31528] netlink: 'syz.5.7624': attribute type 7 has an invalid length. [ 437.790115][T31527] netlink: 'syz.6.7626': attribute type 21 has an invalid length. [ 437.817198][T31529] cgroup: noprefix used incorrectly [ 437.921406][T31536] x_tables: duplicate underflow at hook 1 [ 438.103907][T31543] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 438.120481][T31545] SELinux: syz.6.7635 (31545) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 438.146823][T31543] SELinux: failed to load policy [ 438.588202][T31572] vhci_hcd: invalid port number 254 [ 438.673204][T31578] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 438.693664][T31578] SELinux: failed to load policy [ 439.000005][T31600] SELinux: syz.5.7657 (31600) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 439.187520][T31611] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 439.200549][T31605] SELinux: policydb version -1099995607 does not match my version range 15-33 [ 439.216870][T31612] __nla_validate_parse: 8 callbacks suppressed [ 439.216885][T31612] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7661'. [ 439.232255][T31612] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7661'. [ 439.268787][T31605] SELinux: failed to load policy [ 439.334894][T31615] FAULT_INJECTION: forcing a failure. [ 439.334894][T31615] name failslab, interval 1, probability 0, space 0, times 0 [ 439.347738][T31615] CPU: 0 UID: 0 PID: 31615 Comm: syz.2.7663 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 439.358690][T31615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 439.368801][T31615] Call Trace: [ 439.372126][T31615] [ 439.375073][T31615] dump_stack_lvl+0xf2/0x150 [ 439.379726][T31615] dump_stack+0x15/0x1a [ 439.384260][T31615] should_fail_ex+0x223/0x230 [ 439.388949][T31615] should_failslab+0x8f/0xb0 [ 439.393562][T31615] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 439.399907][T31615] ? sidtab_sid2str_get+0xb8/0x140 [ 439.405040][T31615] kmemdup_noprof+0x2a/0x60 [ 439.409572][T31615] sidtab_sid2str_get+0xb8/0x140 [ 439.414535][T31615] security_sid_to_context_core+0x1eb/0x2f0 [ 439.420563][T31615] security_sid_to_context+0x27/0x30 [ 439.425860][T31615] selinux_lsmprop_to_secctx+0x2c/0x40 [ 439.431335][T31615] security_lsmprop_to_secctx+0x4a/0x90 [ 439.436902][T31615] audit_log_task_context+0x93/0x1c0 [ 439.442243][T31615] audit_log_task+0xf9/0x1c0 [ 439.446904][T31615] audit_seccomp+0x68/0x130 [ 439.451417][T31615] __seccomp_filter+0x6fa/0x1180 [ 439.456422][T31615] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 439.462171][T31615] ? vfs_write+0x596/0x920 [ 439.466657][T31615] ? __schedule+0x6fa/0x930 [ 439.471184][T31615] __secure_computing+0x9f/0x1c0 [ 439.476166][T31615] syscall_trace_enter+0xd1/0x1f0 [ 439.481316][T31615] do_syscall_64+0xaa/0x1c0 [ 439.485836][T31615] ? clear_bhb_loop+0x55/0xb0 [ 439.490523][T31615] ? clear_bhb_loop+0x55/0xb0 [ 439.495212][T31615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.501163][T31615] RIP: 0033:0x7f2e33a05d19 [ 439.505583][T31615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.525210][T31615] RSP: 002b:00007f2e32077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 439.533660][T31615] RAX: ffffffffffffffda RBX: 00007f2e33bf5fa0 RCX: 00007f2e33a05d19 [ 439.541705][T31615] RDX: 0000000000000000 RSI: 0000000020000e40 RDI: 0000000020001640 [ 439.549710][T31615] RBP: 00007f2e32077090 R08: 0000000000000000 R09: 0000000000000000 [ 439.557876][T31615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.565860][T31615] R13: 0000000000000000 R14: 00007f2e33bf5fa0 R15: 00007ffcf7f811a8 [ 439.574061][T31615] [ 439.577244][T31615] audit_panic: 344 callbacks suppressed [ 439.577259][T31615] audit: error in audit_log_task_context [ 439.621932][ T29] audit: type=1326 audit(2000073956.792:34690): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31614 comm="syz.2.7663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 439.651020][ T29] audit: type=1326 audit(2000073957.117:34691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31614 comm="syz.2.7663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2e33a0472c code=0x7ffc0000 [ 439.674656][ T29] audit: type=1326 audit(2000073957.117:34692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31614 comm="syz.2.7663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e33a047cf code=0x7ffc0000 [ 439.698308][ T29] audit: type=1326 audit(2000073957.117:34693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31614 comm="syz.2.7663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e33a0497a code=0x7ffc0000 [ 439.721961][ T29] audit: type=1326 audit(2000073957.117:34694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31614 comm="syz.2.7663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 439.745683][ T29] audit: type=1326 audit(2000073957.117:34695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31614 comm="syz.2.7663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e33a05d19 code=0x7ffc0000 [ 439.812799][ T29] audit: type=1400 audit(2000073957.243:34696): avc: denied { mount } for pid=31619 comm="syz.7.7665" name="/" dev="configfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 439.836026][ T29] audit: type=1326 audit(2000073957.243:34697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31619 comm="syz.7.7665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 439.859935][ T29] audit: type=1326 audit(2000073957.243:34698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31619 comm="syz.7.7665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 439.987937][T31638] netlink: 'syz.7.7671': attribute type 30 has an invalid length. [ 440.074032][T31644] syz.6.7673[31644] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.074241][T31644] syz.6.7673[31644] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.087015][T31644] syz.6.7673[31644] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.119460][T31647] FAULT_INJECTION: forcing a failure. [ 440.119460][T31647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.144386][T31647] CPU: 0 UID: 0 PID: 31647 Comm: syz.6.7674 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 440.155171][T31647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 440.165298][T31647] Call Trace: [ 440.168583][T31647] [ 440.171512][T31647] dump_stack_lvl+0xf2/0x150 [ 440.176129][T31647] dump_stack+0x15/0x1a [ 440.180325][T31647] should_fail_ex+0x223/0x230 [ 440.185215][T31647] should_fail+0xb/0x10 [ 440.189431][T31647] should_fail_usercopy+0x1a/0x20 [ 440.194503][T31647] strncpy_from_user+0x25/0x210 [ 440.199443][T31647] strncpy_from_user_nofault+0x66/0xe0 [ 440.204924][T31647] bpf_probe_read_compat_str+0xb3/0x130 [ 440.210532][T31647] bpf_prog_e42f6260c1b72fb3+0x3e/0x40 [ 440.216008][T31647] bpf_trace_run3+0x10c/0x1d0 [ 440.220736][T31647] ? audit_log_end+0x1d0/0x1e0 [ 440.225598][T31647] ? audit_log_end+0x1d0/0x1e0 [ 440.230375][T31647] __traceiter_kmem_cache_free+0x33/0x50 [ 440.236049][T31647] ? audit_log_end+0x1d0/0x1e0 [ 440.240979][T31647] kmem_cache_free+0x237/0x2d0 [ 440.245755][T31647] audit_log_end+0x1d0/0x1e0 [ 440.250455][T31647] audit_seccomp+0x107/0x130 [ 440.255077][T31647] __seccomp_filter+0x6fa/0x1180 [ 440.260123][T31647] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 440.265779][T31647] ? vfs_write+0x596/0x920 [ 440.270361][T31647] ? __schedule+0x6fa/0x930 [ 440.274893][T31647] __secure_computing+0x9f/0x1c0 [ 440.279875][T31647] syscall_trace_enter+0xd1/0x1f0 [ 440.284946][T31647] do_syscall_64+0xaa/0x1c0 [ 440.289469][T31647] ? clear_bhb_loop+0x55/0xb0 [ 440.294259][T31647] ? clear_bhb_loop+0x55/0xb0 [ 440.299016][T31647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.304952][T31647] RIP: 0033:0x7f6d539f5d19 [ 440.309422][T31647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.329065][T31647] RSP: 002b:00007f6d52067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 440.337502][T31647] RAX: ffffffffffffffda RBX: 00007f6d53be5fa0 RCX: 00007f6d539f5d19 [ 440.345511][T31647] RDX: 0000000000000000 RSI: 0000000000000214 RDI: 0000000000000000 [ 440.353487][T31647] RBP: 00007f6d52067090 R08: 0000000000000000 R09: 0000000000000000 [ 440.361516][T31647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.369523][T31647] R13: 0000000000000000 R14: 00007f6d53be5fa0 R15: 00007ffc991e4b18 [ 440.377532][T31647] [ 440.415679][T31649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7675'. [ 440.426271][T31649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.428540][T31652] FAULT_INJECTION: forcing a failure. [ 440.428540][T31652] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 440.448168][T31652] CPU: 1 UID: 0 PID: 31652 Comm: syz.6.7677 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 440.458955][T31652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 440.469086][T31652] Call Trace: [ 440.472395][T31652] [ 440.475454][T31652] dump_stack_lvl+0xf2/0x150 [ 440.480164][T31652] dump_stack+0x15/0x1a [ 440.484371][T31652] should_fail_ex+0x223/0x230 [ 440.489135][T31652] should_fail_alloc_page+0xfd/0x110 [ 440.494532][T31652] __alloc_pages_noprof+0x109/0x340 [ 440.499760][T31652] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 440.505162][T31652] folio_alloc_noprof+0xee/0x130 [ 440.510125][T31652] filemap_alloc_folio_noprof+0x69/0x220 [ 440.515821][T31652] __filemap_get_folio+0x298/0x5b0 [ 440.520957][T31652] ? aio_setup_ring+0x1e4/0x6a0 [ 440.525914][T31652] aio_setup_ring+0x263/0x6a0 [ 440.530616][T31652] ioctx_alloc+0x2b2/0x4c0 [ 440.535058][T31652] __se_sys_io_setup+0x6b/0x1b0 [ 440.540021][T31652] __x64_sys_io_setup+0x31/0x40 [ 440.544959][T31652] x64_sys_call+0x160f/0x2dc0 [ 440.549659][T31652] do_syscall_64+0xc9/0x1c0 [ 440.554324][T31652] ? clear_bhb_loop+0x55/0xb0 [ 440.559112][T31652] ? clear_bhb_loop+0x55/0xb0 [ 440.563940][T31652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.569859][T31652] RIP: 0033:0x7f6d539f5d19 [ 440.574386][T31652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.594097][T31652] RSP: 002b:00007f6d52067038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 440.602517][T31652] RAX: ffffffffffffffda RBX: 00007f6d53be5fa0 RCX: 00007f6d539f5d19 [ 440.610498][T31652] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000002004 [ 440.618487][T31652] RBP: 00007f6d52067090 R08: 0000000000000000 R09: 0000000000000000 [ 440.626466][T31652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 440.634630][T31652] R13: 0000000000000000 R14: 00007f6d53be5fa0 R15: 00007ffc991e4b18 [ 440.642632][T31652] [ 440.650943][T31649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.667370][T31660] SELinux: syz.2.7679 (31660) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 440.705846][T31664] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7681'. [ 440.731848][T31664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.759904][T31664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.147325][T31704] FAULT_INJECTION: forcing a failure. [ 441.147325][T31704] name failslab, interval 1, probability 0, space 0, times 0 [ 441.160109][T31704] CPU: 0 UID: 0 PID: 31704 Comm: syz.7.7696 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 441.170978][T31704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 441.181039][T31704] Call Trace: [ 441.184455][T31704] [ 441.187387][T31704] dump_stack_lvl+0xf2/0x150 [ 441.192144][T31704] dump_stack+0x15/0x1a [ 441.196317][T31704] should_fail_ex+0x223/0x230 [ 441.201076][T31704] should_failslab+0x8f/0xb0 [ 441.205714][T31704] kmem_cache_alloc_noprof+0x52/0x320 [ 441.211189][T31704] ? vm_area_alloc+0xac/0x130 [ 441.215933][T31704] vm_area_alloc+0xac/0x130 [ 441.220469][T31704] alloc_bprm+0x25d/0x5d0 [ 441.224859][T31704] do_execveat_common+0x134/0x800 [ 441.230031][T31704] __x64_sys_execve+0x5a/0x70 [ 441.234758][T31704] x64_sys_call+0x1333/0x2dc0 [ 441.239534][T31704] do_syscall_64+0xc9/0x1c0 [ 441.244067][T31704] ? clear_bhb_loop+0x55/0xb0 [ 441.248845][T31704] ? clear_bhb_loop+0x55/0xb0 [ 441.253720][T31704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.259738][T31704] RIP: 0033:0x7f5a9a9a5d19 [ 441.264163][T31704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.283878][T31704] RSP: 002b:00007f5a99011038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 441.292320][T31704] RAX: ffffffffffffffda RBX: 00007f5a9ab95fa0 RCX: 00007f5a9a9a5d19 [ 441.300389][T31704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 441.308457][T31704] RBP: 00007f5a99011090 R08: 0000000000000000 R09: 0000000000000000 [ 441.316436][T31704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.324774][T31704] R13: 0000000000000000 R14: 00007f5a9ab95fa0 R15: 00007fff199a6548 [ 441.332793][T31704] [ 441.357421][T31707] SELinux: syz.9.7697 (31707) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 441.426681][T31713] SELinux: syz.5.7700 (31713) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 441.659533][T31711] Cannot find add_set index 0 as target [ 441.787466][T31736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7710'. [ 441.796526][T31736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7710'. [ 441.806177][T31736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7710'. [ 441.945424][T31747] SELinux: syz.2.7715 (31747) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 443.203115][T31778] netlink: 'syz.5.7725': attribute type 11 has an invalid length. [ 443.499227][T31793] SELinux: syz.9.7732 (31793) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 443.641569][T31800] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7734'. [ 443.651856][T31800] netlink: 'syz.7.7734': attribute type 1 has an invalid length. [ 443.659805][T31800] netlink: 'syz.7.7734': attribute type 2 has an invalid length. [ 443.667740][T31800] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7734'. [ 443.836356][T31810] syz.7.7734[31810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.837024][T31810] syz.7.7734[31810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.941920][T31810] syz.7.7734[31810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.372760][T31827] FAULT_INJECTION: forcing a failure. [ 444.372760][T31827] name failslab, interval 1, probability 0, space 0, times 0 [ 444.402138][T31827] CPU: 1 UID: 0 PID: 31827 Comm: syz.2.7743 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 444.413020][T31827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 444.423099][T31827] Call Trace: [ 444.426412][T31827] [ 444.429411][T31827] dump_stack_lvl+0xf2/0x150 [ 444.434128][T31827] dump_stack+0x15/0x1a [ 444.438413][T31827] should_fail_ex+0x223/0x230 [ 444.443210][T31827] should_failslab+0x8f/0xb0 [ 444.447829][T31827] __kmalloc_noprof+0xab/0x3f0 [ 444.452658][T31827] ? alloc_trace_uprobe+0x37/0x1f0 [ 444.458014][T31827] alloc_trace_uprobe+0x37/0x1f0 [ 444.463025][T31827] create_local_trace_uprobe+0xb7/0x2d0 [ 444.468635][T31827] perf_uprobe_init+0xc2/0x140 [ 444.473483][T31827] perf_uprobe_event_init+0xe2/0x140 [ 444.478881][T31827] perf_try_init_event+0xcb/0x4f0 [ 444.484031][T31827] ? perf_event_alloc+0xac6/0x12e0 [ 444.489155][T31827] perf_event_alloc+0xad1/0x12e0 [ 444.494146][T31827] __se_sys_perf_event_open+0x7f2/0x2230 [ 444.499795][T31827] ? vfs_write+0x596/0x920 [ 444.504240][T31827] __x64_sys_perf_event_open+0x67/0x80 [ 444.509715][T31827] x64_sys_call+0x1deb/0x2dc0 [ 444.514405][T31827] do_syscall_64+0xc9/0x1c0 [ 444.518929][T31827] ? clear_bhb_loop+0x55/0xb0 [ 444.523712][T31827] ? clear_bhb_loop+0x55/0xb0 [ 444.528407][T31827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.534336][T31827] RIP: 0033:0x7f2e33a05d19 [ 444.538771][T31827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.558466][T31827] RSP: 002b:00007f2e32077038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 444.567163][T31827] RAX: ffffffffffffffda RBX: 00007f2e33bf5fa0 RCX: 00007f2e33a05d19 [ 444.575173][T31827] RDX: 2000000000000001 RSI: 0000000000000000 RDI: 0000000020000000 [ 444.583157][T31827] RBP: 00007f2e32077090 R08: 0000000000000001 R09: 0000000000000000 [ 444.591296][T31827] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 444.599280][T31827] R13: 0000000000000000 R14: 00007f2e33bf5fa0 R15: 00007ffcf7f811a8 [ 444.607323][T31827] [ 444.611764][T31827] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 444.632076][ T29] kauditd_printk_skb: 732 callbacks suppressed [ 444.632094][ T29] audit: type=1326 audit(2000110817.348:35431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31817 comm="syz.5.7740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bf795d19 code=0x7ffc0000 [ 444.663350][ T29] audit: type=1326 audit(2000110817.348:35432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31817 comm="syz.5.7740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bf795d19 code=0x7ffc0000 [ 444.704897][ T29] audit: type=1326 audit(2000110817.432:35433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31820 comm="syz.9.7741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf45f25d19 code=0x7ffc0000 [ 444.729876][ T29] audit: type=1326 audit(2000110817.432:35434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31820 comm="syz.9.7741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf45f25d19 code=0x7ffc0000 [ 444.802723][ T29] audit: type=1326 audit(2000110817.527:35435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31834 comm="syz.7.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 444.826410][ T29] audit: type=1326 audit(2000110817.527:35436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31834 comm="syz.7.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 444.850282][ T29] audit: type=1326 audit(2000110817.537:35437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31834 comm="syz.7.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 444.873942][ T29] audit: type=1326 audit(2000110817.537:35438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31834 comm="syz.7.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 444.898016][ T29] audit: type=1326 audit(2000110817.537:35439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31834 comm="syz.7.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 444.921635][ T29] audit: type=1326 audit(2000110817.537:35440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31834 comm="syz.7.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9a9a5d19 code=0x7ffc0000 [ 444.981216][T31843] SELinux: syz.5.7748 (31843) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 445.206315][T31850] macsec0: entered promiscuous mode [ 445.212961][T31850] macsec0 (unregistering): left promiscuous mode [ 446.082952][T31888] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7766'. [ 446.091918][T31888] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7766'. [ 446.101146][T31888] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7766'. [ 446.142609][T31889] netlink: 'syz.5.7765': attribute type 1 has an invalid length. [ 446.169553][T31896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7768'. [ 446.179751][T31896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7768'. [ 446.191291][T31896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7768'. [ 446.276603][T31908] team0: Device ipvlan2 failed to register rx_handler [ 446.305568][T31914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7778'. [ 446.315884][T31914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7778'. [ 446.337109][T31914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7778'. [ 446.354188][T31919] SELinux: syz.6.7780 (31919) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 446.586680][T31934] netlink: 'syz.9.7786': attribute type 10 has an invalid length. [ 446.597467][T31934] team0: Device hsr_slave_0 failed to register rx_handler [ 446.924950][T31943] FAULT_INJECTION: forcing a failure. [ 446.924950][T31943] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 446.938283][T31943] CPU: 0 UID: 0 PID: 31943 Comm: syz.6.7788 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 446.949262][T31943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 446.959350][T31943] Call Trace: [ 446.962647][T31943] [ 446.965592][T31943] dump_stack_lvl+0xf2/0x150 [ 446.970223][T31943] dump_stack+0x15/0x1a [ 446.974413][T31943] should_fail_ex+0x223/0x230 [ 446.979217][T31943] should_fail_alloc_page+0xfd/0x110 [ 446.984789][T31943] __alloc_pages_noprof+0x109/0x340 [ 446.990021][T31943] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 446.995490][T31943] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 447.001150][T31943] handle_mm_fault+0xdd7/0x2ac0 [ 447.006036][T31943] exc_page_fault+0x3b9/0x650 [ 447.010748][T31943] asm_exc_page_fault+0x26/0x30 [ 447.015638][T31943] RIP: 0033:0x7f6d538b8c50 [ 447.020120][T31943] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 447.039746][T31943] RSP: 002b:00007f6d520664a0 EFLAGS: 00010202 [ 447.045925][T31943] RAX: 0000000000001000 RBX: 00007f6d52066540 RCX: 0000000000000003 [ 447.053973][T31943] RDX: 00000000000007e3 RSI: 0000000000000be4 RDI: 00007f6d520665e0 [ 447.061962][T31943] RBP: 0000000000000004 R08: 00007f6d49c47000 R09: 0000000000000002 [ 447.070035][T31943] R10: 0000000020000f02 R11: 000000000000052c R12: 0000000000000801 [ 447.078031][T31943] R13: 00007f6d53a88f60 R14: 0000000000000016 R15: 00007f6d520665e0 [ 447.086115][T31943] [ 447.089361][T31943] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 447.193725][T31951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7792'. [ 447.220929][T31953] netlink: 'syz.7.7793': attribute type 1 has an invalid length. [ 447.441624][ T3378] IPVS: starting estimator thread 0... [ 447.559256][T31970] IPVS: using max 2112 ests per chain, 105600 per kthread [ 447.869516][T31998] FAULT_INJECTION: forcing a failure. [ 447.869516][T31998] name failslab, interval 1, probability 0, space 0, times 0 [ 447.883540][T31998] CPU: 1 UID: 0 PID: 31998 Comm: syz.6.7809 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 447.894362][T31998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 447.904894][T31998] Call Trace: [ 447.908178][T31998] [ 447.911190][T31998] dump_stack_lvl+0xf2/0x150 [ 447.915829][T31998] dump_stack+0x15/0x1a [ 447.920006][T31998] should_fail_ex+0x223/0x230 [ 447.924757][T31998] should_failslab+0x8f/0xb0 [ 447.929371][T31998] __kmalloc_noprof+0xab/0x3f0 [ 447.934218][T31998] ? bpf_test_init+0xc7/0x170 [ 447.938910][T31998] bpf_test_init+0xc7/0x170 [ 447.943512][T31998] bpf_prog_test_run_xdp+0x321/0x8b0 [ 447.948876][T31998] ? __rcu_read_unlock+0x4e/0x70 [ 447.953833][T31998] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 447.959683][T31998] bpf_prog_test_run+0x20f/0x3a0 [ 447.964690][T31998] __sys_bpf+0x400/0x7a0 [ 447.969362][T31998] __x64_sys_bpf+0x43/0x50 [ 447.973975][T31998] x64_sys_call+0x2914/0x2dc0 [ 447.978684][T31998] do_syscall_64+0xc9/0x1c0 [ 447.983280][T31998] ? clear_bhb_loop+0x55/0xb0 [ 447.987984][T31998] ? clear_bhb_loop+0x55/0xb0 [ 447.992691][T31998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.998644][T31998] RIP: 0033:0x7f6d539f5d19 [ 448.003144][T31998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.022776][T31998] RSP: 002b:00007f6d52067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 448.031201][T31998] RAX: ffffffffffffffda RBX: 00007f6d53be5fa0 RCX: 00007f6d539f5d19 [ 448.039181][T31998] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 448.047162][T31998] RBP: 00007f6d52067090 R08: 0000000000000000 R09: 0000000000000000 [ 448.055155][T31998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.063130][T31998] R13: 0000000000000000 R14: 00007f6d53be5fa0 R15: 00007ffc991e4b18 [ 448.071152][T31998] [ 449.008282][T32096] ================================================================== [ 449.016423][T32096] BUG: KCSAN: data-race in n_tty_poll / tty_set_termios [ 449.023399][T32096] [ 449.025739][T32096] write to 0xffff88814018991f of 1 bytes by task 32097 on cpu 0: [ 449.025968][T32097] 0ªX¹¦Dö»: renamed from gretap0 [ 449.033462][T32096] tty_set_termios+0x3ee/0x8b0 [ 449.033500][T32096] set_termios+0x497/0x4e0 [ 449.047689][T32096] tty_mode_ioctl+0x391/0x5d0 [ 449.052375][T32096] n_tty_ioctl_helper+0x8d/0x240 [ 449.057327][T32096] n_tty_ioctl+0xfd/0x200 [ 449.061668][T32096] tty_ioctl+0x87a/0xbe0 [ 449.065926][T32096] __se_sys_ioctl+0xc9/0x140 [ 449.070533][T32096] __x64_sys_ioctl+0x43/0x50 [ 449.075397][T32096] x64_sys_call+0x1690/0x2dc0 [ 449.080087][T32096] do_syscall_64+0xc9/0x1c0 [ 449.084615][T32096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.090535][T32096] [ 449.092862][T32096] read to 0xffff88814018991f of 1 bytes by task 32096 on cpu 1: [ 449.100496][T32096] n_tty_poll+0x256/0x490 [ 449.104839][T32096] tty_poll+0x78/0xf0 [ 449.108837][T32096] __io_arm_poll_handler+0x1e5/0xd50 [ 449.114145][T32096] io_arm_poll_handler+0x3f6/0x5b0 [ 449.119278][T32096] io_queue_async+0x89/0x320 [ 449.123888][T32096] io_submit_sqes+0x9f3/0x1090 [ 449.128664][T32096] __se_sys_io_uring_enter+0x1b9/0x1ba0 [ 449.134332][T32096] __x64_sys_io_uring_enter+0x78/0x90 [ 449.139725][T32096] x64_sys_call+0xb5e/0x2dc0 [ 449.144333][T32096] do_syscall_64+0xc9/0x1c0 [ 449.148855][T32096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.154770][T32096] [ 449.157094][T32096] value changed: 0x01 -> 0x33 [ 449.161768][T32096] [ 449.164089][T32096] Reported by Kernel Concurrency Sanitizer on: [ 449.170239][T32096] CPU: 1 UID: 0 PID: 32096 Comm: syz.2.7846 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 449.181058][T32096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 449.191129][T32096] ================================================================== [ 449.208164][T32097] 0ªX¹¦Dö»: entered allmulticast mode