last executing test programs: 12m54.476031634s ago: executing program 32 (id=123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x45, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x200000}, {0x20, 0x0, 0x0, 0x20}, {0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) set_mempolicy(0x0, &(0x7f0000000240)=0x80, 0x29) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) (async) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) socketpair(0x11, 0x1, 0x2000, &(0x7f0000000000)) (async) socketpair(0x11, 0x1, 0x2000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) (async) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) epoll_create1(0x0) (async) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x20000014}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) close_range(r5, r6, 0x0) (async) close_range(r5, r6, 0x0) close(0x3) (async) close(0x3) 12m24.252933764s ago: executing program 33 (id=316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setpriority(0x0, 0x0, 0x7) r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000440)=""/30, 0x1e, 0x80000000, &(0x7f0000000480)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setpgid(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r4 = socket(0xa, 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/igmp\x00') r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) pread64(r5, &(0x7f0000000240)=""/76, 0x4c, 0x33c) close_range(r3, r4, 0x0) 11m32.520076919s ago: executing program 34 (id=1116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_io_uring_setup(0x237, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0x752, 0xfffffff9, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x48, 0x0, 0x0, 0x172}, {0x6, 0x0, 0x0, 0x7}]}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 11m2.442540557s ago: executing program 35 (id=1698): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x8, 0x5, 0x4e0, 0x0, 0x0, 0xffffffff, 0x320, 0x320, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1, @ipv6=@empty, @gre_key}}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}}, @common=@hl={{0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @gre_key, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) 10m54.938946944s ago: executing program 36 (id=1808): unshare(0x28040680) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') unshare(0x2a020480) (async) unshare(0x2a020480) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="403548193b31c3c44e4ba172c50521f52d7eb00e1d654748cc51b5c2ab62e0000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r0) (async) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r2, @ANYBLOB="00012dbd7000fddbdf2503000000050005000200000008000300fbffffff0800020000800000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r2, @ANYBLOB="00012dbd7000fddbdf2503000000050005000200000008000300fbffffff0800020000800000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) msync(&(0x7f0000983000/0x1000)=nil, 0x1000, 0x4) socket(0x840000000002, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x635, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x4000000001, 0xe}, 0x1184c, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x66, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x66, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x3, 0xa1098, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0xf}, 0x808, 0x2, 0x7ffffffc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000030000000003000004020000000000000000000000000000019a94c17bd9a0542571dfbd853f05c8a18385214f2a34cb4b5f60d7781e63eae20829b98eba36a1fcfc68b4c73d3c47b8f44daa741cb10234b4b76b3698ddb5ce06f60323cc818dc26208c76ef717028f2b6e"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x20000000, 0x1, 0x80000001}}, 0x120) write$UHID_DESTROY(r8, &(0x7f0000000080), 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0xf, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0xf, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) unshare(0x22020600) 10m38.283747913s ago: executing program 37 (id=2238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r4], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x40, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRESOCT=r6, @ANYRES16=r2], 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r10}}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r12, 0x0, 0x1d}, 0x18) r13 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r13, 0x65, 0x1, 0x0, 0xf00) 10m7.696990538s ago: executing program 38 (id=2449): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffeffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010328bd7000fedbdf251c", @ANYRES32], 0x20}}, 0x10) 8m42.901025077s ago: executing program 39 (id=3899): creat(&(0x7f0000000100)='./file0\x00', 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) 7m37.957749496s ago: executing program 40 (id=4738): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 6m17.9045263s ago: executing program 41 (id=5716): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x301, 0x0, 0x0, {{0x32}, {@void, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]]}, 0x28}}, 0x0) 5m44.234858883s ago: executing program 42 (id=6200): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 5m5.73583117s ago: executing program 8 (id=6645): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2682000000000, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x1af41, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7fff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x49}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4000, 0x0, 0x101}}) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r6, r5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800f5979500"/20, @ANYRES32=r7, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r8, 0x0, 0x20000000}, 0x18) lsm_set_self_attr(0x66, 0x0, 0x40, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kmem_cache_free\x00', r9, 0x0, 0x8}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x44) r12 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000000)={0x3, 0x5, 0x3}) preadv(r12, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}], 0x1, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="084003c28527f997eb577300000000000000", @ANYRES32=0x0, @ANYBLOB="0c0099000200000003000000"], 0x28}}, 0x40) 5m4.113269184s ago: executing program 8 (id=6647): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgget$private(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f0000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r2}, 0x18) sysinfo(&(0x7f0000000280)=""/171) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)={0x44, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x8, 0x1) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000240)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) 5m3.495507623s ago: executing program 8 (id=6652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) 5m3.488242973s ago: executing program 8 (id=6653): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ab5ae6ee5b26841c28bcc0c3"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x4c, &(0x7f0000000000)=0xb, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000440)='./file1\x00', 0x1004088, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYBLOB="4dad321c5bb445e7666c772d50ccdcd979f2e2031660c7d62b07ec2915334ae578d7ee3056e9b90e84ec7d3f1e29256c6875d3cd420e435379656ba3063ba1ac62b2abb242c133a68eb664ee4a624c6993862e52a79d52a74f84c637bf476fc37e2a24aae6afe5b9b9021fa4b011703c9a46428afd68256b2c6bacb3288a02496b85146cbcd20569b2de0c66d336fbfc8fc8c64ad14390e99fcaa7cf59211ce4078bd5bee01d52f60e8a653d1ddb4da7a4d045b9a5f3f18f0558b96908dca40b826763655507628c6b1a7f9c4ce31f4b4b0ec9a4676121d02a5c5edc745395ff5cecc640b0b706b3", @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0], 0x0, 0x7cf, &(0x7f0000003380)="$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") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000100)) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) io_setup(0xfffffffe, 0x0) eventfd2(0x1, 0x80800) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r5, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) eventfd2(0x401, 0x80800) open(&(0x7f0000000200)='./file0/file0\x00', 0x200000, 0x0) recvmmsg(r1, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002020, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "071182", 0x8, 0x11, 0xff, @private1, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) 5m3.298026456s ago: executing program 43 (id=6654): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r2 = io_uring_setup(0x29dc, &(0x7f0000000000)={0x0, 0x59cc, 0x2000, 0x3, 0x1e1}) r3 = syz_io_uring_setup(0x11da1, &(0x7f00000000c0)={0x0, 0x8870, 0x40, 0x2000000, 0x2d4, 0x0, r2}, &(0x7f0000000f80), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000340)=0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYRES64=r11], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x40, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x30, &(0x7f00000003c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd9, &(0x7f0000000240)=""/217, 0x41100, 0x60, '\x00', r7, @fallback=0x3a, r8, 0x8, &(0x7f0000000580)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xf, 0xffff, 0x5}, 0x10, r12, 0xffffffffffffffff, 0x2, &(0x7f0000000740)=[r13], &(0x7f0000000780)=[{0x3, 0x4, 0x2, 0x5}, {0x4, 0x2, 0x9, 0x1}], 0x10, 0x2, @void, @value}, 0x94) 5m3.171340778s ago: executing program 8 (id=6657): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2682000000000, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x1af41, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7fff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x49}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4000, 0x0, 0x101}}) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r6, r5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800f5979500"/20, @ANYRES32=r7, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r8, 0x0, 0x20000000}, 0x18) lsm_set_self_attr(0x66, 0x0, 0x40, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kmem_cache_free\x00', r9, 0x0, 0x8}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x44) r12 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000000)={0x3, 0x5, 0x3}) preadv(r12, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}], 0x1, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="084003c28527f997eb577300000000000000", @ANYRES32=0x0, @ANYBLOB="0c0099000200000003000000"], 0x28}}, 0x40) 4m59.141093668s ago: executing program 5 (id=6699): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000008000000020000000400000005", @ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000280), 0x6, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000001b40)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x600803, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r9, 0x0, 0xffffffffffffffff}, 0x18) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x2c, r10, 0x1, 0xd0, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) sendfile(r7, r7, 0x0, 0xfffe80) 4m59.092514699s ago: executing program 5 (id=6700): r0 = syz_io_uring_setup(0x1da1, &(0x7f00000000c0)={0x0, 0xc9dc, 0x40, 0x2000000, 0x2d4}, &(0x7f0000000f80), &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x8, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0xe8, 0x300, 0x3e8, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0xc0, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x10000}}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {}, 0xfffa, 0x6, 0x7, 0x0, 0xb2, 0x6, 'veth1_to_bond\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote, 0xd, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) 4m58.856930413s ago: executing program 5 (id=6706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20008844) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x8000) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) 4m58.828290663s ago: executing program 5 (id=6707): r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file1\x00'}) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x200, &(0x7f00000001c0)={&(0x7f0000000200)=""/126, 0x7e}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003580)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000300)=0xbc) fstat(r0, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000800)={0x2dc, 0x19, 0x20, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0xbe, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="4ba629291144ab7232edc57e2d6d5003fe1bec4d0f402f16e94b44b4d88d153ccbccd00a3d8f4867ecb042e37c254e7f9b9be7e62bd038a3575779cd0b957d18054520c0803e023f1b3809dc310edc3dbbc83b564be8cc3a022dc53965007f279d85ac181151fa63828ca77d3007df70c2c0995c3b635995cbabad2524c3fc4370bae959e4ab8adcd9b49de629b85fdccd060e1a1285670a6185027c2ff9c4d2c9032359df5f1a819db4ad8af802ea92f0460780172fafedefd734517c96b1bdd28f73be1559fb12e71c197837f93175c16676878fed248c", @nested={0x100, 0x127, 0x0, 0x1, [@nested={0x4, 0x27}, @typed={0x5, 0x10d, 0x0, 0x0, @str='\x00'}, @generic, @generic="cc7c27c6c59f4ba1b253edc0986f4618923c714dddefb5f2b96dbd598c10a44e19c579cfb5b05041ccc911f5cc25d6e54528290b953472ffad80158ca4012575739fa65a1964199c1713e5aad4f944c5ebfac7", @generic="1a266a42fa3a9db84618bc418b6c1cdf733076aa3511e5f88083b66730213a98ee2ef4b273bf930e1c52e415cac7dd30225a069c88a7b76fc483666f63c8d743590577a122f168160adc60df0c7413dfcfc38e8bc853c189c8bf5a172847a69467bba9b8de73a6d333f8f5d322efbb63ffee253f429d851deecebf432b81314b77d392dca9c5aac8610c76c9476b63a7818138071ad42f0f2424c52abc"]}, @typed={0xec, 0x8f, 0x0, 0x0, @binary="63c22313b81d00585e6115b7e29f9a3975ab30acbb91df973a45110351e56a5da3c53a33be21c9bc8601febe88fec145d97e8658330a5f812af5531dbc2fa43558f71398eb89061b9cd1dc05363f53f8cee9bd1e68790820eb3051fe225509966cf9390e1b4793bb46f8568a065558ec5775b860934cbe8ce601ddb602bd12ffce1cd17c7c6b5342310e5a7bf548221db9211f56fd2def84b48dedd82f44c169ae7e01e01f8a1453dfdeb9a46d55c52c190fa2d81834c30db265d96da1da11547babd34d1197c38829a03340306e5c4e69ee9a688924b22282b2586e77d37949200436cf31a18cf2"}]}, 0x2dc}, {&(0x7f0000000c80)={0x1f4, 0x3e, 0x300, 0x70bd26, 0x25dfdbfb, "", [@nested={0x1e4, 0xdf, 0x0, 0x1, [@typed={0x79, 0x30, 0x0, 0x0, @binary="f8f9964b5dc84a24f28b100cfcab888ae1d28ee970bfad24604cc6958562271156dee2bc4c6ba3ace79ecd292aafb477cf5979e8793e6e1b6466833f5666b75802bb7abf948909c01bcdf6e083a09716b5927ae349e9ef00d4b55114d209fad9201bd2bc0d2508a16015cf81b227b39b48e63b0a64"}, @nested={0x4, 0xcc}, @nested={0x15e, 0x19, 0x0, 0x1, [@nested={0x48, 0x33, 0x0, 0x1, [@generic="49828b14735624233e3e40518e3b49ba8efcfd3b1886741d9e7e7283da52788feff6c42eb2355c82735b491bb6b78104f7b139e950fc324c8b5d959a96a7ace0", @nested={0x4, 0xb4}]}, @generic="5b5e5af4fb5120b6d725c5b010e896ec636cab29de1a9c713c427de94123ddaf10ee9a611cc1f0259da928f17696635c1d5cf0d4ee2181306eba79b6b0", @typed={0x11, 0x77, 0x0, 0x0, @str='cgroup.procs\x00'}, @generic="8f4b36930e258e500cd7fbd246cbf53b8c00aff0694f85e1cac7e8c0d2c46409bcc7156ccccb78a74414880c4ee24dc8d748daa6f4", @typed={0x14, 0x13d, 0x0, 0x0, @ipv6=@remote}, @generic="e49bff69300d07016339c15ec352e7284daaa5abeda524fb45d51fa8d464690cfb857ca3e5220ca284a2d6913076e0b5d69a37c159b5707c867f0e8cd5c4a4c5abfefc453061a14158fb35d9d5d248e60b108ce46cc05e58e1d388118b17043b1a960ac45eea0fc3c72485180d9ceefe527841765c184c79"]}]}]}, 0x1f4}, {&(0x7f0000000380)={0x190, 0x26, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x5, 0x13, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x6a, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @u32=0x5}]}, @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@local}, @nested={0xbf, 0x10b, 0x0, 0x1, [@generic="5d67679bc494864bd7809a0358ca23ac7ec26b1cf35f4a0ac1b7bd3c0b8df78c1cbcc4e5550d4957f33b3126ef4044", @typed={0x85, 0xc6, 0x0, 0x0, @binary="1236401e7ca811ca903b52139091f89a65f4504365591301e240c5d5d0e3e33f7e3f331efd3bcc83458839abdb46be4461b6b236f1efb1fc352c058088aa87a6b1ab82ee0536639b451307e4079d551516eec652968362c71bc5fbfc4e60160357105d4731c02ecf487c45a138a499b5333c48349d1ceab21475c8b6135161b347"}, @nested={0x4, 0x146}]}, @generic="f5ecc0efa92a090f7b24189757fb9fffd5c83a91896354c13725f9ef9583f940bef7acf8aaa80ac6b2d27f5c284f4cd9e1aaaa89aca26fa78027de7dc3ebb13bf3aa5a424b7417fe8bcfb72cf4d9a1d3d2b73a2f29b2c416fd8fba8e10d763f22d41ced3f5d6de83425089878eee3a653726b0bf04e77b11d24f0ffba600cca1085d9126c0b53ba2e8d67c2141bce71240b2ce0c6a758a47b33cb966b9728d19a0"]}, 0x190}, {&(0x7f0000003700)=ANY=[@ANYBLOB="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"], 0x11e4}, {&(0x7f0000002140)={0x24, 0x29, 0x400, 0x70bd25, 0x25dfdbff, "", [@nested={0x4, 0x70}, @typed={0x8, 0x4a, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}, 0x24}, {&(0x7f0000001ec0)={0x244, 0x14, 0x1, 0x70bd2a, 0x25dfdbff, "", [@nested={0x16f, 0xec, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @pid=r3}, @typed={0xc, 0x13, 0x0, 0x0, @u64=0x7d}, @generic='S', @typed={0x14, 0xa8, 0x0, 0x0, @ipv6=@local}, @typed={0x9, 0xc4, 0x0, 0x0, @binary="ab02cf5b9e"}, @generic="f5c875ce4ecdc586c3318627bfc0c9de3100deb8f45a6be373389039987223a227c21e81f19531a3650859a26f3651bd1e70d878b64a71bcdb825c5a2ac2ff876faba3ab0c3856b69388085905639188498991716f70846b4aec1a60984eec78029762a30898d2af12bf387f2a476078826bd22b831ce245548a9de6aebfd1abc3d4ccad3c4b6eef5806", @typed={0xaa, 0xd7, 0x0, 0x0, @binary="93a9bf2e823fbe8d8b007b1333b62f204e6b6a8616a2d236215710a2712762f28629661e9622788ecd6c53cf5f77c4dd6bc2fc4ec2fd2eadb85487a1c7a1b335216ca2ab17e9d8ce21bd781c739df826dc438ac156f6bdfdde6dbf4b96232dad18c37dfe0aed4598772d860b1c53eda6f1518966e6aacff923bcd997afa3d9941e5d02ae0e8ee4d3529d99a0e0e977ab26273f3730940ebea671b6d6d7ac76d9b6800d90b272"}]}, @generic="6c0e25b059b832b9f5cc188b12d9d9b8f103a796260e04ce6bcb8ec756ab6f72411c879d5c0f3a7472305aba56653eeda8a62d29eaf95a35ecb42751bedf7cd5b12ced92580f29fd35040c33b3da91d69a128759a040b6709865ba8c2292c32bf588869b7b21fe56a9eb071a51080d28501b6f56d1760ebe2ab5af5018579f2d8973d67d8f90bd6f3d7c2773f0cbc2663d3856a55810f879013506d17d5e3052e56bfb76e2ff081b611b38abffcdb577506681f4ffa4e17b069ee3c22b44632d2c6268ab"]}, 0x244}, {&(0x7f0000000600)={0xb8, 0x17, 0x200, 0x70bd26, 0x25dfdbfd, "", [@generic="ef4bbdb2876b7e322ff1c1b8e6b2c36c7195615ce7eaa61768620c022231af6442d5226d5c5da9c45d46ca1810f50cf7405877a772a280db4ea806bec82e5a58942b8d2c946df9568a27679c876a1194a0730de453fde11883bfde3dd7d18ef353fca52205e46f2fb7f48bfc9ea96dda6b8428f80493a25e7d3ce3d3693eed28490f76fbf742d5ab24349a650df1e5673c5eeef7d7801de96ab031e8ee1e6890af", @typed={0x4, 0xec}]}, 0xb8}, {&(0x7f0000001bc0)={0x190, 0x19, 0x8, 0x70bd25, 0x25dfdbff, "", [@nested={0x160, 0x11f, 0x0, 0x1, [@typed={0x8, 0xd8, 0x0, 0x0, @ipv4=@remote}, @nested={0x148, 0x13e, 0x0, 0x1, [@nested={0xa1, 0xd1, 0x0, 0x1, [@generic="2cea6c0f03ab08a943276dedc5739506d96f7181a0a3a12d65c7e78dff715c5545efa5d3e2", @nested={0x76, 0x8c, 0x0, 0x1, [@generic="dd32cf0e0466ac001ba37786f000e18342a105f1393c6bab16cac24631b98b88", @typed={0x8, 0x71, 0x0, 0x0, @fd=r0}, @typed={0x6, 0xa2, 0x0, 0x0, @str='#\x00'}, @typed={0x14, 0xf8, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="19651af275c840b2e58aca7c60be5443c3dbe1d0b91bb5eecff4058655e4a461565f6ae27eae73aceb7b82989e23"]}]}, @generic="000ee75f86a6ba19bd5503c214b40ac15a026adf2f0b634c3fd1692db4f4f5618934a734bcf6f6cbd4dcf888ccce34adf9d4ad8ba29ca9df2f56485649fd504f4eb3425f9a5d7071260003b64e071fff31409c9d7091508604b9e738f6a4110a1918a7e3ecd9c9ad9e8f93ed3ff35e82aeadf1d17eb286e29f163223c159c2e063432057b6516e0928e5add0ff42ed2cd8e20d63d75a210ae3cbcd7f9adfc977"]}, @nested={0x4, 0x4d}, @nested={0x4, 0x91}, @nested={0x4, 0x113}]}, @generic="63a8293000adc79b328229e24787b4d01efbe22a7f332a", @typed={0x8, 0x147, 0x0, 0x0, @u32=0x9}]}, 0x190}, {&(0x7f0000003240)=ANY=[@ANYBLOB="5400000002000000fcdbdf2514001200fc0000000000000000000000000000011400d100000000000000000000000000000000001c00058004000b0014000b00200100"/84], 0x54}, {&(0x7f0000003400)={0xa8, 0x17, 0x4, 0x70bd27, 0x25dfdbfe, "", [@generic="ce0dcdd0a389aa4aee0817dde431c50b048bf40a727802f95068bdfe8024e4688112d07faf95349284b95a45f2bebc5c8f4a2dd41f4466ce203d84ba98184f05349c9a83bb74be12980716d6b65a863d99e230e2a0822763719dd43c9ec7973e26966c49a7326cc4459b6e1b0bf40f8ef28e732a348f868906661caacf00f9ce51e67500c79f2607d070c5ab98b5c6b870a350745a"]}, 0xa8}], 0xa, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x40004}, 0x4008084) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, 0x0, &(0x7f0000000040)=0xd77ca50315b7ef2e) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) timerfd_create(0x8, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x80000000000}, 0x18) r10 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000140), 0x12) r13 = openat$cgroup(r11, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r13, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) 4m58.661501565s ago: executing program 5 (id=6711): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x1000, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x8b, 0x33, 0x0, @rand_addr=0x64010102, @broadcast, {[@ra={0x94, 0x4}]}}, "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"}}, 0xfce) 4m58.39050345s ago: executing program 5 (id=6718): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x29, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x20040, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x2, 0x8}}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @private=0xa010102}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x44050) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x1, 0x1, {{0x26, 0x4, 0x2, 0x2a, 0x98, 0x67, 0x0, 0x2, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x23, 0x0, [{0x2, 0xf, "626e4d23221ac83ec4900d21b9"}, {0x0, 0x8, "c674a2de7d77"}, {0x2, 0x3, ']'}, {0x0, 0x3, '5'}]}, @ssrr={0x89, 0x13, 0xe9, [@rand_addr=0x64010101, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast]}, @rr={0x7, 0x1f, 0x9a, [@local, @private=0xa010101, @rand_addr=0x64010102, @rand_addr=0x64010100, @remote, @rand_addr=0x64010101, @multicast2]}, @timestamp_addr={0x44, 0x2c, 0x25, 0x1, 0x5, [{@remote, 0xfffffffb}, {@broadcast, 0x1}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x45}, {@local, 0x18000000}]}]}}}}}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x6, 0x8, 0x8, 0x0, 0x75, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, 0x4760, 0x8, 0x3, 0x3a}}) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="4c866d49b2d823921c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2, 0x9, 0x1, 0x3, 0x21, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8000, 0x6, 0xe}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x2, 0x8, 0x1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x700, 0x8, 0xff}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x1, 0x8000, 0x5, 0xfffffff9, {{0xd, 0x4, 0x3, 0x6, 0x34, 0x67, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xbe, [@local, @dev={0xac, 0x14, 0x14, 0x2f}]}, @generic={0x82, 0xe, "7a4b8a9244420ff87978def9"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000940)={'gretap0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x7, 0x8, 0x7, 0x8, {{0x2e, 0x4, 0x0, 0x5, 0xb8, 0x64, 0x0, 0x7e, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010101, {[@timestamp_addr={0x44, 0x14, 0x40, 0x1, 0xe, [{@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x11, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x4}, {@loopback, 0x314b}, {@local, 0x8000}, {@rand_addr=0x64010101, 0x7fffffff}]}, @timestamp_prespec={0x44, 0x3c, 0x81, 0x3, 0x2, [{@private=0xa010101, 0x20000}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8c}, {@private=0xa010100, 0xf}, {@multicast1, 0x80000000}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x5}]}, @end, @end, @ssrr={0x89, 0x7, 0xa, [@multicast1]}, @timestamp_prespec={0x44, 0x1c, 0x23, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x3}, {@multicast1, 0x2}, {@remote, 0x9}]}, @ra={0x94, 0x4}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000a40)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000ac0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000001200)=ANY=[@ANYRES32=r13, @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf250d0000004c00018014000200766574683000000000000000000000001400020076657468315f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="00000000882135375d9d31ab22d62f6189e807c78aea15be68a6a700433fe8b37250fa604b7db18f8611c9e34dee22c56e7afea274d932e9cd3f7cc53dec26f4e49adc480c00dd4c59b409d890b1dd09c1c80a0b581aa470088545accb0d417b49cb8cac24bd81ada914ee84d3d4ada1a7246c06b1b83bf71e0463765f328bac6eb952cb1fb4d678d322", @ANYRES32=r4, @ANYBLOB="080003000000000008000300010000004000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400020070696d7265670000000000000000000064000180140002006272696467655f736c6176655f310000140002006873723000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="140002006261746164765f736c6176655f31000008000300030000001400020070696d367265673000000000000000002400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080003000100000008000100", @ANYRES32=r10, @ANYBLOB="4c000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a6b616c6c65723100000000000008000300020000001400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="4400018008000100", @ANYRES8, @ANYBLOB="1400020074756e6c300000000000000000000000080003000000000008000300010000001400020070696d3672656730000000000000000048000180080003000200000008000100", @ANYRESHEX=r4, @ANYRESDEC=r3, @ANYRES32=r14, @ANYBLOB], 0x20c}}, 0x4000000) close(r4) pipe2$9p(&(0x7f00000000c0), 0x80080) r15 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0xfffffffffffffddb, &(0x7f0000000f00)={&(0x7f0000000b40)=ANY=[@ANYRES8=r6, @ANYRES32, @ANYRESDEC=r1], 0x70}, 0x1, 0x0, 0x0, 0x40288c1}, 0x800) sendmmsg$inet(r15, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) 4m58.338621871s ago: executing program 44 (id=6718): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x29, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x20040, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x2, 0x8}}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @private=0xa010102}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x44050) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x1, 0x1, {{0x26, 0x4, 0x2, 0x2a, 0x98, 0x67, 0x0, 0x2, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x23, 0x0, [{0x2, 0xf, "626e4d23221ac83ec4900d21b9"}, {0x0, 0x8, "c674a2de7d77"}, {0x2, 0x3, ']'}, {0x0, 0x3, '5'}]}, @ssrr={0x89, 0x13, 0xe9, [@rand_addr=0x64010101, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast]}, @rr={0x7, 0x1f, 0x9a, [@local, @private=0xa010101, @rand_addr=0x64010102, @rand_addr=0x64010100, @remote, @rand_addr=0x64010101, @multicast2]}, @timestamp_addr={0x44, 0x2c, 0x25, 0x1, 0x5, [{@remote, 0xfffffffb}, {@broadcast, 0x1}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x45}, {@local, 0x18000000}]}]}}}}}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x6, 0x8, 0x8, 0x0, 0x75, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, 0x4760, 0x8, 0x3, 0x3a}}) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="4c866d49b2d823921c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2, 0x9, 0x1, 0x3, 0x21, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8000, 0x6, 0xe}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x2, 0x8, 0x1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x700, 0x8, 0xff}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x1, 0x8000, 0x5, 0xfffffff9, {{0xd, 0x4, 0x3, 0x6, 0x34, 0x67, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xbe, [@local, @dev={0xac, 0x14, 0x14, 0x2f}]}, @generic={0x82, 0xe, "7a4b8a9244420ff87978def9"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000940)={'gretap0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x7, 0x8, 0x7, 0x8, {{0x2e, 0x4, 0x0, 0x5, 0xb8, 0x64, 0x0, 0x7e, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010101, {[@timestamp_addr={0x44, 0x14, 0x40, 0x1, 0xe, [{@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x11, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x4}, {@loopback, 0x314b}, {@local, 0x8000}, {@rand_addr=0x64010101, 0x7fffffff}]}, @timestamp_prespec={0x44, 0x3c, 0x81, 0x3, 0x2, [{@private=0xa010101, 0x20000}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8c}, {@private=0xa010100, 0xf}, {@multicast1, 0x80000000}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x5}]}, @end, @end, @ssrr={0x89, 0x7, 0xa, [@multicast1]}, @timestamp_prespec={0x44, 0x1c, 0x23, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x3}, {@multicast1, 0x2}, {@remote, 0x9}]}, @ra={0x94, 0x4}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000a40)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000ac0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000001200)=ANY=[@ANYRES32=r13, @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf250d0000004c00018014000200766574683000000000000000000000001400020076657468315f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="00000000882135375d9d31ab22d62f6189e807c78aea15be68a6a700433fe8b37250fa604b7db18f8611c9e34dee22c56e7afea274d932e9cd3f7cc53dec26f4e49adc480c00dd4c59b409d890b1dd09c1c80a0b581aa470088545accb0d417b49cb8cac24bd81ada914ee84d3d4ada1a7246c06b1b83bf71e0463765f328bac6eb952cb1fb4d678d322", @ANYRES32=r4, @ANYBLOB="080003000000000008000300010000004000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400020070696d7265670000000000000000000064000180140002006272696467655f736c6176655f310000140002006873723000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="140002006261746164765f736c6176655f31000008000300030000001400020070696d367265673000000000000000002400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080003000100000008000100", @ANYRES32=r10, @ANYBLOB="4c000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a6b616c6c65723100000000000008000300020000001400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="4400018008000100", @ANYRES8, @ANYBLOB="1400020074756e6c300000000000000000000000080003000000000008000300010000001400020070696d3672656730000000000000000048000180080003000200000008000100", @ANYRESHEX=r4, @ANYRESDEC=r3, @ANYRES32=r14, @ANYBLOB], 0x20c}}, 0x4000000) close(r4) pipe2$9p(&(0x7f00000000c0), 0x80080) r15 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0xfffffffffffffddb, &(0x7f0000000f00)={&(0x7f0000000b40)=ANY=[@ANYRES8=r6, @ANYRES32, @ANYRESDEC=r1], 0x70}, 0x1, 0x0, 0x0, 0x40288c1}, 0x800) sendmmsg$inet(r15, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) 4m58.124739044s ago: executing program 8 (id=6729): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080008"], 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m58.040482005s ago: executing program 45 (id=6729): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080008"], 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m6.722042818s ago: executing program 1 (id=8301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="340000002e0001002ab77d343a634091ed700000", @ANYRES32, @ANYBLOB="1c0000801800318011001d"], 0x34}], 0x1}, 0x0) 3m6.640049439s ago: executing program 1 (id=8302): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00'}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x200) eventfd(0x200d) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/asound/seq/clients\x00', 0x41, 0x0) r5 = socket(0x229f7d3a4b31866b, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc820000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x6}}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x0, 0x400, 0x6, 0xfffffffd, 0x0, 0x40, 0x2000000, 0x0, 0x6, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f0000000480)={{0x80}, 'port0\x00', 0x29, 0x16002c, 0xffc, 0x4, 0x40002, 0xfffffffd, 0x7, 0x0, 0x0, 0x3}) close(r1) 3m6.236860166s ago: executing program 1 (id=8304): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x9c, 0x0, 0xfc}, {0x6}]}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000c61c2975cc36db2bb022ccfff4598fe6b38a7b5ec458a013962d441de3ef08552058a632ff8390709f5d4f5fa39b614cf24d35697dcdf641c452ce0cee0a962d6b339bc73d98fb87f8ef118fa4977a6d38e40fbc451efac292ae6c99fc151c24d540fc63cd017b9ca3e24a41408f5024382ac3d839cf2588223879850100000000000000d98344de64", @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) mbind(&(0x7f0000188000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x1, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x3, 0x3, {0x0, 0x7f}, 0x2, 0x2}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0) 3m5.582504486s ago: executing program 1 (id=8313): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff7fffffffffefe, 0xa5d7}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xfff8, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r2, 0x0, 0x8000000000}, 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) r5 = socket(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb, @void, @value}, 0xe4) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 3m5.437664008s ago: executing program 1 (id=8318): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xeb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x6}, 0x18) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) close(r3) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000440)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="ec00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 3m5.037300654s ago: executing program 1 (id=8319): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) 3m5.037050404s ago: executing program 46 (id=8319): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) 2m32.638597698s ago: executing program 7 (id=8636): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x4, {}, [{0x4}]}, 0x18}}, 0x0) 2m31.961053058s ago: executing program 7 (id=8638): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xeb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) execve(0x0, 0x0, 0x0) 2m31.875798939s ago: executing program 7 (id=8639): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) get_robust_list(0x0, &(0x7f0000000680)=0x0, &(0x7f00000006c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000000)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3], 0x20) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000006a0001002abd1a264a4ddf4b20f9ac0000000000b3e2684ef185f2046e986ac1a83adbcb56700520b2dbde3066"], 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x408, 0xffffffff, 0x128, 0x210, 0x128, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x3, 0x3}}}, @common=@ah={{0x30}, {[0x4d5, 0x4d4], 0x400, 0xf, 0x3}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x2e, "9e50e180d9ffcedb6518520b74f6b174eb4ee0d8edc60e63e51d9f5c1fdf"}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x40}}, @common=@srh={{0x30}, {0x2b, 0xc1, 0x1, 0x40, 0xb, 0x2000, 0x1000}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 2m31.726827402s ago: executing program 7 (id=8646): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES64=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) unshare(0x22020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1830000012800000000000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x409, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@generic={0x94, 0x2}]}}, {{0x0, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x9}}}}}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x103000, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) getresuid(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) finit_module(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x2) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000000)={[{@nogrpid}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x28}}, {@minixdf}, {@jqfmt_vfsold}, {@quota}]}, 0x3, 0x444, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2m31.021698343s ago: executing program 7 (id=8656): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) eventfd(0x200d) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000010000000000000e5b2d7d1e2f15ee34e6ab1e3940739678c420500000000000000b5adc9c4a67ca55f6fbb67bb4c7ea81058727947c89ac70422dee9b68a"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) kexec_load(0x0, 0x0, 0x0, 0x0) 2m29.686491264s ago: executing program 7 (id=8665): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [{@hash}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, 'GPL\x00'}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, 'kfree\x00'}}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_appraise}], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [{@hash}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, 'GPL\x00'}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, 'kfree\x00'}}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_appraise}], 0x6b}}) 2m13.478503926s ago: executing program 47 (id=8665): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [{@hash}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, 'GPL\x00'}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, 'kfree\x00'}}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_appraise}], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [{@hash}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, 'GPL\x00'}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, 'kfree\x00'}}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_appraise}], 0x6b}}) 35.239200492s ago: executing program 9 (id=10221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x40000}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0xbe, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f00000001c0), 0x8, 0xbc, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0x10001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r2, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000980)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0], 0x0, 0xaa, &(0x7f0000000bc0)=[{}, {}], 0x10, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) r9 = open(&(0x7f0000000e00)='./file0\x00', 0xc0000, 0x21) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000001380)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095", @ANYBLOB="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", @ANYBLOB="49ac9cbd49c2a41ac3a661a0fda50ada9d1567ea5ff2936a13ff55fa931925b85c1c536fefbeb7844fcc78e118cb30d11a54cb304a0a9f085ab2113d38bd3b291ecdf97da40c7b9cf1cec392ec08395eabaf66581e2e23a634c7300d0552e0d182e15d431e370906991a0220cd360496ec83ba15cc1ce0dd5a1b9ebcd64593a4538cee55dab6ea346b742cc1b29fcfe360bfa41c48471fd3ea78"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$SG_GET_LOW_DMA(r12, 0x227a, &(0x7f0000000000)) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1b0000000000000000000000ffff000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000001000f60b000000006dc65fbee52673830219e6a4d01d9a5639bb89f1a036679336cf2297ccf45b5e0f758ee0410fa8edb1e54747bf17a0d1952df497b1243886aa81a52b2ea314c578e40bee3273a83278b3ce429cb36a18f14680fda9539a48010000000000000005a6a033187e4973ac901335832e928dece818b795e9d5fe4dd6f777ff0d98f6b740b3f03c4d8c82b405fd2b44d5eee980fa2b49253680e660431313a4c970cd616d03290ec8a765368234420b3de0dd30e2143c8e3a6e444633aa7d9c1320e69a0a915e60", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000100"/28], 0x50) r14 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r14, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r14, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r15, &(0x7f0000000000), 0xffffff6a) sendfile(r14, r15, 0x0, 0xffffffff000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ec0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x12, 0x1a, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcc4b, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x200, 0x83, &(0x7f0000000680)=""/131, 0x41100, 0x62, '\x00', r6, @fallback=0x1f, r7, 0x8, &(0x7f0000000940)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, r8, r2, 0x8, &(0x7f0000000f00)=[r9, r10, r12, r13, r15, r16], &(0x7f0000000f40)=[{0x1, 0x3, 0xb, 0x1}, {0x5, 0x2, 0x10, 0x7}, {0x1, 0x4, 0x5, 0x7}, {0x4, 0x3, 0x2, 0x9}, {0x5, 0x4, 0x10, 0x9}, {0x1, 0x5, 0xb, 0x8}, {0x3, 0x1, 0xa, 0xb}, {0x805, 0x5, 0xf}], 0x10, 0x200, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100"], 0x118}}, 0x0) 34.186606028s ago: executing program 9 (id=10238): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112920000000000bf200000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 33.929099932s ago: executing program 9 (id=10245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000b1f7c39a00ef3e01", @ANYRES32=0x0, @ANYBLOB="fffffeff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x2c97, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r5}, 0x10) r6 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r6, 0x19, &(0x7f0000000040)={0x8, 0x80000000, 0x9}, 0x0) r7 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x88) openat(r8, &(0x7f0000000340)='.\x00', 0x0, 0x131) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r9 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 33.620010777s ago: executing program 9 (id=10249): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8, 0x7f}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x4, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pidfd_getfd(0xffffffffffffffff, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) accept4(r1, 0x0, 0x0, 0x80000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r5 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x10000000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x40047211, &(0x7f00000000c0)) 33.221977703s ago: executing program 9 (id=10253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$sock(r2, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)='3', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, @perf_config_ext={0x2, 0xe23a}, 0x108282, 0xffffffff, 0x6, 0x5, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2e, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 32.690526322s ago: executing program 9 (id=10256): r0 = syz_clone(0x2200700, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000540)={0x0, 0x9ea}, &(0x7f0000000600)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendfile(r9, r8, 0x0, 0x17) r10 = socket$can_raw(0x1d, 0x3, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r11, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r10, &(0x7f0000000200)={0x1d, r12}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r12, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r13 = syz_open_procfs(r0, &(0x7f00000002c0)='net/xfrm_stat\x00') writev(r13, &(0x7f00000009c0)=[{&(0x7f0000000000)="e5", 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r5, @ANYRESHEX=r1, @ANYRES64=r8, @ANYRESDEC=r1, @ANYRES32=r5, @ANYRES16=0x0, @ANYRES64=r4, @ANYRES16], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kfree\x00'}, 0x18) 32.645603593s ago: executing program 48 (id=10256): r0 = syz_clone(0x2200700, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000540)={0x0, 0x9ea}, &(0x7f0000000600)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendfile(r9, r8, 0x0, 0x17) r10 = socket$can_raw(0x1d, 0x3, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r11, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r10, &(0x7f0000000200)={0x1d, r12}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r12, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r13 = syz_open_procfs(r0, &(0x7f00000002c0)='net/xfrm_stat\x00') writev(r13, &(0x7f00000009c0)=[{&(0x7f0000000000)="e5", 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r5, @ANYRESHEX=r1, @ANYRES64=r8, @ANYRESDEC=r1, @ANYRES32=r5, @ANYRES16=0x0, @ANYRES64=r4, @ANYRES16], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kfree\x00'}, 0x18) 2.703105358s ago: executing program 2 (id=10580): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r3, 0x0, 0xfffffffffffffffe}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) socketpair(0x1, 0x1, 0x8000, &(0x7f0000000000)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB='-pid'], 0x35) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x20}, 0x38) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10) close(r0) 2.626784739s ago: executing program 6 (id=10583): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x10000000000}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10) close(r0) 2.596974339s ago: executing program 6 (id=10584): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) uname(&(0x7f0000000040)=""/122) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x46) (fail_nth: 2) 2.469922391s ago: executing program 6 (id=10585): syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000000)='./bus/file0\x00', 0x2130800, &(0x7f0000000080)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb}}]}, 0x1, 0x4c1, &(0x7f0000000a00)="$eJzs3ctrXNcZAPBvZqyn1frRUmwXaoML7gNr9KBYarvpqu3CUGropgVXlcaqopFGaEaOJQyRk50XWYSEBEIWWQbyDySbeBUTCFkn++BFcEgcBZJAYMLcmZFHj5GHWNKA7u8H13PuOdfznaPhO7pz5mpuAKl1ofZPJmIoIj6KiBP13a0HXKg/bDy6PV3bMlGtXvsikxxX228e2vx/xyNiPSL6I+Kff434X2Zn3PLq2vxUsVhYbuznKwtL+fLq2uW5hanZwmxhcXTiyuTkxMj42OS+jfXui8/cvfru33vf/uaFh/dfev+9WreGGm2t49hP9aH3xKmWumMR8eeDCNYFucZ4BrrdEX6U2uv3s4i4mOT/icglryaQBtVqtfp9ta9d83oVOLKyyTlwJjscEfVyNjs8XD+H/3kMZoulcuX3N0orizP1c+WT0ZO9MVcsjDTeK5yMnkxtfzQpP94f27Y/HpGcA7+cG0j2h6dLxZnDneqAbY5vy/+vc/X8B1LCW35IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rJf0gv+Q/pJf8hlf5x9Wptqzb//n3m5urKfOnm5ZlCeX54YWV6eLq0HMOzpb53nvBEjTmkWCotjf4hVm7lK4VyJV9eXbu+UFpZrFyfW5ia7Y1CzyGMCejMqfP3PslExPofB5KtprfRJlfhaKs+V/8OACB9ct2egICusfQH6eU9PrDLV/Ru0d+uYempoj4pLHCAst3uANA1l876/A/Syvo/pJf1f0ivref4zgYgjbqz/g90k/V/SK+hlvv/ZFru//WTlnt3jUTETyPi41xPX/NeX8BRkP0s08j9Syd+PbS9tTfzbbIo0BsRz75+7dVbU5XK8mit/svN+spr9frebnQf6FiSv2ONR7/IASDVNh7dnm5um5UnDz7u53+pX4SwM/6xxtpkf/IZ5eBGZsu1Cpl9unZh/U5EnNktfqZxv/P6Jx+DG7kd8U83HjP1p0j6eyy5b/rTxH/wVqfxz7bE/1VL/HNP/VOBdLhXm39Gdsv/bJLTsZl/W+efoX26Prr9/JfdnP9ybea/8x3G+P8bzz9oG/9OxLld4zfj9Sextsev9e1Sh/Ef/udfv2jXVn2z/jy7xW+qlfKVhaV8eXXt8tzC1GxhtrA4OnFlcnJiZHxsMp+sUeebK9U7/enMh/f3Gv9gm/h7jb9W99sOx//dLz/494U94v/m4u6v/+k94g9ExO86jP/V2Kf/bddWiz/TZvzZ7fFbFvhqdeMdxi+/8re+Dg8FAA5BeXVtfqpYLCwrKCgobBa6PTMBB+1x0ne7JwAAAAAAAAAAAECnDuNy4m6PEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKPghAAD//x/u0og=") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x26, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0xfffffbae}, {0x0}, &(0x7f00000006c0)}}], 0x48, 0x40044}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000020000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x3, 0x0, 0x8000, 0x61001, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r7}, 0x10) uname(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$link(0x8, r5, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) 1.679265284s ago: executing program 2 (id=10589): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x204000, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000280)={0x7fff, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.474087127s ago: executing program 2 (id=10592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) clock_settime(0x0, &(0x7f0000000380)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x1d) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) unshare(0x62060200) 1.349347498s ago: executing program 0 (id=10596): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 1.2857166s ago: executing program 0 (id=10597): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x16, 0x0, 0x0, 0x3ffc0002}, {0x6, 0x5, 0x7}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20004871) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x141341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 739.391398ms ago: executing program 3 (id=10598): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004, 0x1, @perf_bp={0x0, 0x6}, 0x117a20, 0x1, 0x840000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x9e, 0xbdaf}, {}, {}, @raw32}], 0x1c) 675.536959ms ago: executing program 3 (id=10599): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) 668.769789ms ago: executing program 4 (id=10600): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x10000000000}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10) close(r0) 607.05587ms ago: executing program 3 (id=10601): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1) getsockname$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) 588.440391ms ago: executing program 4 (id=10602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x4000000) 475.110782ms ago: executing program 3 (id=10603): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x204000, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000280)={0x7fff, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 472.497002ms ago: executing program 4 (id=10604): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8000009, 0x5, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000042000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x2, 0x48000000, 0x0, 0x81, 0x0}) 471.274463ms ago: executing program 2 (id=10605): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000004c0)={0x9, 0x200, 0x0, 0x6a79}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="8b33000000000000000005000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x86}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 445.170173ms ago: executing program 3 (id=10606): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x10000000000}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10) close(r0) 418.388703ms ago: executing program 4 (id=10607): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 363.724164ms ago: executing program 4 (id=10608): r0 = socket$tipc(0x1e, 0x5, 0x0) flock(r0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x48) flistxattr(r0, &(0x7f0000000280)=""/154, 0x9a) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048801}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r11 = gettid() ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r10, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_PID={0x8, 0x1c, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r10, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x1) 319.665165ms ago: executing program 3 (id=10609): bpf$PROG_LOAD(0x5, 0x0, 0x7) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="af73b830a92010096bfe21e8860722c3b21270e69012abe9f9c4073b2114a9dd8a861d702a956becb4ed913556cf6be424d98b0554657af017ecbb70bd0f81c7b049917f9d7b62b7c59271cb93a321a8a70c01298cc99d87039c0249e080de3100000000000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf250100000008000200020000000800010002000000"], 0x24}, 0x1, 0x0, 0x0, 0x44041}, 0x20040090) setitimer(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs\x00') read(r4, &(0x7f0000000b00)=""/193, 0xc1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4024800) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f00000000c0)=r5}, 0x80) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r11 = syz_usb_connect$uac1(0x1, 0xb3, &(0x7f0000000500)=ANY=[], 0x0) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) close_range(r6, r12, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000230000000000400000", @ANYBLOB="6c6b96a292ffe2b7a45d8e4bc54ab1cac075f9a09c9ea104292f8468c57c3b2dc6087f26c907df1176aa9e01f7a588cbbab9ef90cf1c57a7e21154e807d0d94eea9fed9c7076fb685f4ba17776b1a2bbda00e93544b4f3993f0e42a577fe1e8a55bf2ce458c2d2d2e9c29fee59cc188379b6b6170234691890f3a7c9c4b63daae00cdd49ef4123dc468f99d1ad021d4881c9906f4c8b1ac949fddfd5e2199a55f9ada029dd71ac56a42bdef782cc6abe3c930f4c6b98142078835fd7dbbde209f09b1df0357b8e2e576e2638620127a7c1bdae308c45f25ba233956224800ccde6f76546", @ANYBLOB="ffffffff00"/20, @ANYRES16=r6, @ANYRES32=r8, @ANYBLOB='\x00'/28, @ANYRESDEC=r11], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xf, &(0x7f0000000840)=ANY=[@ANYRES16=r10, @ANYRES32=r13, @ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r14}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r15, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 263.364446ms ago: executing program 0 (id=10610): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004, 0x1, @perf_bp={0x0, 0x6}, 0x117a20, 0x1, 0x840000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x9e, 0xbdaf}, {}, {}, @raw32}], 0x1c) 142.583577ms ago: executing program 2 (id=10611): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) 116.553938ms ago: executing program 6 (id=10612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x4000000) 116.126188ms ago: executing program 2 (id=10613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$sock(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)='3', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, @perf_config_ext={0x2, 0xe23a}, 0x108282, 0xffffffff, 0x6, 0x5, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2e, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 90.298518ms ago: executing program 4 (id=10614): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2000000}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x14, 0x0, &(0x7f0000000d40)="f6020000bd5260ce0a5373aab7da381eaa28e002", 0x0, 0xffffffff, 0x0, 0x31, 0x0, &(0x7f0000000740)="010a5d04932d420d15a6991a902a695587c5dfc37babb0275d078422c699f7bc0af067618c09a04580aad8521d5e76ef5d", 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x3b31f1b38ca19d79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 26.119459ms ago: executing program 0 (id=10615): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000001000) 25.577769ms ago: executing program 6 (id=10616): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xd60d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f00000007c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xffffffff, 0x9752333b9a87418, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r10, 0x8008f511, &(0x7f0000000600)) setsockopt$inet_int(r9, 0x0, 0xf, &(0x7f0000000000)=0x9, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) fsetxattr$security_selinux(r6, &(0x7f00000001c0), &(0x7f00000005c0)='system_u:object_r:shell_exec_t:s0\x00', 0x22, 0x3) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x4000, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x6}, 0xffffffff, 0x0, 0x1, 0x1}, {{@in=@private=0xa010101, 0x0, 0x6c}, 0x2, @in6=@remote, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmmsg$inet6(r11, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 24.48308ms ago: executing program 0 (id=10617): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x204000, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000280)={0x7fff, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 0s ago: executing program 0 (id=10618): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) kernel console output (not intermixed with test programs): [ 770.944924][ T8886] RIP: 0033:0x7f009804d169 [ 770.944938][ T8886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.944959][ T8886] RSP: 002b:00007f0096690038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 770.944981][ T8886] RAX: ffffffffffffffda RBX: 00007f0098266080 RCX: 00007f009804d169 [ 770.944995][ T8886] RDX: 0000000000000393 RSI: 0000200000000180 RDI: 0000000000000004 [ 770.945088][ T8886] RBP: 00007f0096690090 R08: 0000000000000000 R09: 0000000000000000 [ 770.945103][ T8886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.945115][ T8886] R13: 0000000000000000 R14: 00007f0098266080 R15: 00007ffe540ebcd8 [ 770.945193][ T8886] [ 770.946387][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.184047][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.211045][ T8799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.222952][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.230026][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.257364][ T8799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.323524][ T8893] : renamed from vlan1 [ 771.348288][ T8799] hsr_slave_0: entered promiscuous mode [ 771.669412][ T8799] hsr_slave_1: entered promiscuous mode [ 771.675263][ T8799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 771.689318][ T8799] Cannot create hsr debugfs directory [ 771.747291][ T8904] vlan2: entered allmulticast mode [ 771.756083][ T8907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8907 comm=syz.0.10024 [ 771.804862][ T8907] loop0: detected capacity change from 0 to 512 [ 771.847953][ T8907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.929997][ T8907] __nla_validate_parse: 7 callbacks suppressed [ 771.930058][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10024'. [ 771.988526][ T8916] batadv1: entered allmulticast mode [ 772.061652][ T8907] bond1: entered promiscuous mode [ 772.066782][ T8907] bond1: entered allmulticast mode [ 772.176124][ T8210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.210533][ T8799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 772.242049][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10026'. [ 772.269442][ T8799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 772.317284][ T8799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 772.364450][ T8799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 772.416464][ T8799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.442413][ T8799] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.482391][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.486859][ T8932] loop0: detected capacity change from 0 to 128 [ 772.489533][ T6527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.508432][ T8932] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 772.525664][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.532820][ T6527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.540293][ T8932] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 772.561526][ T8932] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.0.10031: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 772.593014][ T1643] tipc: Disabling bearer [ 772.598122][ T1643] tipc: Left network mode [ 772.602619][ T8931] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.10030'. [ 772.615003][ T8799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 772.625519][ T8799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 773.021945][ T8210] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 773.094102][ T8947] loop9: detected capacity change from 0 to 512 [ 773.105300][ T8799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.127116][ T1643] hsr_slave_0: left promiscuous mode [ 773.138178][ T1643] hsr_slave_1: left promiscuous mode [ 773.153803][ T8947] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 773.172197][ T8947] EXT4-fs (loop9): mount failed [ 773.224316][ T8960] netlink: 'syz.2.10038': attribute type 13 has an invalid length. [ 773.224591][ T1643] team0 (unregistering): Port device team_slave_1 removed [ 773.256674][ T1643] team0 (unregistering): Port device team_slave_0 removed [ 773.273276][ T6531] smc: removing ib device syz! [ 773.308299][ T8966] loop6: detected capacity change from 0 to 2048 [ 773.317274][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10038'. [ 773.353239][ T8968] FAULT_INJECTION: forcing a failure. [ 773.353239][ T8968] name failslab, interval 1, probability 0, space 0, times 0 [ 773.367365][ T8968] CPU: 1 UID: 0 PID: 8968 Comm: syz.9.10041 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 773.367398][ T8968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 773.367413][ T8968] Call Trace: [ 773.367421][ T8968] [ 773.367430][ T8968] dump_stack_lvl+0xf6/0x150 [ 773.367461][ T8968] dump_stack+0x15/0x1a [ 773.367525][ T8968] should_fail_ex+0x261/0x270 [ 773.367636][ T8968] should_failslab+0x8f/0xb0 [ 773.367659][ T8968] __kmalloc_cache_noprof+0x55/0x320 [ 773.367690][ T8968] ? kobject_uevent_env+0x1a4/0x550 [ 773.367713][ T8968] ? __pfx_dev_uevent_name+0x10/0x10 [ 773.367744][ T8968] kobject_uevent_env+0x1a4/0x550 [ 773.367764][ T8968] kobject_uevent+0x1c/0x30 [ 773.367844][ T8968] rfkill_set_block+0x25f/0x290 [ 773.367874][ T8968] rfkill_fop_write+0x3ad/0x420 [ 773.367901][ T8968] ? __pfx_rfkill_fop_write+0x10/0x10 [ 773.367932][ T8968] vfs_write+0x295/0x950 [ 773.367965][ T8968] ? putname+0xe1/0x100 [ 773.367989][ T8968] ? __fget_files+0x186/0x1c0 [ 773.368091][ T8968] ksys_write+0xeb/0x1b0 [ 773.368128][ T8968] __x64_sys_write+0x42/0x50 [ 773.368157][ T8968] x64_sys_call+0x2a45/0x2e10 [ 773.368176][ T8968] do_syscall_64+0xc9/0x1c0 [ 773.368260][ T8968] ? clear_bhb_loop+0x25/0x80 [ 773.368282][ T8968] ? clear_bhb_loop+0x25/0x80 [ 773.368307][ T8968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.368326][ T8968] RIP: 0033:0x7f47a64dd169 [ 773.368341][ T8968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.368393][ T8968] RSP: 002b:00007f47a4b41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.368414][ T8968] RAX: ffffffffffffffda RBX: 00007f47a66f5fa0 RCX: 00007f47a64dd169 [ 773.368428][ T8968] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 773.368442][ T8968] RBP: 00007f47a4b41090 R08: 0000000000000000 R09: 0000000000000000 [ 773.368456][ T8968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.368467][ T8968] R13: 0000000000000000 R14: 00007f47a66f5fa0 R15: 00007fff865ae7d8 [ 773.368493][ T8968] [ 773.706920][ T8966] loop6: p1 < > p4 [ 773.766238][ T8966] loop6: p4 size 8388608 extends beyond EOD, truncated [ 773.820457][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10043'. [ 773.830998][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10043'. [ 773.844332][ T8799] veth0_vlan: entered promiscuous mode [ 773.861724][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10043'. [ 773.874187][ T8981] loop9: detected capacity change from 0 to 164 [ 773.881493][ T8799] veth1_vlan: entered promiscuous mode [ 773.904430][ T8981] iso9660: Unknown parameter ' ' [ 773.941065][ T8799] veth0_macvtap: entered promiscuous mode [ 773.959096][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 773.959129][ T29] audit: type=1326 audit(749.544:35706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.9.10043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a64dd169 code=0x7ffc0000 [ 773.999096][ T8799] veth1_macvtap: entered promiscuous mode [ 774.022257][ T8799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.033548][ T8799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.043554][ T8799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.054583][ T8799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.072587][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10043'. [ 774.082502][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10043'. [ 774.094046][ T29] audit: type=1326 audit(749.573:35707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.9.10043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f47a64dd169 code=0x7ffc0000 [ 774.117862][ T29] audit: type=1326 audit(749.573:35708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.9.10043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a64dd169 code=0x7ffc0000 [ 774.141728][ T29] audit: type=1326 audit(749.573:35709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.9.10043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a64dd169 code=0x7ffc0000 [ 774.165659][ T29] audit: type=1326 audit(749.591:35710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.6.10046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3053ecd169 code=0x7ffc0000 [ 774.170752][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10043'. [ 774.189403][ T29] audit: type=1326 audit(749.591:35711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.6.10046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3053ecd169 code=0x7ffc0000 [ 774.189458][ T29] audit: type=1326 audit(749.591:35712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.6.10046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3053ecd169 code=0x7ffc0000 [ 774.189488][ T29] audit: type=1326 audit(749.591:35713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.6.10046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3053ecd169 code=0x7ffc0000 [ 774.189604][ T29] audit: type=1326 audit(749.591:35714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.6.10046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3053ecd169 code=0x7ffc0000 [ 774.293424][ T29] audit: type=1326 audit(749.591:35715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.6.10046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3053ecd169 code=0x7ffc0000 [ 774.319123][ T8799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.328421][ T8799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.339661][ T8799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.349520][ T8799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.360789][ T8799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.371409][ T8799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.400494][ T8799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.409494][ T8799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.419046][ T8799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.428000][ T8799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.535481][ T9001] loop3: detected capacity change from 0 to 1024 [ 774.542566][ T9001] EXT4-fs: Ignoring removed nobh option [ 774.548803][ T9001] EXT4-fs: inline encryption not supported [ 774.554719][ T9001] EXT4-fs: Ignoring removed bh option [ 774.571245][ T9001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.636121][ T9010] loop9: detected capacity change from 0 to 512 [ 774.643538][ T8799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.686929][ T9010] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 774.712162][ T9018] loop3: detected capacity change from 0 to 128 [ 774.713688][ T9010] EXT4-fs (loop9): mount failed [ 774.720861][ T9018] vfat: Bad value for 'time_offset' [ 774.958879][ T9035] loop9: detected capacity change from 0 to 4096 [ 774.974249][ T9041] loop0: detected capacity change from 0 to 512 [ 775.002388][ T9035] EXT4-fs: Ignoring removed nomblk_io_submit option [ 775.048289][ T9041] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 775.079619][ T9041] EXT4-fs (loop0): mount failed [ 775.079919][ T9035] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.258220][ T9054] loop0: detected capacity change from 0 to 2048 [ 775.313935][ T9054] loop0: p1 < > p4 [ 775.319699][ T9054] loop0: p4 size 8388608 extends beyond EOD, truncated [ 775.465862][ T9065] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 775.533312][ T9074] loop6: detected capacity change from 0 to 128 [ 775.554879][ T9065] SELinux: policydb version 0 does not match my version range 15-34 [ 775.565206][ T9074] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 775.589437][ T9065] SELinux: failed to load policy [ 775.617564][ T9074] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 775.669667][ T9074] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.6.10075: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 775.699292][ T9083] loop0: detected capacity change from 0 to 512 [ 775.733045][ T9083] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 775.752250][ T1643] IPVS: stop unused estimator thread 0... [ 775.765745][ T9083] EXT4-fs (loop0): mount failed [ 775.797693][ T5578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.827282][ T7862] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 775.872197][ T9093] loop9: detected capacity change from 0 to 1024 [ 775.919972][ T9093] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.966310][ T9104] loop6: detected capacity change from 0 to 2048 [ 775.975877][ T5578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.029004][ T9104] loop6: p1 < > p4 [ 776.039675][ T9104] loop6: p4 size 8388608 extends beyond EOD, truncated [ 776.090518][ T9115] loop0: detected capacity change from 0 to 512 [ 776.139032][ T9115] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 776.177540][ T9122] loop9: detected capacity change from 0 to 512 [ 776.190227][ T9122] EXT4-fs: Ignoring removed bh option [ 776.207690][ T9122] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 776.219676][ T9115] EXT4-fs (loop0): mount failed [ 776.267642][ T9126] loop3: detected capacity change from 0 to 512 [ 776.323207][ T9126] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 776.353000][ T9134] loop9: detected capacity change from 0 to 128 [ 776.372252][ T9126] EXT4-fs (loop3): mount failed [ 776.386815][ T9134] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 776.419663][ T9134] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 776.496897][ T9134] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.9.10097: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 776.575378][ T9147] FAULT_INJECTION: forcing a failure. [ 776.575378][ T9147] name failslab, interval 1, probability 0, space 0, times 0 [ 776.589503][ T9147] CPU: 1 UID: 0 PID: 9147 Comm: syz.3.10102 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 776.589538][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 776.589578][ T9147] Call Trace: [ 776.589586][ T9147] [ 776.589595][ T9147] dump_stack_lvl+0xf6/0x150 [ 776.589621][ T9147] dump_stack+0x15/0x1a [ 776.589640][ T9147] should_fail_ex+0x261/0x270 [ 776.589670][ T9147] should_failslab+0x8f/0xb0 [ 776.589693][ T9147] kmem_cache_alloc_noprof+0x59/0x340 [ 776.589739][ T9147] ? skb_clone+0x154/0x1f0 [ 776.589792][ T9147] skb_clone+0x154/0x1f0 [ 776.589813][ T9147] __netlink_deliver_tap+0x2bd/0x4f0 [ 776.589846][ T9147] netlink_unicast+0x69e/0x6c0 [ 776.589875][ T9147] netlink_sendmsg+0x609/0x720 [ 776.589986][ T9147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 776.590018][ T9147] __sock_sendmsg+0x140/0x180 [ 776.590048][ T9147] ____sys_sendmsg+0x350/0x4e0 [ 776.590075][ T9147] __sys_sendmsg+0x1a0/0x240 [ 776.590148][ T9147] __x64_sys_sendmsg+0x46/0x50 [ 776.590173][ T9147] x64_sys_call+0x26f3/0x2e10 [ 776.590199][ T9147] do_syscall_64+0xc9/0x1c0 [ 776.590285][ T9147] ? clear_bhb_loop+0x25/0x80 [ 776.590311][ T9147] ? clear_bhb_loop+0x25/0x80 [ 776.590339][ T9147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.590426][ T9147] RIP: 0033:0x7fe6974ed169 [ 776.590444][ T9147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.590535][ T9147] RSP: 002b:00007fe695b51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 776.590558][ T9147] RAX: ffffffffffffffda RBX: 00007fe697705fa0 RCX: 00007fe6974ed169 [ 776.590573][ T9147] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 776.590588][ T9147] RBP: 00007fe695b51090 R08: 0000000000000000 R09: 0000000000000000 [ 776.590603][ T9147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.590618][ T9147] R13: 0000000000000000 R14: 00007fe697705fa0 R15: 00007fff8e633108 [ 776.590641][ T9147] [ 776.795563][ T5578] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 776.850449][ T9145] loop0: detected capacity change from 0 to 512 [ 776.876917][ T9145] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 776.900530][ T9145] EXT4-fs (loop0): 1 truncate cleaned up [ 776.912994][ T9145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.002490][ T8210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.045542][ T9165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.064170][ T9170] FAULT_INJECTION: forcing a failure. [ 777.064170][ T9170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.078638][ T9170] CPU: 1 UID: 0 PID: 9170 Comm: syz.0.10108 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 777.078750][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 777.078767][ T9170] Call Trace: [ 777.078774][ T9170] [ 777.078783][ T9170] dump_stack_lvl+0xf6/0x150 [ 777.078814][ T9170] dump_stack+0x15/0x1a [ 777.078833][ T9170] should_fail_ex+0x261/0x270 [ 777.078863][ T9170] should_fail+0xb/0x10 [ 777.078887][ T9170] should_fail_usercopy+0x1a/0x20 [ 777.078994][ T9170] strncpy_from_user+0x25/0x230 [ 777.079034][ T9170] ? getname_flags+0x81/0x3b0 [ 777.079065][ T9170] getname_flags+0xb0/0x3b0 [ 777.079145][ T9170] __se_sys_statx+0x5f/0x190 [ 777.079188][ T9170] ? putname+0xe1/0x100 [ 777.079216][ T9170] ? __fget_files+0x186/0x1c0 [ 777.079245][ T9170] ? fput+0x99/0xd0 [ 777.079275][ T9170] ? ksys_write+0x180/0x1b0 [ 777.079426][ T9170] __x64_sys_statx+0x67/0x80 [ 777.079461][ T9170] x64_sys_call+0x2775/0x2e10 [ 777.079544][ T9170] do_syscall_64+0xc9/0x1c0 [ 777.079576][ T9170] ? clear_bhb_loop+0x25/0x80 [ 777.079633][ T9170] ? clear_bhb_loop+0x25/0x80 [ 777.079660][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.079683][ T9170] RIP: 0033:0x7f009804d169 [ 777.079703][ T9170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.079726][ T9170] RSP: 002b:00007f00966b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 777.079811][ T9170] RAX: ffffffffffffffda RBX: 00007f0098265fa0 RCX: 00007f009804d169 [ 777.079823][ T9170] RDX: 0000000000002000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 777.079835][ T9170] RBP: 00007f00966b1090 R08: 00002000000034c0 R09: 0000000000000000 [ 777.079847][ T9170] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 777.079910][ T9170] R13: 0000000000000000 R14: 00007f0098265fa0 R15: 00007ffe540ebcd8 [ 777.079931][ T9170] [ 777.311320][ T9179] loop6: detected capacity change from 0 to 2048 [ 777.346401][ T9179] loop6: p1 < > p4 [ 777.354419][ T9179] loop6: p4 size 8388608 extends beyond EOD, truncated [ 777.428020][ T9183] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 777.428020][ T9183] program syz.0.10114 not setting count and/or reply_len properly [ 777.463434][ T9186] loop9: detected capacity change from 0 to 128 [ 777.476159][ T9186] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 777.489290][ T9186] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 777.505396][ T9186] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.9.10124: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 777.538919][ T9165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.554129][ T5578] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 777.595974][ T9189] loop9: detected capacity change from 0 to 512 [ 777.605048][ T9191] loop0: detected capacity change from 0 to 512 [ 777.624758][ T9165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.637305][ T9191] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 777.654553][ T9191] EXT4-fs (loop0): mount failed [ 777.669730][ T9189] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 777.699388][ T9165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.711297][ T9189] EXT4-fs (loop9): mount failed [ 777.745258][ T9200] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.10118' sets config #0 [ 777.778993][ T9165] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.794807][ T9204] loop0: detected capacity change from 0 to 2048 [ 777.807924][ T9165] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.830669][ T9165] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.847775][ T9204] loop0: p1 < > p4 [ 777.848661][ T9165] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.862193][ T9204] loop0: p4 size 8388608 extends beyond EOD, truncated [ 777.914077][ T9212] loop3: detected capacity change from 0 to 1024 [ 777.956575][ T9212] EXT4-fs: Ignoring removed nobh option [ 777.963660][ T9212] EXT4-fs: inline encryption not supported [ 777.969492][ T9212] EXT4-fs: Ignoring removed bh option [ 777.987351][ T9221] loop9: detected capacity change from 0 to 128 [ 777.996113][ T9212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.005841][ T9221] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 778.039798][ T8799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.064499][ T9221] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 778.092697][ T9226] loop0: detected capacity change from 0 to 512 [ 778.104815][ T9221] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.9.10127: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 778.148825][ T9230] __nla_validate_parse: 23 callbacks suppressed [ 778.148840][ T9230] netlink: 1144 bytes leftover after parsing attributes in process `syz.3.10130'. [ 778.168455][ T5578] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 778.169639][ T9226] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 778.204899][ T9226] EXT4-fs (loop0): mount failed [ 778.213072][ T9235] loop9: detected capacity change from 0 to 512 [ 778.234889][ T9235] ext4: Unknown parameter 'uid<00000000000000000000' [ 778.333536][ T9250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10133'. [ 778.347132][ T9250] netlink: 'syz.0.10133': attribute type 13 has an invalid length. [ 778.362189][ T9252] loop3: detected capacity change from 0 to 512 [ 778.371817][ T9252] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 778.382949][ T9252] EXT4-fs (loop3): orphan cleanup on readonly fs [ 778.391966][ T9252] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.10132: Failed to acquire dquot type 1 [ 778.406334][ T9252] EXT4-fs (loop3): 1 truncate cleaned up [ 778.415346][ T9252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 778.435329][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10137'. [ 778.567282][ T9262] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 778.567282][ T9262] program syz.9.10141 not setting count and/or reply_len properly [ 778.623491][ T9265] loop0: detected capacity change from 0 to 128 [ 778.648170][ T9267] loop9: detected capacity change from 0 to 128 [ 778.653369][ T9265] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 778.677523][ T9267] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 778.697957][ T9265] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 778.697968][ T9267] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 778.741767][ T9265] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.0.10142: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 778.795813][ T9267] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.9.10143: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 778.845089][ T8210] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 778.884953][ T5578] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 778.900841][ T9272] loop0: detected capacity change from 0 to 128 [ 778.934599][ T9272] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 778.970110][ T9272] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 779.018061][ T9272] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.0.10144: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 779.125611][T23407] IPVS: starting estimator thread 0... [ 779.140898][ T9273] loop6: detected capacity change from 0 to 1024 [ 779.155686][ T8799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.175428][ T8210] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 779.225066][ T9273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.256585][ T9282] IPVS: using max 2640 ests per chain, 132000 per kthread [ 779.275653][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10148'. [ 779.286362][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10148'. [ 779.302897][ T9290] loop3: detected capacity change from 0 to 2048 [ 779.317667][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10151'. [ 779.337784][ T9293] loop0: detected capacity change from 0 to 2048 [ 779.346545][ T9288] netlink: 'syz.9.10151': attribute type 13 has an invalid length. [ 779.364740][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10148'. [ 779.395989][ T9293] loop0: p1 < > p4 [ 779.397245][ T9290] loop3: p1 < > p4 [ 779.404208][ T29] kauditd_printk_skb: 503 callbacks suppressed [ 779.404223][ T29] audit: type=1400 audit(754.636:36209): avc: denied { setattr } for pid=9255 comm="syz.6.10138" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 779.414557][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10148'. [ 779.444044][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10148'. [ 779.458234][ T9293] loop0: p4 size 8388608 extends beyond EOD, truncated [ 779.465582][ T9290] loop3: p4 size 8388608 extends beyond EOD, truncated [ 779.508649][ T9298] netlink: 110 bytes leftover after parsing attributes in process `syz.9.10153'. [ 779.559119][ T29] audit: type=1326 audit(754.786:36210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.9.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a64dd169 code=0x7ffc0000 [ 779.583008][ T29] audit: type=1326 audit(754.786:36211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.9.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47a64dbad0 code=0x7ffc0000 [ 779.606772][ T29] audit: type=1326 audit(754.786:36212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.9.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f47a64de997 code=0x7ffc0000 [ 779.630530][ T29] audit: type=1326 audit(754.786:36213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.9.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47a64dd169 code=0x7ffc0000 [ 779.654303][ T29] audit: type=1326 audit(754.786:36214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.9.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f47a64de997 code=0x7ffc0000 [ 779.668758][ T9304] loop3: detected capacity change from 0 to 128 [ 779.677539][ T29] audit: type=1326 audit(754.786:36215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.9.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f47a64dbdca code=0x7ffc0000 [ 779.677609][ T29] audit: type=1326 audit(754.786:36216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.9.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a64dd169 code=0x7ffc0000 [ 779.677644][ T29] audit: type=1326 audit(754.786:36217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.9.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a64dd169 code=0x7ffc0000 [ 779.761828][ T29] audit: type=1326 audit(754.973:36218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.9.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47a64df087 code=0x7ffc0000 [ 779.792744][ T7862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.830269][ T9304] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 779.852594][ T9304] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 779.912415][ T9304] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.3.10156: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 780.006345][ T8799] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 780.137391][ T9320] loop3: detected capacity change from 0 to 1024 [ 780.166623][ T9320] EXT4-fs: Ignoring removed nobh option [ 780.172295][ T9320] EXT4-fs: inline encryption not supported [ 780.179696][ T9320] EXT4-fs: Ignoring removed bh option [ 780.237770][ T9320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.255396][ T9326] netlink: 'syz.6.10164': attribute type 13 has an invalid length. [ 780.266689][ T9336] random: crng reseeded on system resumption [ 780.349157][ T9340] FAULT_INJECTION: forcing a failure. [ 780.349157][ T9340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.363896][ T9340] CPU: 1 UID: 0 PID: 9340 Comm: syz.0.10166 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 780.363940][ T9340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 780.363954][ T9340] Call Trace: [ 780.363963][ T9340] [ 780.363973][ T9340] dump_stack_lvl+0xf6/0x150 [ 780.364005][ T9340] dump_stack+0x15/0x1a [ 780.364027][ T9340] should_fail_ex+0x261/0x270 [ 780.364059][ T9340] should_fail+0xb/0x10 [ 780.364086][ T9340] should_fail_usercopy+0x1a/0x20 [ 780.364126][ T9340] _copy_from_user+0x1c/0xa0 [ 780.364161][ T9340] kstrtouint_from_user+0x84/0x100 [ 780.364192][ T9340] ? 0xffffffff81000000 [ 780.364217][ T9340] ? selinux_file_permission+0x22d/0x360 [ 780.364273][ T9340] proc_fail_nth_write+0x54/0x160 [ 780.364304][ T9340] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 780.364370][ T9340] vfs_write+0x295/0x950 [ 780.364410][ T9340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 780.364491][ T9340] ? __fget_files+0x186/0x1c0 [ 780.364525][ T9340] ksys_write+0xeb/0x1b0 [ 780.364569][ T9340] __x64_sys_write+0x42/0x50 [ 780.364611][ T9340] x64_sys_call+0x2a45/0x2e10 [ 780.364669][ T9340] do_syscall_64+0xc9/0x1c0 [ 780.364775][ T9340] ? clear_bhb_loop+0x25/0x80 [ 780.364871][ T9340] ? clear_bhb_loop+0x25/0x80 [ 780.364895][ T9340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.364923][ T9340] RIP: 0033:0x7f009804bc1f [ 780.364943][ T9340] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 780.365010][ T9340] RSP: 002b:00007f0096690030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 780.365035][ T9340] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f009804bc1f [ 780.365052][ T9340] RDX: 0000000000000001 RSI: 00007f00966900a0 RDI: 0000000000000006 [ 780.365068][ T9340] RBP: 00007f0096690090 R08: 0000000000000000 R09: 0000000000000000 [ 780.365083][ T9340] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 780.365099][ T9340] R13: 0000000000000000 R14: 00007f0098266080 R15: 00007ffe540ebcd8 [ 780.365190][ T9340] [ 780.609700][ T9336] loop9: detected capacity change from 0 to 128 [ 780.645521][ T9336] EXT4-fs: Ignoring removed nobh option [ 780.692675][ T8799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.706090][ T9336] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 780.785864][ T5578] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 780.917478][ T9366] netlink: 'syz.3.10180': attribute type 13 has an invalid length. [ 781.048212][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.055557][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.119129][ T9366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.128208][ T9384] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 781.128208][ T9384] program syz.0.10186 not setting count and/or reply_len properly [ 781.145288][ T9385] loop9: detected capacity change from 0 to 1024 [ 781.150960][ T9366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.175736][ T9385] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.222079][ T9366] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.230731][ T9366] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.240728][ T9366] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.250462][ T9366] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.345424][ T5578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.386499][ T9391] random: crng reseeded on system resumption [ 781.396123][ T9396] loop9: detected capacity change from 0 to 256 [ 781.511812][ T9397] IPv6: NLM_F_CREATE should be specified when creating new route [ 781.610298][ T9391] loop3: detected capacity change from 0 to 128 [ 781.639488][ T9391] EXT4-fs: Ignoring removed nobh option [ 781.657715][ T9391] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 781.744252][ T9413] FAULT_INJECTION: forcing a failure. [ 781.744252][ T9413] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 781.758630][ T9413] CPU: 0 UID: 0 PID: 9413 Comm: syz.6.10195 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 781.758662][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 781.758674][ T9413] Call Trace: [ 781.758681][ T9413] [ 781.758688][ T9413] dump_stack_lvl+0xf6/0x150 [ 781.758716][ T9413] dump_stack+0x15/0x1a [ 781.758749][ T9413] should_fail_ex+0x261/0x270 [ 781.758780][ T9413] should_fail_alloc_page+0xfd/0x110 [ 781.758807][ T9413] __alloc_frozen_pages_noprof+0x11e/0x340 [ 781.758852][ T9413] alloc_pages_mpol+0xb6/0x260 [ 781.758885][ T9413] vma_alloc_folio_noprof+0x1a2/0x310 [ 781.758969][ T9413] do_wp_page+0x652/0x2380 [ 781.759074][ T9413] ? __rcu_read_lock+0x36/0x50 [ 781.759109][ T9413] handle_mm_fault+0xc65/0x2b10 [ 781.759152][ T9413] exc_page_fault+0x3b9/0x650 [ 781.759240][ T9413] asm_exc_page_fault+0x26/0x30 [ 781.759265][ T9413] RIP: 0033:0x7f3053d8fbe3 [ 781.759308][ T9413] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 781.759370][ T9413] RSP: 002b:00007f30525364a0 EFLAGS: 00010202 [ 781.759389][ T9413] RAX: 0000000000000400 RBX: 00007f3052536540 RCX: 00007f304a117000 [ 781.759405][ T9413] RDX: 00007f30525366e0 RSI: 0000000000000001 RDI: 00007f30525365e0 [ 781.759420][ T9413] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a5 [ 781.759435][ T9413] R10: 00000000000000bc R11: 00007f3052536540 R12: 0000000000000001 [ 781.759449][ T9413] R13: 00007f3053f693e0 R14: 0000000000000020 R15: 00007f30525365e0 [ 781.759476][ T9413] [ 781.759557][ T9413] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 781.935781][ T8799] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 781.944868][ T9413] loop6: detected capacity change from 0 to 512 [ 781.961105][ T9413] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.10195: invalid block [ 782.017460][ T9413] EXT4-fs (loop6): Remounting filesystem read-only [ 782.049580][ T9413] EXT4-fs (loop6): 2 truncates cleaned up [ 782.066962][ T9413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.098903][ T9413] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 782.107637][ T9413] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.189314][ T9426] loop0: detected capacity change from 0 to 256 [ 782.218346][ T9409] FAULT_INJECTION: forcing a failure. [ 782.218346][ T9409] name failslab, interval 1, probability 0, space 0, times 0 [ 782.231160][ T9409] CPU: 0 UID: 0 PID: 9409 Comm: syz.9.10194 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 782.231194][ T9409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 782.231210][ T9409] Call Trace: [ 782.231228][ T9409] [ 782.231237][ T9409] dump_stack_lvl+0xf6/0x150 [ 782.231264][ T9409] dump_stack+0x15/0x1a [ 782.231283][ T9409] should_fail_ex+0x261/0x270 [ 782.231311][ T9409] should_failslab+0x8f/0xb0 [ 782.231331][ T9409] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 782.231356][ T9409] ? __alloc_skb+0x10d/0x320 [ 782.231468][ T9409] __alloc_skb+0x10d/0x320 [ 782.231527][ T9409] ? __rcu_read_unlock+0x4e/0x70 [ 782.231557][ T9409] pfkey_sendmsg+0x10f/0x950 [ 782.231578][ T9409] ? avc_has_perm+0xd6/0x150 [ 782.231606][ T9409] ? selinux_socket_sendmsg+0x18a/0x1c0 [ 782.231648][ T9409] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 782.231704][ T9409] __sock_sendmsg+0x140/0x180 [ 782.231728][ T9409] ____sys_sendmsg+0x350/0x4e0 [ 782.231751][ T9409] __sys_sendmmsg+0x22a/0x4b0 [ 782.231792][ T9409] __x64_sys_sendmmsg+0x57/0x70 [ 782.231813][ T9409] x64_sys_call+0x2b53/0x2e10 [ 782.231886][ T9409] do_syscall_64+0xc9/0x1c0 [ 782.231916][ T9409] ? clear_bhb_loop+0x25/0x80 [ 782.231967][ T9409] ? clear_bhb_loop+0x25/0x80 [ 782.231993][ T9409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.232019][ T9409] RIP: 0033:0x7f47a64dd169 [ 782.232035][ T9409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.232056][ T9409] RSP: 002b:00007f47a4b41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 782.232085][ T9409] RAX: ffffffffffffffda RBX: 00007f47a66f5fa0 RCX: 00007f47a64dd169 [ 782.232131][ T9409] RDX: 0000000000000393 RSI: 0000200000000180 RDI: 0000000000000003 [ 782.232142][ T9409] RBP: 00007f47a4b41090 R08: 0000000000000000 R09: 0000000000000000 [ 782.232153][ T9409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.232164][ T9409] R13: 0000000000000000 R14: 00007f47a66f5fa0 R15: 00007fff865ae7d8 [ 782.232181][ T9409] [ 782.579415][ T9438] loop6: detected capacity change from 0 to 512 [ 782.615019][ T9438] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 782.745231][ T7862] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 782.770793][ T9458] loop0: detected capacity change from 0 to 164 [ 782.782043][ T9458] iso9660: Unknown parameter '0xffffffffffffffff' [ 783.280467][ T9492] loop6: detected capacity change from 0 to 512 [ 783.322847][ T9492] EXT4-fs: Ignoring removed oldalloc option [ 783.357368][ T9492] EXT4-fs error (device loop6): ext4_xattr_inode_iget:436: comm syz.6.10226: Parent and EA inode have the same ino 15 [ 783.408647][ T9492] EXT4-fs (loop6): Remounting filesystem read-only [ 783.416209][ T9492] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 783.459551][ T9505] FAULT_INJECTION: forcing a failure. [ 783.459551][ T9505] name failslab, interval 1, probability 0, space 0, times 0 [ 783.472293][ T9505] CPU: 0 UID: 0 PID: 9505 Comm: syz.3.10230 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 783.472329][ T9505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 783.472342][ T9505] Call Trace: [ 783.472348][ T9505] [ 783.472356][ T9505] dump_stack_lvl+0xf6/0x150 [ 783.472378][ T9505] dump_stack+0x15/0x1a [ 783.472434][ T9505] should_fail_ex+0x261/0x270 [ 783.472460][ T9505] should_failslab+0x8f/0xb0 [ 783.472478][ T9505] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 783.472504][ T9505] ? __alloc_skb+0x10d/0x320 [ 783.472555][ T9505] __alloc_skb+0x10d/0x320 [ 783.472626][ T9505] alloc_skb_with_frags+0x80/0x460 [ 783.472666][ T9505] ? selinux_file_open+0x356/0x3c0 [ 783.472761][ T9505] ? __rcu_read_unlock+0x4e/0x70 [ 783.472793][ T9505] sock_alloc_send_pskb+0x437/0x500 [ 783.472824][ T9505] ? mntput+0x49/0x70 [ 783.472918][ T9505] ? terminate_walk+0x271/0x290 [ 783.472947][ T9505] tun_get_user+0xa4f/0x2670 [ 783.472994][ T9505] ? ref_tracker_alloc+0x1ff/0x310 [ 783.473029][ T9505] tun_chr_write_iter+0x188/0x240 [ 783.473122][ T9505] vfs_write+0x79b/0x950 [ 783.473202][ T9505] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 783.473254][ T9505] ksys_write+0xeb/0x1b0 [ 783.473292][ T9505] __x64_sys_write+0x42/0x50 [ 783.473344][ T9505] x64_sys_call+0x2a45/0x2e10 [ 783.473372][ T9505] do_syscall_64+0xc9/0x1c0 [ 783.473422][ T9505] ? clear_bhb_loop+0x25/0x80 [ 783.473529][ T9505] ? clear_bhb_loop+0x25/0x80 [ 783.473556][ T9505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.473628][ T9505] RIP: 0033:0x7fe6974ebc1f [ 783.473647][ T9505] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 783.473730][ T9505] RSP: 002b:00007fe695b51000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 783.473812][ T9505] RAX: ffffffffffffffda RBX: 00007fe697705fa0 RCX: 00007fe6974ebc1f [ 783.473827][ T9505] RDX: 000000000000fed7 RSI: 0000200000000600 RDI: 00000000000000c8 [ 783.473842][ T9505] RBP: 00007fe695b51090 R08: 0000000000000000 R09: 0000000000000000 [ 783.473856][ T9505] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000001 [ 783.473871][ T9505] R13: 0000000000000000 R14: 00007fe697705fa0 R15: 00007fff8e633108 [ 783.473890][ T9505] [ 783.541322][ T9492] EXT4-fs (loop6): 1 orphan inode deleted [ 783.944913][ T9492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.993437][ T9492] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 784.011549][ T9492] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.164258][ T9530] __nla_validate_parse: 23 callbacks suppressed [ 784.164280][ T9530] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10242'. [ 784.207041][ T9530] netlink: 'syz.6.10242': attribute type 13 has an invalid length. [ 784.221872][ T9535] ip6t_rpfilter: unknown options [ 784.250064][ T9537] loop3: detected capacity change from 0 to 128 [ 784.288567][ T9537] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 784.321474][ T9537] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 784.462822][ T9546] loop6: detected capacity change from 0 to 512 [ 784.475065][ T9546] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 784.496712][ T8799] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 784.600127][ T9546] EXT4-fs (loop6): 1 truncate cleaned up [ 784.606815][ T9546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.644256][ T9551] loop9: detected capacity change from 0 to 256 [ 784.687045][ T9551] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 784.760668][ T9551] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 784.803240][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 784.803257][ T29] audit: type=1326 audit(759.699:36521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.9.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47a64dbad0 code=0x7ffc0000 [ 785.000461][ T5578] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 785.008778][ T5578] FAT-fs (loop9): Filesystem has been set read-only [ 785.042732][ T29] audit: type=1326 audit(759.727:36522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.9.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f47a64dbeb7 code=0x7ffc0000 [ 785.066452][ T29] audit: type=1326 audit(759.727:36523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.9.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47a64dbad0 code=0x7ffc0000 [ 785.090230][ T29] audit: type=1326 audit(759.727:36524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.9.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a64dd169 code=0x7ffc0000 [ 785.113980][ T29] audit: type=1326 audit(759.727:36525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.9.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a64dd169 code=0x7ffc0000 [ 785.137650][ T29] audit: type=1326 audit(759.755:36526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.9.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f47a64dd169 code=0x7ffc0000 [ 785.161206][ T29] audit: type=1326 audit(759.755:36527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.9.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a64dd169 code=0x7ffc0000 [ 785.184956][ T29] audit: type=1326 audit(759.755:36528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.9.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a64dd169 code=0x7ffc0000 [ 785.208672][ T29] audit: type=1326 audit(759.764:36529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.9.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f47a64dd169 code=0x7ffc0000 [ 785.232356][ T29] audit: type=1326 audit(759.774:36530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.9.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a64dd169 code=0x7ffc0000 [ 785.324516][ T5578] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 785.442638][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10251'. [ 785.451774][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10251'. [ 785.460911][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10251'. [ 785.523062][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10251'. [ 785.532963][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10251'. [ 785.578035][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10255'. [ 785.623963][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10251'. [ 785.690518][ T9572] loop3: detected capacity change from 0 to 128 [ 786.139853][ T9572] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 786.155078][ T7862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.203637][ T9572] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 786.351466][ T1643] bridge_slave_1: left allmulticast mode [ 786.352445][ T8799] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 786.357326][ T1643] bridge_slave_1: left promiscuous mode [ 786.372684][ T1643] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.380562][ T9590] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10260'. [ 786.389810][ T1643] bridge_slave_0: left allmulticast mode [ 786.389832][ T1643] bridge_slave_0: left promiscuous mode [ 786.389956][ T1643] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.442903][ T1643] bond1 (unregistering): (slave gretap1): Releasing active interface [ 786.513950][ T1643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.544866][ T1643] bond0 (unregistering): Released all slaves [ 786.563066][ T1643] bond1 (unregistering): (slave veth3): Releasing active interface [ 786.591121][ T1643] bond1 (unregistering): Released all slaves [ 786.597041][ T9600] loop3: detected capacity change from 0 to 512 [ 786.620544][ T9600] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 786.655985][ T1643] tipc: Left network mode [ 786.682190][ T9600] EXT4-fs (loop3): mount failed [ 786.709023][ T9604] loop0: detected capacity change from 0 to 128 [ 786.742653][ T9604] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 786.776024][ T9604] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 786.795935][ T1643] hsr_slave_0: left promiscuous mode [ 786.825407][ T1643] hsr_slave_1: left promiscuous mode [ 786.845193][ T9604] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.0.10265: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 786.885299][ T1643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.937987][ T1643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.976168][ T8210] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 786.995442][ T9609] loop3: detected capacity change from 0 to 2048 [ 787.057452][ T9609] loop3: p1 < > p4 [ 787.061605][ T1643] team0 (unregistering): Port device team_slave_1 removed [ 787.066178][ T9609] loop3: p4 size 8388608 extends beyond EOD, truncated [ 787.097484][ T1643] team0 (unregistering): Port device team_slave_0 removed [ 787.212641][ T9573] chnl_net:caif_netlink_parms(): no params data found [ 787.253292][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10268'. [ 787.266927][ T9620] loop6: detected capacity change from 0 to 1024 [ 787.282479][ T9616] netlink: 'syz.2.10268': attribute type 13 has an invalid length. [ 787.290282][ T9623] loop0: detected capacity change from 0 to 128 [ 787.297797][ T9620] EXT4-fs: Ignoring removed nobh option [ 787.303541][ T9620] EXT4-fs: inline encryption not supported [ 787.306924][ T9623] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 787.309383][ T9620] EXT4-fs: Ignoring removed bh option [ 787.348823][ T9623] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 787.374146][ T9620] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.389290][ T9573] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.396427][ T9573] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.411359][ T8210] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 787.414898][ T9573] bridge_slave_0: entered allmulticast mode [ 787.426828][ T9573] bridge_slave_0: entered promiscuous mode [ 787.451562][ T9573] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.458723][ T9573] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.466199][ T9573] bridge_slave_1: entered allmulticast mode [ 787.473665][ T9573] bridge_slave_1: entered promiscuous mode [ 787.479600][ T9637] loop0: detected capacity change from 0 to 128 [ 787.493890][ T9637] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 787.515796][ T1643] IPVS: stop unused estimator thread 0... [ 787.523456][ T9573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.539625][ T9637] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 787.551123][ T9573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.552663][ T7862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.572164][ T9637] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.0.10274: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 787.604603][ T9573] team0: Port device team_slave_0 added [ 787.620602][ T8210] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 787.636273][ T9573] team0: Port device team_slave_1 added [ 787.651546][ T9643] loop6: detected capacity change from 0 to 2048 [ 787.680422][ T9573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.687243][ T9645] loop0: detected capacity change from 0 to 512 [ 787.688255][ T9573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.720363][ T9573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.735049][ T9645] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.10277: corrupted in-inode xattr: invalid ea_ino [ 787.751289][ T9645] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.10277: couldn't read orphan inode 15 (err -117) [ 787.764554][ T9645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.778667][ T9643] loop6: p1 < > p4 [ 787.784070][ T9643] loop6: p4 size 8388608 extends beyond EOD, truncated [ 787.802114][ T9573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.809862][ T9573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.836645][ T9573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.002037][ T8210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.019553][ T9656] loop6: detected capacity change from 0 to 512 [ 788.035210][ T9573] hsr_slave_0: entered promiscuous mode [ 788.062292][ T9573] hsr_slave_1: entered promiscuous mode [ 788.069118][ T9656] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 788.087241][ T9573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 788.094958][ T9656] EXT4-fs (loop6): mount failed [ 788.099905][ T9573] Cannot create hsr debugfs directory [ 788.547617][ T9666] netlink: 'syz.2.10283': attribute type 13 has an invalid length. [ 788.785421][ T9573] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 789.202360][ T9573] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 789.816707][ T9573] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 789.989835][ T9573] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 790.169556][ T9573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.185919][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 790.185933][ T29] audit: type=1400 audit(764.734:36694): avc: denied { open } for pid=9685 comm="syz.6.10291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 790.205544][ T9573] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.211740][ T29] audit: type=1400 audit(764.734:36695): avc: denied { kernel } for pid=9685 comm="syz.6.10291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 790.241560][ T29] audit: type=1400 audit(764.781:36696): avc: denied { create } for pid=9679 comm="syz.0.10289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 790.256109][ T9686] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 790.256109][ T9686] program syz.6.10291 not setting count and/or reply_len properly [ 790.284544][ T29] audit: type=1400 audit(764.781:36697): avc: denied { create } for pid=9685 comm="syz.6.10291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 790.304435][ T29] audit: type=1400 audit(764.781:36698): avc: denied { setopt } for pid=9685 comm="syz.6.10291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 790.304440][ T1643] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.304465][ T29] audit: type=1400 audit(764.781:36699): avc: denied { ioctl } for pid=9685 comm="syz.6.10291" path="socket:[135300]" dev="sockfs" ino=135300 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 790.323741][ T1643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.331392][ T1643] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.331479][ T1643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.356770][ T29] audit: type=1326 audit(764.781:36700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9685 comm="syz.6.10291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3053ecd169 code=0x7ffc0000 [ 790.401177][ T29] audit: type=1326 audit(764.781:36701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9685 comm="syz.6.10291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3053ecd169 code=0x7ffc0000 [ 790.424265][ T9573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 790.424288][ T9573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 790.446159][ T29] audit: type=1326 audit(764.781:36702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9685 comm="syz.6.10291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3053ecd169 code=0x7ffc0000 [ 790.469774][ T29] audit: type=1400 audit(764.781:36703): avc: denied { create } for pid=9685 comm="syz.6.10291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 790.503153][ T9573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.638945][ T9696] loop6: detected capacity change from 0 to 512 [ 790.747760][ T9708] loop6: detected capacity change from 0 to 512 [ 790.783332][ T9708] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 790.820052][ T9573] veth0_vlan: entered promiscuous mode [ 790.835200][ T9708] EXT4-fs (loop6): mount failed [ 790.840176][ T9573] veth1_vlan: entered promiscuous mode [ 790.855967][ T9573] veth0_macvtap: entered promiscuous mode [ 790.875014][ T9573] veth1_macvtap: entered promiscuous mode [ 790.905364][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.917192][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.928641][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.940559][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.954043][ T9573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.963129][ T9708] __nla_validate_parse: 1 callbacks suppressed [ 790.963145][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10295'. [ 791.021836][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.033602][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.044818][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.056819][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.081794][ T9573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.123131][ T9734] loop0: detected capacity change from 0 to 512 [ 791.124266][ T9573] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.139663][ T9573] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.149901][ T9573] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.160033][ T9573] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.173968][ T9734] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 791.190988][ T9734] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 791.201577][ T9734] System zones: 0-2, 18-18, 34-34 [ 791.220733][ T9734] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 791.260668][ T9745] netlink: 'syz.6.10306': attribute type 74 has an invalid length. [ 791.284764][ T9734] EXT4-fs (loop0): 1 truncate cleaned up [ 791.298845][ T9734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.322197][ T9734] EXT4-fs warning (device loop0): ext4_group_extend:1891: can't read last block, resize aborted [ 791.366829][ T9734] EXT4-fs error (device loop0): ext4_find_dest_de:2079: inode #2: block 3: comm syz.0.10302: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 791.394019][ T9750] loop4: detected capacity change from 0 to 512 [ 791.417748][ T9734] EXT4-fs (loop0): Remounting filesystem read-only [ 791.445645][ T8210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.492723][ T9750] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 791.518684][ T9750] EXT4-fs (loop4): mount failed [ 791.556151][ T9759] bond2: entered promiscuous mode [ 791.561310][ T9759] bond2: entered allmulticast mode [ 791.597515][ T9763] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10310'. [ 791.636358][ T9759] 8021q: adding VLAN 0 to HW filter on device bond2 [ 791.681719][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10310'. [ 791.694374][ T9759] bond2 (unregistering): Released all slaves [ 791.720282][ T9763] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 792.038170][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10317'. [ 792.146465][ T9788] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 792.146465][ T9788] program syz.0.10320 not setting count and/or reply_len properly [ 792.208155][ T9791] veth1_to_bond: entered allmulticast mode [ 792.268467][ T9790] veth1_to_bond: left allmulticast mode [ 792.341046][ T9797] loop6: detected capacity change from 0 to 512 [ 792.401552][ T9797] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 792.428787][ T9797] EXT4-fs (loop6): mount failed [ 792.438474][ T9808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.540465][ T9808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.576853][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10330'. [ 792.654762][ T9808] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.753700][ T9823] loop6: detected capacity change from 0 to 2048 [ 792.793393][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10333'. [ 792.802850][ T9823] loop6: p1 < > p4 [ 792.811707][ T9823] loop6: p4 size 8388608 extends beyond EOD, truncated [ 792.829317][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10333'. [ 792.962590][ T9833] netlink: 'syz.2.10336': attribute type 4 has an invalid length. [ 793.027226][ T9833] netlink: 'syz.2.10336': attribute type 4 has an invalid length. [ 793.203762][ T9843] loop3: detected capacity change from 0 to 512 [ 793.213391][ T9843] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 793.223556][ T9843] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 793.234038][ T9843] System zones: 0-2, 18-18, 34-34 [ 793.239622][ T9843] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 793.256715][ T9843] EXT4-fs (loop3): 1 truncate cleaned up [ 793.263455][ T9843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.281462][ T9843] EXT4-fs warning (device loop3): ext4_group_extend:1891: can't read last block, resize aborted [ 793.314156][ T9843] EXT4-fs error (device loop3): ext4_find_dest_de:2079: inode #2: block 3: comm syz.3.10338: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 793.351370][ T9843] EXT4-fs (loop3): Remounting filesystem read-only [ 793.389323][ T8799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.391598][ T9849] loop0: detected capacity change from 0 to 512 [ 793.438825][ T9849] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 793.460106][ T9849] EXT4-fs (loop0): mount failed [ 793.470096][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10342'. [ 793.495632][ T9855] netlink: 'syz.3.10342': attribute type 13 has an invalid length. [ 793.518673][ T9857] loop0: detected capacity change from 0 to 512 [ 793.526700][ T9857] EXT4-fs: Ignoring removed bh option [ 793.533550][ T9857] EXT4-fs: Ignoring removed mblk_io_submit option [ 793.575082][ T9863] netlink: 'syz.3.10345': attribute type 1 has an invalid length. [ 793.575698][ T9857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.582949][ T9863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10345'. [ 793.622003][ T9857] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10343: bg 0: block 289: padding at end of block bitmap is not set [ 793.686256][ T8210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.711491][ T9870] loop6: detected capacity change from 0 to 512 [ 793.742461][ T9870] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 793.768586][ T9870] EXT4-fs (loop6): mount failed [ 794.168446][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10355'. [ 794.255710][ T9808] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.598407][ T9808] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.721627][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 795.721645][ T29] audit: type=1326 audit(769.900:37027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009804d169 code=0x7ffc0000 [ 795.752241][ T29] audit: type=1326 audit(769.919:37028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009804d169 code=0x7ffc0000 [ 795.958514][ T9808] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.050709][ T9914] loop6: detected capacity change from 0 to 512 [ 796.104426][ T9808] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.146389][ T9914] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 796.160135][ T9808] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.190406][ T9914] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 796.226327][ T9808] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.255357][ T9914] EXT4-fs (loop6): mount failed [ 796.263118][ T9808] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.559853][ T9931] __nla_validate_parse: 1 callbacks suppressed [ 796.559871][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10367'. [ 796.696766][ T9935] loop6: detected capacity change from 0 to 512 [ 796.717189][ T9935] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 796.759895][ T9935] EXT4-fs (loop6): invalid journal inode [ 796.779931][ T9935] EXT4-fs (loop6): can't get journal size [ 796.792503][ T29] audit: type=1326 audit(769.985:37029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f009804d169 code=0x7ffc0000 [ 796.803331][ T9935] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 796.816885][ T29] audit: type=1326 audit(769.985:37030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009804d169 code=0x7ffc0000 [ 796.849783][ T29] audit: type=1326 audit(769.985:37031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009804d169 code=0x7ffc0000 [ 796.860549][ T9935] System zones: 1-12, 13-13 [ 796.874501][ T29] audit: type=1400 audit(770.013:37032): avc: denied { wake_alarm } for pid=9903 comm="syz.2.10359" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 796.899707][ T29] audit: type=1326 audit(770.097:37033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.3.10360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6974ed169 code=0x7ffc0000 [ 796.923956][ T29] audit: type=1326 audit(770.097:37034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.3.10360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6974ed169 code=0x7ffc0000 [ 796.948223][ T29] audit: type=1326 audit(770.097:37035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.3.10360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe6974ed169 code=0x7ffc0000 [ 797.116741][ T9935] EXT4-fs (loop6): 1 truncate cleaned up [ 797.124693][ T9935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.346846][ T9935] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 797.383567][ T7862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.645985][ T9951] loop6: detected capacity change from 0 to 128 [ 797.665682][ T9951] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 797.702104][ T9951] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 797.758996][ T9951] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.6.10374: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 797.916399][ T7862] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 797.957174][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10379'. [ 797.979674][ T9963] netlink: 'syz.2.10379': attribute type 13 has an invalid length. [ 798.094128][ T9970] loop6: detected capacity change from 0 to 128 [ 798.122116][ T9970] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 798.158016][ T9970] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 798.195127][ T9970] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.6.10381: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 798.266451][ T9978] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 798.266451][ T9978] program syz.3.10384 not setting count and/or reply_len properly [ 798.343495][ T7862] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 798.468368][ T9990] loop3: detected capacity change from 0 to 512 [ 798.478085][ T9988] loop6: detected capacity change from 0 to 128 [ 798.512913][ T9990] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 798.519895][ T9988] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 798.550581][ T9990] EXT4-fs (loop3): mount failed [ 798.604286][ T9988] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 798.665597][ T9988] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.6.10387: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 798.759735][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10391'. [ 798.805935][ T9999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.875122][T10006] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 798.875122][T10006] program syz.0.10394 not setting count and/or reply_len properly [ 798.898289][ T9999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.139134][T10014] loop3: detected capacity change from 0 to 128 [ 799.165456][T10014] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 799.215451][T10014] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.3.10396: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 799.281437][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10399'. [ 799.331664][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10400'. [ 799.483897][T10035] loop4: detected capacity change from 0 to 128 [ 799.496118][T10035] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 799.563015][T10035] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.4.10404: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 800.872905][T10095] loop6: detected capacity change from 0 to 1024 [ 800.891508][T10095] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 800.919804][T10095] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 800.930404][T10095] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869) [ 800.965156][T10095] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 800.976044][T10095] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 801.026691][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10427'. [ 801.100663][T10103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10428'. [ 801.797306][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10431'. [ 801.838850][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 801.838870][ T29] audit: type=1326 audit(775.637:37195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.0.10431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009804d169 code=0x7ffc0000 [ 801.925843][ T29] audit: type=1326 audit(775.637:37196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.0.10431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009804d169 code=0x7ffc0000 [ 801.950830][ T29] audit: type=1326 audit(775.665:37197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.0.10431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f009804bad0 code=0x7ffc0000 [ 801.975313][ T29] audit: type=1326 audit(775.665:37198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.0.10431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f009804e997 code=0x7ffc0000 [ 801.999982][ T29] audit: type=1326 audit(775.665:37199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.0.10431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f009804d169 code=0x7ffc0000 [ 802.024503][ T29] audit: type=1326 audit(775.665:37200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.0.10431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f009804e997 code=0x7ffc0000 [ 802.048964][ T29] audit: type=1326 audit(775.665:37201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.0.10431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f009804bdca code=0x7ffc0000 [ 802.073343][ T29] audit: type=1326 audit(775.665:37202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.0.10431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009804d169 code=0x7ffc0000 [ 802.081450][T10121] loop3: detected capacity change from 0 to 128 [ 802.097613][ T29] audit: type=1326 audit(775.665:37203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.0.10431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009804d169 code=0x7ffc0000 [ 802.127362][ T29] audit: type=1326 audit(775.684:37204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.0.10431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f009804f087 code=0x7ffc0000 [ 802.159130][T10121] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 802.195118][T10121] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.3.10432: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 802.255428][T10126] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10434'. [ 802.410244][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10439'. [ 802.749562][T10155] loop3: detected capacity change from 0 to 1024 [ 802.767165][T10155] EXT4-fs: Ignoring removed i_version option [ 802.774671][T10155] EXT4-fs: Ignoring removed orlov option [ 802.780402][T10155] EXT4-fs: Ignoring removed oldalloc option [ 802.811335][T10155] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 802.823833][T10155] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 802.854871][T10155] EXT4-fs (loop3): invalid journal inode [ 802.869250][T10155] EXT4-fs (loop3): can't get journal size [ 802.888539][T10155] netlink: 732 bytes leftover after parsing attributes in process `syz.3.10444'. [ 802.899370][T10155] netlink: 732 bytes leftover after parsing attributes in process `syz.3.10444'. [ 803.237839][T10168] loop6: detected capacity change from 0 to 2048 [ 803.500760][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10451'. [ 804.285528][T10218] FAULT_INJECTION: forcing a failure. [ 804.285528][T10218] name failslab, interval 1, probability 0, space 0, times 0 [ 804.299823][T10218] CPU: 1 UID: 0 PID: 10218 Comm: syz.0.10464 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 804.299860][T10218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 804.299892][T10218] Call Trace: [ 804.299898][T10218] [ 804.299908][T10218] dump_stack_lvl+0xf6/0x150 [ 804.299931][T10218] dump_stack+0x15/0x1a [ 804.299948][T10218] should_fail_ex+0x261/0x270 [ 804.299980][T10218] should_failslab+0x8f/0xb0 [ 804.300031][T10218] __kmalloc_cache_noprof+0x55/0x320 [ 804.300064][T10218] ? rtnl_newlink+0x5f/0x1280 [ 804.300088][T10218] rtnl_newlink+0x5f/0x1280 [ 804.300106][T10218] ? xas_load+0x3ba/0x3d0 [ 804.300130][T10218] ? xas_load+0x3ba/0x3d0 [ 804.300234][T10218] ? __rcu_read_unlock+0x4e/0x70 [ 804.300266][T10218] ? xa_load+0xbd/0xe0 [ 804.300300][T10218] ? memcg_list_lru_alloc+0xd0/0x500 [ 804.300332][T10218] ? mod_objcg_state+0x2f5/0x500 [ 804.300365][T10218] ? __rcu_read_unlock+0x4e/0x70 [ 804.300472][T10218] ? avc_has_perm_noaudit+0x1cc/0x210 [ 804.300542][T10218] ? selinux_capable+0x1f9/0x260 [ 804.300580][T10218] ? security_capable+0x81/0x90 [ 804.300611][T10218] ? ns_capable+0x7d/0xb0 [ 804.300642][T10218] ? __pfx_rtnl_newlink+0x10/0x10 [ 804.300669][T10218] rtnetlink_rcv_msg+0x65a/0x740 [ 804.300695][T10218] ? avc_has_perm_noaudit+0x1cc/0x210 [ 804.300736][T10218] netlink_rcv_skb+0x12f/0x230 [ 804.300804][T10218] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 804.300918][T10218] rtnetlink_rcv+0x1c/0x30 [ 804.300942][T10218] netlink_unicast+0x605/0x6c0 [ 804.300985][T10218] netlink_sendmsg+0x609/0x720 [ 804.301024][T10218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 804.301055][T10218] __sock_sendmsg+0x140/0x180 [ 804.301089][T10218] ____sys_sendmsg+0x350/0x4e0 [ 804.301189][T10218] __sys_sendmsg+0x1a0/0x240 [ 804.301230][T10218] __x64_sys_sendmsg+0x46/0x50 [ 804.301254][T10218] x64_sys_call+0x26f3/0x2e10 [ 804.301281][T10218] do_syscall_64+0xc9/0x1c0 [ 804.301334][T10218] ? clear_bhb_loop+0x25/0x80 [ 804.301355][T10218] ? clear_bhb_loop+0x25/0x80 [ 804.301379][T10218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.301476][T10218] RIP: 0033:0x7f009804d169 [ 804.301491][T10218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.301509][T10218] RSP: 002b:00007f00966b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 804.301572][T10218] RAX: ffffffffffffffda RBX: 00007f0098265fa0 RCX: 00007f009804d169 [ 804.301584][T10218] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 804.301596][T10218] RBP: 00007f00966b1090 R08: 0000000000000000 R09: 0000000000000000 [ 804.301641][T10218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.301657][T10218] R13: 0000000000000000 R14: 00007f0098265fa0 R15: 00007ffe540ebcd8 [ 804.301681][T10218] [ 804.754773][T10224] FAULT_INJECTION: forcing a failure. [ 804.754773][T10224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.767947][T10224] CPU: 0 UID: 0 PID: 10224 Comm: syz.3.10468 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 804.767980][T10224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 804.767995][T10224] Call Trace: [ 804.768004][T10224] [ 804.768015][T10224] dump_stack_lvl+0xf6/0x150 [ 804.768045][T10224] dump_stack+0x15/0x1a [ 804.768088][T10224] should_fail_ex+0x261/0x270 [ 804.768121][T10224] should_fail+0xb/0x10 [ 804.768191][T10224] should_fail_usercopy+0x1a/0x20 [ 804.768257][T10224] strncpy_from_user+0x25/0x230 [ 804.768300][T10224] ? mod_objcg_state+0x2f5/0x500 [ 804.768336][T10224] ? mod_objcg_state+0x2f5/0x500 [ 804.768375][T10224] strncpy_from_user_nofault+0x66/0xe0 [ 804.768450][T10224] bpf_probe_read_user_str+0x2a/0x70 [ 804.768478][T10224] bpf_prog_bc7c5c6b9645592f+0x3e/0x40 [ 804.768501][T10224] bpf_trace_run4+0x116/0x1e0 [ 804.768542][T10224] __traceiter_sched_switch+0x3b/0x60 [ 804.768660][T10224] __schedule+0x9ca/0xae0 [ 804.768751][T10224] __cond_resched+0x53/0x90 [ 804.768783][T10224] synchronize_rcu_expedited+0x58e/0x790 [ 804.768851][T10224] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 804.768899][T10224] synchronize_rcu+0x4a/0x320 [ 804.768926][T10224] __blk_trace_remove+0x122/0x150 [ 804.769047][T10224] blk_trace_ioctl+0x12d/0x2f0 [ 804.769106][T10224] blkdev_common_ioctl+0xa46/0x19c0 [ 804.769153][T10224] ? do_vfs_ioctl+0x977/0x1570 [ 804.769270][T10224] ? selinux_file_ioctl+0x2f9/0x380 [ 804.769297][T10224] blkdev_ioctl+0x2fb/0x450 [ 804.769326][T10224] ? __pfx_blkdev_ioctl+0x10/0x10 [ 804.769368][T10224] __se_sys_ioctl+0xc9/0x140 [ 804.769456][T10224] __x64_sys_ioctl+0x43/0x50 [ 804.769486][T10224] x64_sys_call+0x168d/0x2e10 [ 804.769553][T10224] do_syscall_64+0xc9/0x1c0 [ 804.769585][T10224] ? clear_bhb_loop+0x25/0x80 [ 804.769614][T10224] ? clear_bhb_loop+0x25/0x80 [ 804.769637][T10224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.769676][T10224] RIP: 0033:0x7fe6974ed169 [ 804.769695][T10224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.769787][T10224] RSP: 002b:00007fe695b51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 804.769811][T10224] RAX: ffffffffffffffda RBX: 00007fe697705fa0 RCX: 00007fe6974ed169 [ 804.769825][T10224] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000005 [ 804.769839][T10224] RBP: 00007fe695b51090 R08: 0000000000000000 R09: 0000000000000000 [ 804.770006][T10224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.770018][T10224] R13: 0000000000000000 R14: 00007fe697705fa0 R15: 00007fff8e633108 [ 804.770037][T10224] [ 805.087486][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10469'. [ 805.093578][T10225] blktrace: Concurrent blktraces are not allowed on loop1 [ 805.254916][T12638] Process accounting resumed [ 805.310022][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10479'. [ 805.335926][T10257] FAULT_INJECTION: forcing a failure. [ 805.335926][T10257] name failslab, interval 1, probability 0, space 0, times 0 [ 805.349529][T10257] CPU: 0 UID: 0 PID: 10257 Comm: syz.3.10481 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 805.349615][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 805.349633][T10257] Call Trace: [ 805.349643][T10257] [ 805.349654][T10257] dump_stack_lvl+0xf6/0x150 [ 805.349685][T10257] dump_stack+0x15/0x1a [ 805.349702][T10257] should_fail_ex+0x261/0x270 [ 805.349759][T10257] should_failslab+0x8f/0xb0 [ 805.349844][T10257] kmem_cache_alloc_noprof+0x59/0x340 [ 805.349876][T10257] ? radix_tree_node_alloc+0x8b/0x1e0 [ 805.349967][T10257] radix_tree_node_alloc+0x8b/0x1e0 [ 805.350000][T10257] idr_get_free+0x1f5/0x560 [ 805.350072][T10257] idr_alloc_u32+0xcd/0x180 [ 805.350111][T10257] tcf_idr_check_alloc+0x171/0x270 [ 805.350154][T10257] tcf_ct_init+0x239/0xef0 [ 805.350205][T10257] ? __nla_validate_parse+0x1843/0x1f60 [ 805.350322][T10257] tcf_action_init_1+0x34b/0x4c0 [ 805.350374][T10257] tcf_action_init+0x1ce/0x620 [ 805.350448][T10257] tc_ctl_action+0x2be/0x880 [ 805.350495][T10257] ? __pfx_tc_ctl_action+0x10/0x10 [ 805.350540][T10257] rtnetlink_rcv_msg+0x6b7/0x740 [ 805.350569][T10257] ? avc_has_perm_noaudit+0x1cc/0x210 [ 805.350617][T10257] netlink_rcv_skb+0x12f/0x230 [ 805.350652][T10257] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 805.350688][T10257] rtnetlink_rcv+0x1c/0x30 [ 805.350789][T10257] netlink_unicast+0x605/0x6c0 [ 805.350816][T10257] netlink_sendmsg+0x609/0x720 [ 805.350961][T10257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.350995][T10257] __sock_sendmsg+0x140/0x180 [ 805.351039][T10257] ____sys_sendmsg+0x350/0x4e0 [ 805.351078][T10257] __sys_sendmsg+0x1a0/0x240 [ 805.351121][T10257] __x64_sys_sendmsg+0x46/0x50 [ 805.351153][T10257] x64_sys_call+0x26f3/0x2e10 [ 805.351180][T10257] do_syscall_64+0xc9/0x1c0 [ 805.351213][T10257] ? clear_bhb_loop+0x25/0x80 [ 805.351241][T10257] ? clear_bhb_loop+0x25/0x80 [ 805.351323][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.351352][T10257] RIP: 0033:0x7fe6974ed169 [ 805.351371][T10257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.351395][T10257] RSP: 002b:00007fe695b51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 805.351419][T10257] RAX: ffffffffffffffda RBX: 00007fe697705fa0 RCX: 00007fe6974ed169 [ 805.351436][T10257] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000003 [ 805.351452][T10257] RBP: 00007fe695b51090 R08: 0000000000000000 R09: 0000000000000000 [ 805.351544][T10257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.351556][T10257] R13: 0000000000000000 R14: 00007fe697705fa0 R15: 00007fff8e633108 [ 805.351575][T10257] [ 805.711481][T10270] vxcan1 speed is unknown, defaulting to 1000 [ 805.718297][T10270] vxcan1 speed is unknown, defaulting to 1000 [ 805.726523][T10270] vxcan1 speed is unknown, defaulting to 1000 [ 805.769674][T10270] infiniband syz2: set down [ 805.774249][T10270] infiniband syz2: added vxcan1 [ 805.779228][T12638] vxcan1 speed is unknown, defaulting to 1000 [ 805.792814][T10270] RDS/IB: syz2: added [ 805.797066][T10270] smc: adding ib device syz2 with port count 1 [ 805.803318][T10270] smc: ib device syz2 port 1 has pnetid [ 805.810156][T23407] vxcan1 speed is unknown, defaulting to 1000 [ 805.817110][T10270] vxcan1 speed is unknown, defaulting to 1000 [ 805.857024][T10270] vxcan1 speed is unknown, defaulting to 1000 [ 805.929848][T10270] vxcan1 speed is unknown, defaulting to 1000 [ 806.018166][T10270] vxcan1 speed is unknown, defaulting to 1000 [ 806.039161][T10278] loop6: detected capacity change from 0 to 1024 [ 806.072426][T10278] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 806.083422][T10278] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 806.122174][T10270] vxcan1 speed is unknown, defaulting to 1000 [ 806.130612][T10278] JBD2: no valid journal superblock found [ 806.136411][T10278] EXT4-fs (loop6): Could not load journal inode [ 806.187172][T10278] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 806.214091][T10283] loop0: detected capacity change from 0 to 1024 [ 806.214693][T10270] vxcan1 speed is unknown, defaulting to 1000 [ 806.240112][T10283] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 806.252095][T10283] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 806.274697][T10286] loop6: detected capacity change from 0 to 128 [ 806.311886][T10283] JBD2: no valid journal superblock found [ 806.317720][T10283] EXT4-fs (loop0): Could not load journal inode [ 806.326273][T10286] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 806.334991][T10270] vxcan1 speed is unknown, defaulting to 1000 [ 806.388011][T10286] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.6.10489: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 806.435773][T10270] vxcan1 speed is unknown, defaulting to 1000 [ 806.486049][T10270] vxcan1 speed is unknown, defaulting to 1000 [ 806.580552][T10302] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 806.580552][T10302] program syz.6.10495 not setting count and/or reply_len properly [ 806.606895][T10270] vxcan1 speed is unknown, defaulting to 1000 [ 806.616109][T10300] loop0: detected capacity change from 0 to 2048 [ 806.698953][T10300] loop0: p1 < > p4 [ 806.748160][T10300] loop0: p4 size 8388608 extends beyond EOD, truncated [ 806.882333][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10498'. [ 806.911769][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10499'. [ 807.062405][T10318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10500'. [ 807.095475][T10318] netlink: 'syz.4.10500': attribute type 13 has an invalid length. [ 807.180588][T10318] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.187892][T10318] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.288392][T10318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.313459][T10318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.383293][T10318] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.392678][T10318] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.401165][T10318] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.409597][T10318] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.530823][T10330] loop4: detected capacity change from 0 to 512 [ 807.548371][T10330] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 807.649670][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 807.649690][ T29] audit: type=1400 audit(781.075:37758): avc: denied { write } for pid=10329 comm="syz.4.10504" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 807.713416][T10338] loop6: detected capacity change from 0 to 512 [ 807.778207][T10338] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 807.789792][T10338] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 807.818957][T10338] EXT4-fs (loop6): mount failed [ 807.885877][ T29] audit: type=1400 audit(781.290:37759): avc: denied { setopt } for pid=10345 comm="syz.6.10509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 807.911419][T10346] SELinux: syz.6.10509 (10346) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 807.932121][T10347] netlink: 'syz.2.10508': attribute type 74 has an invalid length. [ 808.002467][ T29] audit: type=1400 audit(781.402:37760): avc: denied { read write } for pid=10349 comm="syz.6.10511" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 808.013331][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10512'. [ 808.027157][ T29] audit: type=1400 audit(781.402:37761): avc: denied { open } for pid=10349 comm="syz.6.10511" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 808.060919][T10351] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 808.060919][T10351] program syz.3.10510 not setting count and/or reply_len properly [ 808.092203][ T29] audit: type=1326 audit(781.487:37762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.0.10512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009804d169 code=0x7ffc0000 [ 808.143627][ T29] audit: type=1326 audit(781.487:37763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.0.10512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009804d169 code=0x7ffc0000 [ 808.167639][ T29] audit: type=1326 audit(781.487:37764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.0.10512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f009804bad0 code=0x7ffc0000 [ 808.185762][T10358] loop6: detected capacity change from 0 to 512 [ 808.191643][ T29] audit: type=1326 audit(781.487:37765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.0.10512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f009804e997 code=0x7ffc0000 [ 808.191677][ T29] audit: type=1326 audit(781.487:37766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.0.10512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f009804d169 code=0x7ffc0000 [ 808.253042][T10358] EXT4-fs: quotafile must be on filesystem root [ 808.271173][T10362] loop0: detected capacity change from 0 to 512 [ 808.301548][T10362] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 808.334113][T10362] EXT4-fs (loop0): mount failed [ 808.641113][T10372] loop3: detected capacity change from 0 to 128 [ 808.666111][T10372] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 808.696700][T10372] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.3.10516: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 808.859296][T10377] FAULT_INJECTION: forcing a failure. [ 808.859296][T10377] name failslab, interval 1, probability 0, space 0, times 0 [ 808.873521][T10377] CPU: 1 UID: 0 PID: 10377 Comm: syz.3.10518 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 808.873557][T10377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 808.873573][T10377] Call Trace: [ 808.873583][T10377] [ 808.873592][T10377] dump_stack_lvl+0xf6/0x150 [ 808.873623][T10377] dump_stack+0x15/0x1a [ 808.873644][T10377] should_fail_ex+0x261/0x270 [ 808.873675][T10377] should_failslab+0x8f/0xb0 [ 808.873754][T10377] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 808.873868][T10377] ? sidtab_sid2str_get+0xb8/0x140 [ 808.873898][T10377] ? vsnprintf+0x84d/0x8a0 [ 808.873940][T10377] kmemdup_noprof+0x2b/0x70 [ 808.873981][T10377] sidtab_sid2str_get+0xb8/0x140 [ 808.874032][T10377] security_sid_to_context_core+0x1eb/0x2f0 [ 808.874065][T10377] security_sid_to_context+0x27/0x30 [ 808.874093][T10377] selinux_lsmprop_to_secctx+0x6c/0xf0 [ 808.874126][T10377] security_lsmprop_to_secctx+0x40/0x80 [ 808.874224][T10377] audit_log_task_context+0x7a/0x180 [ 808.874255][T10377] audit_log_task+0xfb/0x250 [ 808.874298][T10377] audit_seccomp+0x68/0x130 [ 808.874350][T10377] __seccomp_filter+0x694/0x10e0 [ 808.874388][T10377] ? selinux_capable+0x1f9/0x260 [ 808.874513][T10377] __secure_computing+0x7e/0x160 [ 808.874658][T10377] syscall_trace_enter+0xcf/0x1f0 [ 808.874814][T10377] ? fpregs_assert_state_consistent+0x83/0xa0 [ 808.874848][T10377] do_syscall_64+0xaa/0x1c0 [ 808.874873][T10377] ? clear_bhb_loop+0x25/0x80 [ 808.874896][T10377] ? clear_bhb_loop+0x25/0x80 [ 808.874977][T10377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.875004][T10377] RIP: 0033:0x7fe6974ebb7c [ 808.875023][T10377] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 808.875107][T10377] RSP: 002b:00007fe695b51030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 808.875131][T10377] RAX: ffffffffffffffda RBX: 00007fe697705fa0 RCX: 00007fe6974ebb7c [ 808.875146][T10377] RDX: 000000000000000f RSI: 00007fe695b510a0 RDI: 0000000000000004 [ 808.875161][T10377] RBP: 00007fe695b51090 R08: 0000000000000000 R09: 0000000000000000 [ 808.875241][T10377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 808.875284][T10377] R13: 0000000000000000 R14: 00007fe697705fa0 R15: 00007fff8e633108 [ 808.875306][T10377] [ 809.189291][T10377] loop3: detected capacity change from 0 to 512 [ 809.224347][T10377] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 809.255105][T10379] cgroup: Bad value for 'name' [ 809.263012][T10383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.303807][T10383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.369551][T10383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 809.400902][T10383] bond0: (slave bond1): Enslaving as an active interface with an up link [ 809.551186][T10390] loop6: detected capacity change from 0 to 128 [ 809.579230][T10390] vfat: Unknown parameter 'vp >ؿ{BiIq_#΅oˠO ˲f9A ޿uIBu|0ŏNij' [ 809.929386][T10395] loop0: detected capacity change from 0 to 512 [ 809.950426][T10395] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 809.967286][T10395] EXT4-fs (loop0): invalid journal inode [ 809.983890][T10395] EXT4-fs (loop0): can't get journal size [ 809.994950][T10395] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 810.010399][T10395] System zones: 1-12, 13-13 [ 810.029359][T10395] EXT4-fs (loop0): 1 truncate cleaned up [ 810.035794][T10395] EXT4-fs mount: 17 callbacks suppressed [ 810.035812][T10395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.129850][T10402] lo: entered promiscuous mode [ 810.134741][T10402] lo: entered allmulticast mode [ 810.184400][ T8210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.196323][T10402] loop4: detected capacity change from 0 to 512 [ 810.216788][T10402] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 810.276817][T10402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.326247][T10411] loop3: detected capacity change from 0 to 128 [ 810.343482][T10411] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 810.363319][T10411] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 810.378151][T10411] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.3.10529: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 810.426342][ T8799] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 810.474917][T10420] loop6: detected capacity change from 0 to 512 [ 810.511192][T10420] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 810.534142][T10420] EXT4-fs (loop6): invalid journal inode [ 810.539893][T10420] EXT4-fs (loop6): can't get journal size [ 811.216749][ T9573] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.604691][T10420] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 811.634716][T10420] System zones: 1-12, 13-13 [ 811.667101][T10420] EXT4-fs (loop6): 1 truncate cleaned up [ 811.689228][T10420] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.853429][ T7862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.905360][T10435] loop4: detected capacity change from 0 to 128 [ 811.955038][T10437] loop6: detected capacity change from 0 to 512 [ 811.996267][T10437] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 812.097443][T10437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.319990][T10447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10539'. [ 812.351337][ T7862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.746672][T10460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10545'. [ 812.867642][T10465] loop0: detected capacity change from 0 to 512 [ 812.938881][T10465] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 812.955157][T10465] EXT4-fs (loop0): mount failed [ 813.053483][T10472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10549'. [ 813.089156][T10472] netlink: 'syz.0.10549': attribute type 13 has an invalid length. [ 813.234376][T10480] syz.0.10552: attempt to access beyond end of device [ 813.234376][T10480] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 813.507480][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10557'. [ 813.536182][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 813.536201][ T29] audit: type=1326 audit(786.587:38037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.6.10557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3053ecd169 code=0x7ffc0000 [ 813.630825][ T29] audit: type=1326 audit(786.615:38038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.6.10557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3053ecbad0 code=0x7ffc0000 [ 813.655457][ T29] audit: type=1326 audit(786.615:38039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.6.10557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3053ece997 code=0x7ffc0000 [ 813.680014][ T29] audit: type=1326 audit(786.615:38040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.6.10557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3053ecd169 code=0x7ffc0000 [ 813.704461][ T29] audit: type=1326 audit(786.615:38041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.6.10557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3053ece997 code=0x7ffc0000 [ 813.729057][ T29] audit: type=1326 audit(786.615:38042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.6.10557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3053ecbdca code=0x7ffc0000 [ 813.752120][ T29] audit: type=1326 audit(786.615:38043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.6.10557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3053ecd169 code=0x7ffc0000 [ 813.776307][ T29] audit: type=1326 audit(786.615:38044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.6.10557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3053ecd169 code=0x7ffc0000 [ 813.801019][ T29] audit: type=1326 audit(786.625:38045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.6.10557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3053ecf087 code=0x7ffc0000 [ 813.825397][ T29] audit: type=1326 audit(786.625:38046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.6.10557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3053eceffc code=0x7ffc0000 [ 813.870819][T10494] FAULT_INJECTION: forcing a failure. [ 813.870819][T10494] name failslab, interval 1, probability 0, space 0, times 0 [ 813.884943][T10494] CPU: 1 UID: 0 PID: 10494 Comm: syz.0.10558 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 813.884975][T10494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 813.885003][T10494] Call Trace: [ 813.885009][T10494] [ 813.885018][T10494] dump_stack_lvl+0xf6/0x150 [ 813.885045][T10494] dump_stack+0x15/0x1a [ 813.885065][T10494] should_fail_ex+0x261/0x270 [ 813.885093][T10494] should_failslab+0x8f/0xb0 [ 813.885117][T10494] __kmalloc_node_noprof+0xaf/0x420 [ 813.885207][T10494] ? do_syscall_64+0xc9/0x1c0 [ 813.885295][T10494] ? qdisc_alloc+0x65/0x450 [ 813.885395][T10494] qdisc_alloc+0x65/0x450 [ 813.885429][T10494] qdisc_create_dflt+0x4c/0x280 [ 813.885460][T10494] taprio_init+0x29e/0x630 [ 813.885494][T10494] ? __pfx_taprio_init+0x10/0x10 [ 813.885529][T10494] qdisc_create+0x6b6/0xad0 [ 813.885552][T10494] ? __nla_parse+0x40/0x60 [ 813.885600][T10494] tc_modify_qdisc+0x66a/0x1100 [ 813.885639][T10494] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 813.885680][T10494] rtnetlink_rcv_msg+0x6b7/0x740 [ 813.885785][T10494] ? avc_has_perm_noaudit+0x1cc/0x210 [ 813.885815][T10494] netlink_rcv_skb+0x12f/0x230 [ 813.885845][T10494] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 813.885877][T10494] rtnetlink_rcv+0x1c/0x30 [ 813.885974][T10494] netlink_unicast+0x605/0x6c0 [ 813.885997][T10494] netlink_sendmsg+0x609/0x720 [ 813.886056][T10494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.886090][T10494] __sock_sendmsg+0x140/0x180 [ 813.886178][T10494] ____sys_sendmsg+0x350/0x4e0 [ 813.886208][T10494] __sys_sendmsg+0x1a0/0x240 [ 813.886313][T10494] __x64_sys_sendmsg+0x46/0x50 [ 813.886337][T10494] x64_sys_call+0x26f3/0x2e10 [ 813.886363][T10494] do_syscall_64+0xc9/0x1c0 [ 813.886395][T10494] ? clear_bhb_loop+0x25/0x80 [ 813.886419][T10494] ? clear_bhb_loop+0x25/0x80 [ 813.886512][T10494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.886532][T10494] RIP: 0033:0x7f009804d169 [ 813.886547][T10494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.886565][T10494] RSP: 002b:00007f00966b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 813.886589][T10494] RAX: ffffffffffffffda RBX: 00007f0098265fa0 RCX: 00007f009804d169 [ 813.886636][T10494] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000008 [ 813.886654][T10494] RBP: 00007f00966b1090 R08: 0000000000000000 R09: 0000000000000000 [ 813.886667][T10494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 813.886678][T10494] R13: 0000000000000000 R14: 00007f0098265fa0 R15: 00007ffe540ebcd8 [ 813.886696][T10494] [ 813.945397][T10496] vxcan1 speed is unknown, defaulting to 1000 [ 814.122029][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10561'. [ 814.126811][T12638] usb usb8-port2: attempt power cycle [ 814.148207][T10503] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.197983][T10503] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.208206][T10503] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.218388][T10503] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.239657][T10503] vxlan0: entered promiscuous mode [ 814.256278][T10501] siw: device registration error -23 [ 814.265986][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10562'. [ 814.287695][T10505] netlink: 'syz.3.10562': attribute type 13 has an invalid length. [ 814.342576][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10566'. [ 814.358805][T10515] netlink: 'syz.3.10566': attribute type 13 has an invalid length. [ 814.531404][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10570'. [ 814.673783][T10531] bond1: entered promiscuous mode [ 814.680445][T10531] bond1: entered allmulticast mode [ 814.692880][T10531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 814.715627][T10531] bond1 (unregistering): Released all slaves [ 814.818200][T10534] FAULT_INJECTION: forcing a failure. [ 814.818200][T10534] name failslab, interval 1, probability 0, space 0, times 0 [ 814.832529][T10534] CPU: 1 UID: 0 PID: 10534 Comm: +}[@ Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 814.832601][T10534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 814.832617][T10534] Call Trace: [ 814.832625][T10534] [ 814.832635][T10534] dump_stack_lvl+0xf6/0x150 [ 814.832665][T10534] dump_stack+0x15/0x1a [ 814.832686][T10534] should_fail_ex+0x261/0x270 [ 814.832717][T10534] should_failslab+0x8f/0xb0 [ 814.832798][T10534] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 814.832834][T10534] ? __alloc_skb+0x10d/0x320 [ 814.832961][T10534] __alloc_skb+0x10d/0x320 [ 814.833002][T10534] netlink_alloc_large_skb+0xad/0xe0 [ 814.833108][T10534] netlink_sendmsg+0x3da/0x720 [ 814.833198][T10534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 814.833233][T10534] __sock_sendmsg+0x140/0x180 [ 814.833266][T10534] ____sys_sendmsg+0x350/0x4e0 [ 814.833352][T10534] __sys_sendmsg+0x1a0/0x240 [ 814.833399][T10534] __x64_sys_sendmsg+0x46/0x50 [ 814.833423][T10534] x64_sys_call+0x26f3/0x2e10 [ 814.833450][T10534] do_syscall_64+0xc9/0x1c0 [ 814.833481][T10534] ? clear_bhb_loop+0x25/0x80 [ 814.833590][T10534] ? clear_bhb_loop+0x25/0x80 [ 814.833611][T10534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.833634][T10534] RIP: 0033:0x7fe6974ed169 [ 814.833649][T10534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.833737][T10534] RSP: 002b:00007fe695b51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 814.833760][T10534] RAX: ffffffffffffffda RBX: 00007fe697705fa0 RCX: 00007fe6974ed169 [ 814.833786][T10534] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000008 [ 814.833802][T10534] RBP: 00007fe695b51090 R08: 0000000000000000 R09: 0000000000000000 [ 814.833817][T10534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.833833][T10534] R13: 0000000000000000 R14: 00007fe697705fa0 R15: 00007fff8e633108 [ 814.833859][T10534] [ 815.352203][T10548] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 815.403766][T10548] team0 (unregistering): Port device team_slave_0 removed [ 815.411724][T10548] team0 (unregistering): Port device team_slave_1 removed [ 815.552739][T10560] loop0: detected capacity change from 0 to 512 [ 815.576352][T10556] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.617756][T10560] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 815.625870][T10560] EXT4-fs (loop0): orphan cleanup on readonly fs [ 815.641374][T10556] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.657399][T10560] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 815.690650][T10560] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 815.703904][T10560] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10581: bg 0: block 40: padding at end of block bitmap is not set [ 815.726200][T10560] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 815.738489][T10571] loop6: detected capacity change from 0 to 512 [ 815.749873][T10556] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.760932][T10560] EXT4-fs (loop0): 1 truncate cleaned up [ 815.771953][T10560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 815.806775][T10560] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.895654][T10556] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.076619][T10556] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.097691][T12638] usb usb8-port2: unable to enumerate USB device [ 816.108522][T10441] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 816.206643][T10577] FAULT_INJECTION: forcing a failure. [ 816.206643][T10577] name failslab, interval 1, probability 0, space 0, times 0 [ 816.219395][T10577] CPU: 0 UID: 0 PID: 10577 Comm: syz.4.10587 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 816.219428][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 816.219512][T10577] Call Trace: [ 816.219521][T10577] [ 816.219532][T10577] dump_stack_lvl+0xf6/0x150 [ 816.219560][T10577] dump_stack+0x15/0x1a [ 816.219576][T10577] should_fail_ex+0x261/0x270 [ 816.219600][T10577] should_failslab+0x8f/0xb0 [ 816.219667][T10577] __kmalloc_noprof+0xad/0x410 [ 816.219691][T10577] ? tracepoint_probe_unregister+0x181/0x6c0 [ 816.219779][T10577] ? __pfx_tp_stub_func+0x10/0x10 [ 816.219809][T10577] tracepoint_probe_unregister+0x181/0x6c0 [ 816.219831][T10577] ? __pfx_perf_trace_sched_switch+0x10/0x10 [ 816.219864][T10577] trace_event_reg+0xdb/0x170 [ 816.219918][T10577] perf_trace_event_unreg+0x6c/0x1a0 [ 816.219945][T10577] perf_trace_destroy+0x6a/0xe0 [ 816.219968][T10577] tp_perf_event_destroy+0x15/0x20 [ 816.220069][T10577] ? __pfx_tp_perf_event_destroy+0x10/0x10 [ 816.220102][T10577] __free_event+0x2c2/0x500 [ 816.220172][T10577] _free_event+0x6d4/0x730 [ 816.220234][T10577] perf_event_release_kernel+0x61f/0x670 [ 816.220270][T10577] perf_release+0x1f/0x30 [ 816.220303][T10577] ? __pfx_perf_release+0x10/0x10 [ 816.220322][T10577] __fput+0x2ac/0x640 [ 816.220351][T10577] ____fput+0x1c/0x30 [ 816.220446][T10577] task_work_run+0x13c/0x1b0 [ 816.220479][T10577] syscall_exit_to_user_mode+0xa8/0x120 [ 816.220511][T10577] do_syscall_64+0xd6/0x1c0 [ 816.220570][T10577] ? clear_bhb_loop+0x25/0x80 [ 816.220598][T10577] ? clear_bhb_loop+0x25/0x80 [ 816.220619][T10577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.220731][T10577] RIP: 0033:0x7f3c7a0ad169 [ 816.220748][T10577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.220777][T10577] RSP: 002b:00007f3c78717038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 816.220803][T10577] RAX: 0000000000000000 RBX: 00007f3c7a2c5fa0 RCX: 00007f3c7a0ad169 [ 816.220846][T10577] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 816.220914][T10577] RBP: 00007f3c78717090 R08: 0000000000000000 R09: 0000000000000000 [ 816.220926][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.220942][T10577] R13: 0000000000000000 R14: 00007f3c7a2c5fa0 R15: 00007ffd39755a88 [ 816.220985][T10577] [ 816.253383][T10556] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.519294][T10556] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.533675][T10556] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.559376][T10580] loop0: detected capacity change from 0 to 128 [ 816.575228][T10580] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 816.625361][T10580] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 816.641221][T10580] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.0.10588: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 816.743695][T10587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10590'. [ 816.767031][T10587] netlink: 'syz.3.10590': attribute type 13 has an invalid length. [ 816.781505][ T8210] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 816.831450][T10593] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10594'. [ 816.840704][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10594'. [ 816.850638][T10593] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10594'. [ 817.152200][T10606] vxcan1 speed is unknown, defaulting to 1000 [ 817.282761][T10607] hub 5-0:1.0: USB hub found [ 817.287614][T10607] hub 5-0:1.0: 8 ports detected [ 817.573225][T10611] syz.3.10599: attempt to access beyond end of device [ 817.573225][T10611] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 817.802046][T10621] netlink: 'syz.2.10605': attribute type 13 has an invalid length. [ 817.834133][T10621] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.844007][T10621] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.853781][T10621] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.863707][T10621] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.067301][T10631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.095742][T10631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.207222][T10648] netlink: 'syz.4.10614': attribute type 4 has an invalid length. [ 818.259277][ T9573] ================================================================== [ 818.267430][ T9573] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 818.274922][ T9573] [ 818.277259][ T9573] read-write to 0xffff888138266ba8 of 8 bytes by task 10649 on cpu 1: [ 818.285424][ T9573] shmem_recalc_inode+0x36/0x1b0 [ 818.290384][ T9573] shmem_get_folio_gfp+0x796/0xd30 [ 818.295510][ T9573] shmem_write_begin+0xa7/0x190 [ 818.300383][ T9573] generic_perform_write+0x189/0x4b0 [ 818.305709][ T9573] shmem_file_write_iter+0xc2/0xe0 [ 818.310849][ T9573] __kernel_write_iter+0x243/0x4c0 [ 818.315999][ T9573] dump_user_range+0x5ed/0x8b0 [ 818.320778][ T9573] elf_core_dump+0x1d61/0x1ef0 [ 818.325572][ T9573] do_coredump+0x1814/0x1f50 [ 818.330175][ T9573] get_signal+0xd56/0x1000 [ 818.334618][ T9573] arch_do_signal_or_restart+0x9a/0x4b0 [ 818.340196][ T9573] irqentry_exit_to_user_mode+0xa7/0x120 [ 818.345857][ T9573] irqentry_exit+0x12/0x50 [ 818.350308][ T9573] asm_exc_page_fault+0x26/0x30 [ 818.355176][ T9573] [ 818.357509][ T9573] read to 0xffff888138266ba8 of 8 bytes by task 9573 on cpu 0: [ 818.365071][ T9573] shmem_getattr+0x42/0x200 [ 818.369598][ T9573] vfs_getattr+0x172/0x1b0 [ 818.374035][ T9573] vfs_statx+0x12c/0x310 [ 818.378333][ T9573] vfs_fstatat+0xe4/0x130 [ 818.382680][ T9573] __se_sys_newfstatat+0x58/0x260 [ 818.387736][ T9573] __x64_sys_newfstatat+0x55/0x70 [ 818.392783][ T9573] x64_sys_call+0x2d6f/0x2e10 [ 818.397483][ T9573] do_syscall_64+0xc9/0x1c0 [ 818.402010][ T9573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.407922][ T9573] [ 818.410251][ T9573] value changed: 0x00000000000002bb -> 0x00000000000002bd [ 818.417364][ T9573] [ 818.419701][ T9573] Reported by Kernel Concurrency Sanitizer on: [ 818.425872][ T9573] CPU: 0 UID: 0 PID: 9573 Comm: syz-executor Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 818.438145][ T9573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 818.448229][ T9573] ================================================================== [ 822.934903][ T3376] page_pool_release_retry() stalled pool shutdown: id 186, 1 inflight 60 sec