last executing test programs: 51.175576984s ago: executing program 4 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x6100) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x23}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe50}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) bind$bt_sco(r1, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x7) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x10, 0x700, 0x8, 0xfffffff8, {{0x1b, 0x4, 0x2, 0x2f, 0x6c, 0x67, 0x1, 0x3, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x34, 0x4b, 0x1, 0x0, [{@remote, 0x5}, {@broadcast, 0x8b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @noop, @timestamp={0x44, 0x14, 0x40, 0x0, 0x3, [0x7, 0xf, 0x5, 0x9]}, @timestamp_addr={0x44, 0xc, 0xa2, 0x1, 0x9, [{@remote, 0x6}]}, @generic={0x82, 0x2}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1e4, r4, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x1a4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8bf5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4d, 0x5, "2f1ba1b22560640dad9a368ab2a7e47e3768d03ed25f23ef5c0cc8121cc1a4e2f760b9f44e018d02f74f411086fa9fd310375aa5e2b21fff9d3620665597cad53635f029af0811b188"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x799c9e05}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(%[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TPROXY\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5ad3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/,^::\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb30}, @ETHTOOL_A_BITSET_MASK={0x52, 0x5, "8b8ce55be7b56a0acdf7969b6104ab9e47a4ae5ec16e0425f60c00f76423156f10c03439031dc6b088bd133b8bfaf64ebd1acb9c0dffa117bc0fee8455724ea0e594f17f5840437470f26e857414"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000}, 0x20048800) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000006c0), 0x13f, 0x1}}, 0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000740)={0x0, 0xffffffff}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000007c0)={r7, 0x5, "40a70c8a1f"}, &(0x7f0000000800)=0xd) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000840), 0xb0082, 0x0) r9 = socket$kcm(0x29, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000880)={0x1, [0x0]}, &(0x7f00000008c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000900)={r10, 0x5}, 0x8) pipe2(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40880) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1e, 0xffff5b6a, 0xb2, 0x7f, 0x180e, r11, 0x4b, '\x00', r6, r1, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r14 = accept$inet(r1, &(0x7f0000000a00)={0x2, 0x0, @broadcast}, &(0x7f0000000a40)=0x10) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000a80)={'veth0_to_batadv\x00', 0x0}) r16 = socket$pptp(0x18, 0x1, 0x2) ioctl$FICLONE(r0, 0x40049409, r1) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000000ac0)={r15, 0x1, 0x6, @remote}, 0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10010, r0, 0x9e0b4000) fcntl$getownex(r12, 0x10, &(0x7f0000000f80)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000000fc0)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f00000010c0)=0xe8) sendmmsg$unix(r11, &(0x7f0000002640)=[{{&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000b80)="c2804b1fe8", 0x5}, {&(0x7f0000000bc0)="e63490b88784834775d422f251c230543e74ffd318c8d4854556adeada1084199d4ad5e69fac4dc1c4923456b3a6d32bb93129859200560898910822b5dfa9b92d134ad76dafcc8f4667cd01d5c4bd7671badd83485c4c3468ffaa7615bf4cd836d89c9c8f098e5ba1d514625c66b341ad0ae4f8a769f4e180cb433618e3cab9f65ff0db40c531356cecfdb45e9589d84537033a3f", 0x95}, {&(0x7f0000000c80)="aeedcbfa7e85feb7906465b38598b32622958c238c1cef00f816ef59c62ca1b0d8ec41c5bc3b4284e77052d070d2726e5fe120585582d4e348148b26178bf97c0b4c7fb6", 0x44}, {&(0x7f0000000d00)="54b4c2f0c73a14", 0x7}, {&(0x7f0000000d40)="442165c4d0ff421926f556baa844b0dbd5c6a04761c585fa4e7a2a513eb45f3d4c8b0aca", 0x24}, {&(0x7f0000000d80)="c343aa2f7f4afd8db828aaad3b5447116857e0f3e96751da8da309e7521a4d71fc368b404039a5e367200ae7eec6b9e97875c6d2f406a5574638dd412923b08b301d914e75fbd399904a8b3e12d550b269f0869462377fd3902c97ca486e453c670d8c9de0365704c616dfb2ed31faeb23", 0x71}, {&(0x7f0000000e00)="96161097720a1776f5672057635354eceb8f3baf967a87e6069f9bb28ae6888abc32fc3adc524c1c11d7d2a6a65b9ac0b00bb7fff4395fd210df1cb5606745a7a642b3bc78876f7988d6281f77a574a61e022f12fb834c61ecb64a18b1668277881a5113380b3a16253c5667dab819aff3892838498eed7a810fc2ba7b5a075bac07698d499788691e2742f530bf342cda76f316fdc0738a7279c882fa8e8e11b181ad50926eda987bbf926f48ea0097d3c43b518f8b4170285eef5701a1ef73b9edf43635b50390a69da8e37b57fe828f0f0b67d79257c60ffeb897bfc0", 0xde}], 0x7, &(0x7f0000002540)=[@cred={{0x1c, 0x1, 0x2, {r17, r18}}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r9, r8]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r13, r8, 0xffffffffffffffff, r11, r11]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r16, r14, r8]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r12, r9, r16, r14, r16, r1]}}], 0xd0, 0x48801}}], 0x1, 0x4004) 50.801212342s ago: executing program 4 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100004ffef000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001006c617374"], 0x104}}, 0x40000) 50.716024902s ago: executing program 4 (id=8): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4600, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2}, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x40) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0xfab}, 0x18) (async) socket$pppoe(0x18, 0x1, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) fcntl$setlease(r3, 0x400, 0x0) read(r0, &(0x7f0000000000)=""/186, 0xba) 50.480817581s ago: executing program 4 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf25010000000000000009410000004c0018000001ff62726f6164636173742d6c696e6b"], 0x68}, 0x1, 0x0, 0x0, 0xc004}, 0x400d0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r4, r3, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x1c) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000000000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b27bbfa14fdb0a7db94e0a43f44e8419ce7614d1e7546f78203681ce1188623af31626f9591bd7c1d79893d57f6b07f0c3f35e15ae650ad0837aa52e4508cc622dca8873556b777847b534d38ab05a3da921977516514c6fe2d57a0c89df9c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0xad3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r9}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r12) sendmsg$TIPC_NL_LINK_GET(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="1900740eb52a05008df017"], 0x2c}, 0x1, 0x0, 0x0, 0x40004010}, 0x4800) 50.306335351s ago: executing program 4 (id=16): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r1, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x3}, 0x1c) shutdown(r1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x210856, &(0x7f00000001c0)={[{@data_err_ignore}, {@nouid32}, {@minixdf}]}, 0x1, 0x51c, &(0x7f0000000780)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x10040080) syz_io_uring_setup(0x7318, &(0x7f00000002c0)={0x0, 0x6e15, 0x1000, 0x0, 0x1e8}, &(0x7f0000000240), &(0x7f0000000340)) bpf$PROG_LOAD(0x5, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001009d"], 0x58}}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r4, 0x0, 0x8000000000}, 0x18) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) 49.551133758s ago: executing program 4 (id=22): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000071c0)={0x0, 0x0, &(0x7f0000007180)={&(0x7f0000007100)=ANY=[@ANYBLOB="1c0000000104010800000000000000004eb3000a0500010003"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20044004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) 47.35451475s ago: executing program 1 (id=49): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002540)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa87ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff57fb57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61fe2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b185f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c760b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab7c3fa4d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926eb29bd482b1e0b6d61ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78123a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4537b2ccc5f9602da15f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd800"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x5d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='v7\x00', 0x480, &(0x7f0000000300)='\x00') (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = signalfd4(r1, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x1}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 47.008263938s ago: executing program 1 (id=50): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000500)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001240)=""/4096, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x1, 0x0, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000400)=[0x1, 0x1, 0x1], &(0x7f00000006c0)=[{0x5, 0x2, 0x3, 0xa}, {0x1, 0x80000003, 0xf, 0xc}, {0x2, 0x5, 0x1, 0xb}, {0x5, 0x1, 0xf, 0x1}, {0x3, 0x4, 0x3, 0x5}, {0x2, 0x4, 0xe, 0xa}, {0x2, 0x5, 0x2, 0x5}, {0x2, 0x2, 0x2, 0x5}, {0x2, 0x5, 0x1, 0x2}, {0x5, 0x5, 0xc, 0x3}], 0x10, 0x8, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001140)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x7ff}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x569f7000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) close(r2) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket(0x11, 0x3, 0xfffffff5) socket(0x25, 0x5, 0x0) pselect6(0x40, &(0x7f0000000180)={0x3f, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = epoll_create1(0x80000) socket(0x1, 0x80802, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x80000006}) sendto$inet6(r7, &(0x7f0000000000)='\x00', 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x83, @remote, 0x5}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x82, &(0x7f0000000200), 0x8) 46.535868137s ago: executing program 1 (id=55): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x5, 0x1}}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, 0xfffffffffffffffd, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500005c00100000001190780000000000000000fffd4e200048907803000000000000006d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cddcddec71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x5, 0x1, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0xffffff80}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000700)={r1, 0x2}, &(0x7f00000005c0)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000440), 0x6, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x80, 0x0) open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="4b00000002000300"], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5}, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10) pivot_root(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r11 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) ioctl$LOOP_GET_STATUS64(r11, 0x4c05, &(0x7f0000000240)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r11}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r12, 0x0, 0x1b) 45.975183894s ago: executing program 1 (id=57): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) move_pages(r3, 0x1, &(0x7f0000000280)=[&(0x7f00003d2000/0x3000)=nil], 0x0, &(0x7f0000000300), 0x0) sched_setscheduler(r3, 0x5, &(0x7f0000000240)=0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xe822, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES16], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7b6, &(0x7f0000001040)="$eJzs3U9oHOfZAPBn9Emxo4AJ+T7yGeM4Yzsf2HyusrtKlIoc0s1qJE0i7YrdVbEpJQmxXIyVP8SENj408SVpS0vpqcc015BLb4UeCj20PRWaQy89FAI5lRRaKC2loDKzu9ZK1j/Hkp2kv5+I3tl3nnnnmdnJPDtr7WwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJE0ZiqVanIkIpbPp9trzLRbizvMH4z3iw3NDuuNSIr/4vDhONrrOvo/67MfLH6diuO9R8fjcNEcjmv3PXj/k/89OjJYfoeEPq2Te4xLIt4qkrrywurqymsHkMgd9L2f3/Ii/1grfs9lzbzTyhfrc1mad1rp9NRU5dH52U46my9knQudbraYNtpZvdtqp2caZ9Pq9PRkmk1caC0352bqC9mg84kv1SqVqfSZiaWs3u60mo8+M9FpzOcLC3lzroypVb4ZRcwTxYH4bN5Nu1l9MU0vXV5dmdwt1SKouqHn0IYD5/gj93/8+kd/vbxSHJDbDZL0D8xatVqrVacen378iUpltFapbeyobBI3ImIkoog4kIOWz5H9O3nDbRrp1f+IhcijGctxPtJIY6T8vf4zFodjJtrRisXi8e/HNs2/qf7/36N//u1O6x2u/4Mqf3R99rEo6/+J3qMT29T/4qS8OY+D+2l+0MtmuO9qvBHX4kq8EKuxGivx2h3M51P9jOzveHORRTPy6EQr8liMetmT9nvSmI6pmIpKPBfzMRudSGM28liILDpxITrRjaw8ohrRjizq0Y1WtCONM9GIs5FGNaZjOiYjjSwm4kK0YjmaMRczUS9HuRSXy/0+uSmvB7/9fPLW7z5+t5i+EVTdYUOS4sVcEfSXHYL6xfzh2FP9v7d/LG+MUP+/aA73n+e9xu/XqRtu21pZ/0fvdhoAAADAAUrKd9+TiBiLh8qp2Xwh+9rdTgsAAADYR+XfNR8vmrFi6qFIiuv/yhaRH97x3AAAAID9kZSfsUsiYjwe7k0NPi611ZsAAAAAwOdQ+e//J4pmPOLNssP1PwAAAHzBfGe7e+x/dE//Hr2dpUPJf/Wjl84/krxUL6bqL/X7+s1Xb4zYnT2WHOkPUjZTo9fuSyJitJEdTwZ3v/zXoV77STnCsfUbEG53r/+k3R5Lrm+fQOycQPkovh8nezEnL/bai4M5vbWMz+YL2USjtfBkNem/OdJ9/eXL34oo1v7d5uKRJC5dXl2ZePGV1YtlLteLUa6/1L89fHILuaz190A8tPUWj5UfxOivd7y33srw9o/0Fh/ZeZ3J8DrfjlO9mFPjvXZ84/YfLtZZnXiyGvX6kZFudr77+trQ1vezqN7mlr8dp3sxp8+c7jVbZFHbkMXLN2dRG85ib/tiz1m8e/LN83/7VSvJJnfLYvI2swC4Wy6Vd/1Zr0L3llXon2s9Rf3fVHcHdzW/pbPcpfVXGYPlh2rdaOxPdX87zvRizvReT4we26KuVLY4o796+dVf98/oj73/4598/cRvfrp9dVtLds7i/TjbC+w38cAvb8qiGKJa7tkfbKqq7xVLvLdtVe0s1JIYi5HenMHslW+svFyrTU5VHqtUHq/FWPlSod+oPQBsYdfv2NnDt/A8tvVVdQwq3gM3/qRgIl6MV2I1Lsa58tMGEfHw1qOOD/0ZwrldrlrHh77h5dwu15brsbXNsYdOJ7FN7OTQHvvfH5XN3w/uOQGAg3Zqlzq8l/p/bpfr7o21/Gzvi3MHV8exfS3fypcPeocAwH+ArP1JMt59J2m386XnqtPT1Xp3PkvbrcazaTufmcvSvNnN2o35enMuS5farW6rMXjjeCbrpJ3lpaVWu5vOttrpUquTny+/+T3tf/V7J1usN7t5o7O0kNU7WdpoNbv1RjedyTuNdGn56YW8M5+1y4U7S1kjn80b9W7eaqad1nK7kU2kaSfLhgLzmazZzWfzYrKZLrXzxXr7ekQsLC9m6UzWabTzpW6rN+BgXXlzttVeLIeduHnz/3Sn9zcAfBZcfePalRdWV1de2zixlmzu2XriD3uIuRqxdrc3EwAYMlylAQAAAAAAAAAAAACAz6abP65X9O76kb7hibG4heBNE4fi0yz1xZ34/w96T8t+DHg749y74Tm9p3+w3P39c8sTzz/11JXtYp5+8+j8H7OI3cfZ+v+Uq/fddPTGO0ci7vnZD3s9X7lTW/ph9LYiRm9p8bVkh5i7dkoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG39OwAA///BfU8u") lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e24, 0x40, @empty, 0x9}, 0x1c) lseek(r7, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000030400000000fcdbdf2500000400", @ANYRES32=0x0, @ANYBLOB="21050400000000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB="08008a9b", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) 45.188492521s ago: executing program 1 (id=63): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e00000003fcff", 0x58}], 0x1) 44.979255171s ago: executing program 1 (id=68): socket(0x1, 0x80802, 0x0) epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="166949d7d8690000000000000004000000fb0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x3c0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) io_uring_enter(0xffffffffffffffff, 0xd98, 0x4f42, 0x48, &(0x7f0000000440)={[0x8]}, 0x8) unshare(0x62040200) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01010000000000000000010000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r7) 44.97884267s ago: executing program 32 (id=68): socket(0x1, 0x80802, 0x0) epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="166949d7d8690000000000000004000000fb0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x3c0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) io_uring_enter(0xffffffffffffffff, 0xd98, 0x4f42, 0x48, &(0x7f0000000440)={[0x8]}, 0x8) unshare(0x62040200) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01010000000000000000010000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r7) 34.403055801s ago: executing program 33 (id=22): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000071c0)={0x0, 0x0, &(0x7f0000007180)={&(0x7f0000007100)=ANY=[@ANYBLOB="1c0000000104010800000000000000004eb3000a0500010003"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20044004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) 32.156563302s ago: executing program 2 (id=192): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000f80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400), 0x0, 0x32, &(0x7f0000001440), 0x0, 0x10, &(0x7f0000001080), &(0x7f0000000300), 0x8, 0xea, 0x8, 0x8, &(0x7f0000001100)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1d, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="1800ebff01000000000000fbffffff00000000000000009500000000000000059945000600000085100000f8ffffff950000000000000000000000000000000030b718e951df3645c79ebc4c58f77f392b15d477c9d09171e7850c2e0341d1e1eab410902415821bf2b2f01b385a14c7fd6f1091eea209525549804082b64672143ce2ae28406842db2d44e494759e121f8c33401531e46918c376a71b62c36f82fecc42a9ce6038b53cb80f129bb17de35d9cc9777c936f8adb9177d199ed6a311dc067f0df882561f638"], &(0x7f0000000e40)='syzkaller\x00', 0x0, 0x98, &(0x7f0000000e80)=""/152, 0x41100, 0x2e, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x9, &(0x7f0000001280)=[0xffffffffffffffff], &(0x7f00000012c0)=[{0x4, 0x2, 0xa, 0x3}, {0x2, 0x5, 0x9, 0xb}, {0x0, 0x1, 0xa, 0xb}, {0x2, 0x5, 0x4, 0xc}, {0x1, 0x3, 0xd, 0x9}, {0x4, 0x4, 0xd, 0x4}, {0x3, 0x1, 0xa}, {0x5, 0x4, 0x4, 0x2}, {0x1, 0x3, 0x9, 0x5}], 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x714f01, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff, "df3f04000000000000000000001d0609000040"}) syz_open_pts(r3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000090000000100190000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000009000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcc0984f9ead32b32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x7}, 0x18) inotify_init() r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f00000000c0)) r7 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x1, 0x18000, 0x4) 30.830342567s ago: executing program 2 (id=198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_list_modules(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) io_uring_setup(0x5de6, &(0x7f0000000180)={0x0, 0x3660, 0x2, 0x0, 0x34b}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x2, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 30.771956447s ago: executing program 2 (id=199): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x4}}, @fwd={0x7}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x5f, 0x30, 0x30]}}, &(0x7f0000000140)=""/109, 0x61, 0x6d, 0x0, 0x3, 0x0, @void, @value}, 0x28) unshare(0x2c020400) rseq(&(0x7f0000000080), 0x20, 0x1, 0x0) fallocate(r0, 0x0, 0x0, 0x10fff9) 30.601567276s ago: executing program 2 (id=201): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095", @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd47, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='suspend_resume\x00', r0}, 0x51) r1 = perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) r2 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$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") socket$inet6(0xa, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) set_robust_list(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='mm_page_free\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r5}, 0x18) madvise(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x16) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702566fa3300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYRES64=r1, @ANYBLOB="aa45e5414c01a9cda73809405f0bcf1c4b2fe91bc3a09eeea43fb6eb4453388f8a736e1cc92556e77263adafbb3dd3efdb9d9212fd7954c6cadfbf5aaf7ff4e0", @ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="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"], 0x2ac}}, 0x0) symlink(&(0x7f0000000dc0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r9, 0x107, 0xf, 0x0, &(0x7f0000000140)) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 29.998346624s ago: executing program 2 (id=203): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0xfffffffe, 0x0, 0x0, 0x6}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, 0x0, 0x0) 29.660270912s ago: executing program 2 (id=205): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000080)=0x1000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4609d94bf64280eba30388338122f99f10000000000000002050001000600000005000400000000000900020073797a3100000000050005000200000012000300"], 0x4c}}, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x18, 0x1, @tid=r8}, &(0x7f0000000280)) sendto$packet(r4, &(0x7f00000002c0)="14419e5465f0006fc8afa8e40800", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@bridge_getlink={0x5c, 0x12, 0x300, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r5, 0x20008, 0x800}, [@IFLA_VF_PORTS={0x3c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3777a4d8ba69812af1d6940d01eedace"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1b11d7ed8f90815b137adb8c05eb7c3f"}]}]}]}, 0x5c}}, 0x0) 29.658689122s ago: executing program 34 (id=205): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000080)=0x1000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4609d94bf64280eba30388338122f99f10000000000000002050001000600000005000400000000000900020073797a3100000000050005000200000012000300"], 0x4c}}, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x18, 0x1, @tid=r8}, &(0x7f0000000280)) sendto$packet(r4, &(0x7f00000002c0)="14419e5465f0006fc8afa8e40800", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@bridge_getlink={0x5c, 0x12, 0x300, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r5, 0x20008, 0x800}, [@IFLA_VF_PORTS={0x3c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3777a4d8ba69812af1d6940d01eedace"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1b11d7ed8f90815b137adb8c05eb7c3f"}]}]}]}, 0x5c}}, 0x0) 13.473706221s ago: executing program 6 (id=472): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0xeba45e42f78e2070, 0x1000) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00Y.'], 0x8, 0x800) msgctl$IPC_STAT(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x6, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f00000002c0)={0x6, 'geneve0\x00', {0x3}, 0x5}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 11.939394716s ago: executing program 6 (id=491): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f2, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, "bb5dee00"}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180)=0x6, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r2) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000740)=""/203, 0xcb}], 0x1}, 0x0) 11.868451675s ago: executing program 6 (id=493): bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="ebe457be050f0edde6a61adfd5c474542c4e1288faa5af9d78ab499e78b39d9f7d12516de1ab9875c62b308f9aa13401754cb67f96272d1a5274185ccc29c90f0625068503e3d77324ed4aac90f2e3ba638e0a80408b6040dc2be31a8b39371f8d514c44195d7691385393b89abd2a6643251282c86e397cd804c792eaeefc039b87b26ee5800e6823f9bdc26ee015763ecf7cd5f28cec599d6c439f4d9bd45db7388d8053c7e159456b780df37e5699d9"], 0x48) socket$tipc(0x1e, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9687, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x18) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c00024000000000000078260c0002400005"], 0x140}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 11.256886733s ago: executing program 35 (id=507): add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0xa}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x67, 0x0, 0x9, 0x32, 0x0, @empty, @multicast2}, "e1b30ac2c64f63d0"}}}}}, 0x2e) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x80042, 0x1, 0x1}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9687, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x18) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c00024000000000000078260c0002400005"], 0x140}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 2.37999744s ago: executing program 7 (id=661): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009dee062d5f4be68df1da46256aae68879c057a71caf28d527ff724137f53cc71a45f4660eba446e235a8bde9d704ce2ed9d009e88285cee9068c3b9b8f9eb655270922f24ff25d5a5d68028b7350daa6292a0c696b0357ed4014db57a8755d7afb066bac60d6"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc88c0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r7 = gettid() r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r8, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x40, 0x18, 0x1, 0x0, 0x0, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x40}}, 0x0) readv(r8, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) 1.695576247s ago: executing program 0 (id=678): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="09000000000000000000070000001400018005000200010000000800060019"], 0x28}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x21, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x100000d, 0x12, r7, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCNOTTY(r8, 0x5422) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa0100fe, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x81, @empty, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) recvfrom(r9, 0x0, 0x0, 0x2042, 0x0, 0x0) 1.517541216s ago: executing program 7 (id=683): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xffffffffffffffae) sendmsg$key(r0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) chdir(0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f00000000c0)=0x32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x67, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x487a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$eJzs3c9vHFcdAPDvjH+sm6ZxAj1ABSRAIaAou/Gmjape2lxAqKqEqDggDqmxN5bJbjZk16U2kXD/hiKBxAn+BA5IHJB64sCNIxIHhFQOSAEsUIwE0qKZHf+ovcaLd73bej8faTLz5s3M973Ys+/t2/W8ACbWlYjYjIjZiHgzIuaL/UmxxKvdJTvuydajpe2tR0tJdDpv/C3J87N9+QmlvWs+XVxzLiK+8dWI7ySH47bWN+4t1uu1h0W60m48qLTWN66vNhZXaiu1+9XqrYVbN166+WJ1aHW93PjF46+svvbNX//q0+//bvPLP8iKdb7I263HkHWrPrMbJzMdEa+dRrAxmCrWs2MuByeTRsTHIuJz+f0/H1P5bycAcJZ1OvPRmd+fBgDOujQfA0vSckSkadEJKHfH8J6Nc2m92Wpfu9tcu7/cHSu7GDPp3dV67cal0h++lx88k2TphTwvz8/T1QPpmxFxKSJ+VHoqT5eXmvXl8XR5AGDiPb2//Y+If5bStFzu69Qen+oBAB8Zc+MuAAAwctp/AJg82n8AmDx9tP/Fh/2bp14WAGA0/r/3/xdOrRwAwOgY/weAyaP9B4CJ8vXXX8+Wznbx/Ovlt9bX7jXfur5ca90rN9aWykvNhw/KK83mSv7MnsZx16s3mw8WXoi1tyvtWqtdaa1v3Gk01+637+TP9b5TmxlJrQCA/+XS5fd+n0TE5stP5Uvsm8tBWw1nWzruAgBjMzXIyToI8JFmti+YXH014Xkn4benXhZgPHo+zHuu5+YH/aS7erefIL5nBB8qVz/Z//i/OZ7hbDH+D5PrZOP/rwy9HMDoGf+HydXpJAfn/J/dzQIAzqQBvsLX+eGwOiHAWB03mfdxn/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJDofEd+NJC3nc4Gn2b9puRzxTERcjJnk7mq9diMiLsTliJgpZemFcRcaABhQ+pekmP/r6vzz5w/mzib/KuXriPj+T9/48duL7fbDhWz/33f3l3amD6vunTfAvIIAwJDl7Xe1WO97I/9k69HSzjLK8jy+Hf8ppiJe2t56lC/dnOnIdkbM5X2Jc/9IYro4Zy4inouIqSHE33wnIj7Rq/5JPjZysZj5dH/8KGI/M9L46Qfip3led511vj4+hLLApHnvdkS82uv+S+NKvu59/8/lr1CDe3y7e7Gd177tffGni0hTPeJn9/yVfmO88JuvHdrZme/mvRPx3HSv+Mlu/OSI+M/3Gf+Pn/rMu68ckdf5WcTV6B1/f6xKu/Gg0lrfuL7aWFyprdTuV6u3Fm7deOnmi9VKPkZd2RmpPuyvL1+7cFTZsvqfOyL+XM/6z+6e+4U+6//zf7/57c/uJUsH43/p871//s/2jN+VtYlf7DP+4rlfHjl9dxZ/+Yj6H/fzv9Zn/Pf/vLHc56EAwAi01jfuLdbrtYcDbWTvQodxnUMbWRH7O3inuzhY0D/FadTihBszp/W/euob07t9xeFe+VvZFXtkpX3+kpxkIx16LQbaeDKqWON7TQJGY++mH3dJAAAAAAAAAAAAAACAo4ziT5fGXUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrv8GAAD//xxkzKw=") 1.517098936s ago: executing program 5 (id=684): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x80000) read$watch_queue(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e66, @local}, 0x10) 1.438185626s ago: executing program 5 (id=685): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={0x0, 0x2}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ac0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @mcast2, [0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x62, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000003c0)={{0xa, 0x4e24, 0xc, @mcast2, 0x10}, {0xa, 0x4e22, 0x8, @private1, 0x4}, 0xffffffffffffffff, {[0x3, 0x0, 0x5, 0xa, 0x2, 0x881, 0x8, 0x82d]}}, 0x5c) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001000010400000000feffffffffffff00", @ANYRES32=0x0, @ANYBLOB="00210000082d0600140012800a000100767863616e00000004000280"], 0x34}, 0x1, 0xd, 0x0, 0x8008000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000044d900000000000000000a20000000000a03000000000060000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2c001280140001800c000100636f756e746572000400028014000180090001006c617374000000000400028008000340000001"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20050800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg(r3, 0x0, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000cd0d3f6f933329aefa9bc11d85fbd66d009f70898967deb6a42a08323b2f690b96d61852623d0a66cca364eaa15b124ac0284d29d8db23c15376ed4f5abf4703e28c3deaba8223cd474de1a2c2880de151d1d513276cc5b830e4503f276eadecedea84ee81371bcf63bd8815e65b1aa710a660479691654803e8ec54da6a675d06ab02820290364b7d4127ef576c374ca9c243317853bedaea0b7310c94df09d5a2611a9cd6e14fee56e38b71403a019885553ba74d06f467b23c0397510fff6", @ANYRES8=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095", @ANYRES16=r4, @ANYRESOCT, @ANYRESHEX=r0, @ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000004000000000000000000000001000000", @ANYRES32=0x1, @ANYBLOB="00f9f00000000000000000c4c1127ac9f45fe0fa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x8001, 0x3, 0x0, 0x2, 0x0, 0x0, 0xff}}) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c0003"], 0xe8}}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 1.341247646s ago: executing program 7 (id=688): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='signal_generate\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00'}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x2, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000f1852c4c3a5b81"], 0x48) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 1.094452474s ago: executing program 7 (id=693): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6, 0x0, 0xffffffff}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x92, &(0x7f0000000300)={0x1, 0x1, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x33, 0x80000000, 0x3ff, 0x8960, 0x1, 0xcff, '\x00', 0x0, r5, 0x4, 0x0, 0x3, 0x4, @value, @void, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r7, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180300002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r9}, 0x10) r10 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x101100) ioctl$IOC_PR_PREEMPT_ABORT(r10, 0x401870cc, &(0x7f00000000c0)={0x1, 0xfff, 0x2, 0x3}) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0), 0x1800}], 0x1}}], 0x1, 0x9200000000000000) dup3(r1, r0, 0x0) 1.049697844s ago: executing program 5 (id=696): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x572e, 0x2, 0x2, 0xfffffffe}) r1 = socket(0x40000000015, 0x5, 0x0) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) execveat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)={[&(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00']}, &(0x7f00000006c0)={[&(0x7f0000000440)='GPL\x00', &(0x7f0000000480)=':\xa8%\xf5}\xf8/]\'\x01--\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='\x00']}, 0x1000) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 985.382034ms ago: executing program 7 (id=698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x470, 0x300, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3d8, 0x230, 0x230, 0x3d8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @private=0xa010102, 0x0, 0xffffff00, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x1}, 0x0, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {0x0, 0xff}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x8b6}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x91}, {}, {0xb}]}}, @common=@unspec=@time={{0x38}, {0xfffffffc}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x2}}}, {{@ip={@private=0xa010100, @empty, 0xffffff00, 0xff, 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x88, 0x3, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4d0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="5ab67317dc7ab2ba0f5f7765d40e71121800000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 984.915764ms ago: executing program 5 (id=699): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xffffffffffffffae) sendmsg$key(r0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) chdir(0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f00000000c0)=0x32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x67, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x487a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") 894.136554ms ago: executing program 8 (id=701): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async, rerun: 32) shutdown(r0, 0x0) (async, rerun: 32) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f0000000100)="bc", 0x1, 0x1, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffc, @loopback, 0x2}, 0x1c) (async, rerun: 32) close(r0) (rerun: 32) 812.545913ms ago: executing program 0 (id=704): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000002000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8}, 0x11008000}, {{0x0, 0x0, 0x0}, 0x2bc}], 0x2, 0x0, 0x0) 809.077153ms ago: executing program 8 (id=705): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}]}, 0x2c}, 0x1, 0x200000000000000, 0x0, 0x88000}, 0x0) 803.583474ms ago: executing program 5 (id=706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000040)={[0x6]}, 0x8, 0x800) fchmodat(r1, &(0x7f0000000100)='./file0\x00', 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r7) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="08001d01007e7050033fc343050000f9acefa2adee"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'pim6reg0\x00', 0xe00}) 709.075903ms ago: executing program 8 (id=708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000680)=0xfffffffffffffffc, 0x0, 0x6, 0xe, 0x12, 0x7, 0x22, 0xe}}, @mask_cswp={0x58, 0x114, 0x9, {{0x695, 0x5}, 0x0, 0x0, 0x89, 0x1000, 0x5, 0x45f, 0xc, 0x8d6}}], 0xb0, 0x8004}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = syz_io_uring_setup(0x20239, &(0x7f0000000380)={0x0, 0x150, 0x10100, 0x0, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14a8}, 0x0, 0x41, 0x1}) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000340)=0x4) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 708.538393ms ago: executing program 3 (id=709): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 695.506733ms ago: executing program 3 (id=710): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 684.612583ms ago: executing program 5 (id=711): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000001d00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000980)={0x1c, r6, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f360068090890e0878f0e1ac6e7049b3344959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07480936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002080)=ANY=[@ANYBLOB="3800000010000305000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="2df000000000000008001f000000008008000500", @ANYRES32=r5, @ANYBLOB="7bb49e55051434ce6e4348ff"], 0x38}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xf0, 0x13, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_USERDATA={0xd2, 0x8, "33843a143592741f3fc907284b74906245ec58239b24be703889158ef35a6be2783a47e429c4f3bcb6f34c121f211758df762ee30e7de36981b71ec97d403e9f72a7573677b96adf181e81ca686733eb1b9ab0b5326efe6bbcc6046235932ab047653f2254df88edb58a2248b9c19045d6adb70870c0d9c16dd34537da8e84d2586ff21a1f72cc9a9f010943b467e62c69a87c966caa7c03ab04f6581264206a542c7e882a33d7879725c2bbff29d605d219061b2f91423526b05408847dac6dab458b3bf79e3c5bd4d67dfd7ae9"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r13, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000000) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x15, &(0x7f00000020c0)=ANY=[@ANYBLOB="4e0b0000feffffff0000770008000000291200bdc584f06e3c2c00", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000852000000200000018000000040000000000000008000000181b0000", @ANYRES32, @ANYBLOB="0000000000000000181a0000", @ANYRES32=r10, @ANYBLOB="000000000000000018260000", @ANYRES32=r12, @ANYBLOB="00000000f7ffffff019a04000700000018000000ff0000000000000000000000cfb10400100000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0xfc, 0x7c, &(0x7f00000003c0)=""/124, 0x41000, 0x2, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000540)=[r11, r10, r10], &(0x7f0000000580)=[{0x0, 0x3, 0x5, 0xc}, {0x2, 0x4, 0xd, 0xb}, {0x0, 0x2, 0xa, 0x2}, {0x4, 0x5, 0x4}, {0x2, 0x4, 0xb, 0x9}, {0x3, 0x1, 0xd, 0x8}, {0x3, 0x2, 0xe, 0xb}, {0x3, 0x5, 0x8, 0x2}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kvm_set_spte_hva\x00', r14, 0x0, 0x1f08}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b4b, &(0x7f0000000000)) 589.882953ms ago: executing program 7 (id=712): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x28020480) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000140)="14b103b923a0b017ee5a5a99f94cc3174677f7da7c68089f18ff3bf421fb9216dc4e32953764a63086c39a8b8f3137855d01ccfc", &(0x7f00000004c0)="4089b94384a72623d88803fde7f580f9f6f09b013e1dbf8bb72e93de50bd71e774f628fa8ada9bd0e4bf9dffda66e54baffcfbb278e4be3de9381c9866db616037b5097a5134a76ed1f851903f46c1d3e427bdfe215afaa413ee220b568fc6162ba641d97c831f895e2202e126f4556c49ba690b27f6649842672aa866cca6e62e1a43ab4fc373ec2d0910aa4759391cfb0b"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000140)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='cpu_frequency_limits\x00', r6, 0x0, 0x7}, 0x18) sendmsg$nl_xfrm(r5, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0) listen(r4, 0x0) shutdown(r3, 0x0) connect$unix(r3, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_virt_wifi\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xfffb, @local, 'geneve0\x00'}}, 0x1e) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) 589.508483ms ago: executing program 3 (id=713): syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "82d2f3", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@hopopts={0x33}]}}}}}, 0x0) 589.077883ms ago: executing program 8 (id=714): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'lblcr\x00', 0x0, 0x7, 0x25}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff01000000000000000000200000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200030000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0) 559.042443ms ago: executing program 3 (id=715): r0 = socket(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x95, "57b0c951606411ed649ce573dbc892eb4627de8821427622c95acf421e53f45910cdaec3f21dac71b4d0cdb958936af7e252887fc4fe9a0e4e187c73c7a53c75990ba2ec1c21f4a573a21cc2b74ae584e4b6842ef548ad2779a7803b7024a9abeb43f8876d5d6fd9f2082983dddd3c7ee87dd2a24413c47bce782e7f35613b16613e581e287e1105156e032c41c13e80ee8a86b385"}, &(0x7f0000000180)=0x9d) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={r1, 0xe838}, &(0x7f0000000680)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@delqdisc={0x24, 0x25, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0x0, 0xe}, {0x3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @rand_addr=0x64010101}]}}]}, 0x48}}, 0x44050) socket$netlink(0x10, 0x3, 0x0) 503.866552ms ago: executing program 0 (id=716): sendto$inet(0xffffffffffffffff, &(0x7f00000007c0)="8f4f0481449c157cf588ea082f39c0e25e13ea2199d6fa10fa6fa2af7efebed94cc129df7f547ef50cb9715e353bd80b33be0d51ff4173b1bf560db45973d25ca22bd9d3c2ee8a3da20abee0da456e02f644328a9ce3ccdd08d28c3f4f3e435d99f0b6ccc22a48592b6a608308883d46f4ea50fee567068879a2d38291", 0x7d, 0x20004000, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, &(0x7f0000000200)=0x202, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}], 0x1, 0x0, 0x0) 502.980842ms ago: executing program 8 (id=717): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='signal_generate\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00'}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x2, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000f1852c4c3a5b81"], 0x48) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 440.470202ms ago: executing program 0 (id=718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000030) (async) statx(0xffffffffffffffff, 0x0, 0x2000, 0x10, 0x0) (async) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000000)={[{@debug}, {@init_itable}]}, 0x1, 0x54e, &(0x7f0000000540)="$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") (async, rerun: 64) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000240)={'veth0\x00'}) 439.504972ms ago: executing program 0 (id=719): open(0x0, 0x0, 0x42) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0xa, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)='X\x00', 0x2}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007004000010001000900000001f4555e4fdc0c9f43c88919d8bf0e39a74744b509bd15371a389f6b7c3220cddea18a2b5bc5ab35d3df82d60f74bf9388d99d84f6b9cfc1b0ea2bbcf6dd2988cc228dcb8384d828068ac7dbf27eaf5f24acb204b6e5e127f865d894360ce05f26bf89ec5281a97f40cfdd82e7623fbc746c6fac9910b39e95737970670773d2481f9d1633d8170b24a6620be72ac73d8edd34e1dee782db224f7f77dfe70a0b97351a8870564bc6eabc699edf839fd6c3d7991f0f4d687d7403b97c78657cfeb4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x46, &(0x7f0000000280)=ANY=[@ANYRES8=r5, @ANYRESHEX=r2, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd6f, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10) r7 = socket(0x1d, 0xa, 0x9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r8, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r9 = socket$netlink(0x10, 0x3, 0x4) splice(r3, 0x0, r9, 0x0, 0x80000001, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x234140, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) 309.295512ms ago: executing program 3 (id=720): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") (fail_nth: 29) 290.684002ms ago: executing program 8 (id=721): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000004}, 0x16) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r1, @ANYRES32=r1], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) (async) r6 = socket$kcm(0x29, 0x5, 0x0) (async, rerun: 64) r7 = socket(0x200000000000011, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, r8, 0x25, 0x8, @void}, 0x10) (async) sendmmsg$inet(r6, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="e1", 0x1}], 0x1}}], 0x1, 0x4000005) close(r6) (async) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r9, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r9, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) (async) dup3(r5, r9, 0x8094d780a3644edb) (async) getsockopt$inet6_buf(r9, 0x29, 0x6, 0x0, &(0x7f0000000080)) 221.45µs ago: executing program 3 (id=722): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_vif\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) close(r2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000ffff0c63b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x200, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="45f9e8e5af9f7e488a1619ea0cd4902570249f1e29b175dfa0d3ae9be1933b972b835f966d432045a33e064403006bdb8ef95b90e76baae34f74778049ff8fa4a59adf7623aaddb922b32dbbfda740b88a07e87eb2cd97c0393db1036a1ec8a376c919cdd0b40dbb899c07f1349c7a1113f57495c795bc7e38166a7bdef463457189549f4b13279fffd050bdfea3477a62d3edea8321a2e98c65330fe7199ca6bee7202aa5a5d56c4ed4c22dbb28cebcaec033c75eb78820ad1d8ceb6f90b569e165002e702e1a2066", 0xc9}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r1, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) pread64(r0, 0x0, 0x0, 0xbbf9) 0s ago: executing program 0 (id=723): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000280)='./file0\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.643523][ T4276] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 53.644452][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.665673][ T4153] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 53.676636][ T4153] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 53.686730][ T4153] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 53.696152][ T4153] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 53.742586][ T4153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.756224][ T4153] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.767701][ T1629] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.774793][ T1629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.802268][ T1629] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.809441][ T1629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.872315][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.935158][ T4153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.963494][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.096863][ T4295] loop5: detected capacity change from 0 to 1024 [ 54.121591][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.201845][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.229633][ T4295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.349905][ T4284] sit0 speed is unknown, defaulting to 1000 [ 54.381505][ T36] bridge_slave_1: left allmulticast mode [ 54.387208][ T36] bridge_slave_1: left promiscuous mode [ 54.392956][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.409395][ T4311] EXT4-fs (loop5): shut down requested (0) [ 54.451185][ T36] bridge_slave_0: left allmulticast mode [ 54.456884][ T36] bridge_slave_0: left promiscuous mode [ 54.462603][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.478908][ T4312] netlink: 24 bytes leftover after parsing attributes in process `syz.5.207'. [ 54.491743][ T50] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 54.526926][ T50] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1828 with error 28 [ 54.539741][ T50] EXT4-fs (loop5): This should not happen!! Data will be lost [ 54.539741][ T50] [ 54.549433][ T50] EXT4-fs (loop5): Total free blocks count 0 [ 54.555458][ T50] EXT4-fs (loop5): Free/Dirty block details [ 54.561380][ T50] EXT4-fs (loop5): free_blocks=68451041280 [ 54.567234][ T50] EXT4-fs (loop5): dirty_blocks=1840 [ 54.572561][ T50] EXT4-fs (loop5): Block reservation details [ 54.578654][ T50] EXT4-fs (loop5): i_reserved_data_blocks=115 [ 54.597563][ T36] infiniband syz2: set down [ 54.694490][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.704494][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.720474][ T4314] loop0: detected capacity change from 0 to 512 [ 54.741146][ T36] bond0 (unregistering): Released all slaves [ 54.760815][ T4314] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.774106][ T4153] veth0_vlan: entered promiscuous mode [ 54.785067][ T4316] loop5: detected capacity change from 0 to 512 [ 54.785532][ T4153] veth1_vlan: entered promiscuous mode [ 54.804408][ T4153] veth0_macvtap: entered promiscuous mode [ 54.811627][ T4153] veth1_macvtap: entered promiscuous mode [ 54.821146][ T4153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.831650][ T4153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.841536][ T4153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.852028][ T4153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.861996][ T4153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.872486][ T4153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.882363][ T4153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.892881][ T4153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.903317][ T4153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.911530][ T4153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.921987][ T4153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.931813][ T4153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.942343][ T4153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.952160][ T4153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.962716][ T4153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.972620][ T4153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.983062][ T4153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.988292][ T4314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.993461][ T4153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.006780][ T4314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.013963][ T4153] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.024537][ T4316] EXT4-fs (loop5): orphan cleanup on readonly fs [ 55.030367][ T4153] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.037240][ T4316] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.209: bg 0: block 248: padding at end of block bitmap is not set [ 55.045344][ T4153] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.045384][ T4153] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.083717][ T9] sit0 speed is unknown, defaulting to 1000 [ 55.083953][ T4316] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.209: Failed to acquire dquot type 1 [ 55.090322][ T9] sit0 speed is unknown, defaulting to 1000 [ 55.103517][ T4316] EXT4-fs (loop5): 1 truncate cleaned up [ 55.114244][ T4316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.166455][ T4284] lo speed is unknown, defaulting to 1000 [ 55.172461][ T51] smc: removing ib device syz2 [ 55.375712][ T4332] SELinux: policydb version 511 does not match my version range 15-33 [ 55.405100][ T4332] SELinux: failed to load policy [ 55.503584][ T4335] loop0: detected capacity change from 0 to 164 [ 55.523842][ T4335] FAULT_INJECTION: forcing a failure. [ 55.523842][ T4335] name failslab, interval 1, probability 0, space 0, times 0 [ 55.536552][ T4335] CPU: 0 UID: 0 PID: 4335 Comm: syz.0.212 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 55.547160][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.557230][ T4335] Call Trace: [ 55.560536][ T4335] [ 55.563532][ T4335] dump_stack_lvl+0xf2/0x150 [ 55.568221][ T4335] dump_stack+0x15/0x1a [ 55.572408][ T4335] should_fail_ex+0x223/0x230 [ 55.577109][ T4335] should_failslab+0x8f/0xb0 [ 55.581781][ T4335] kmem_cache_alloc_noprof+0x52/0x320 [ 55.587190][ T4335] ? security_inode_alloc+0x37/0x100 [ 55.592518][ T4335] security_inode_alloc+0x37/0x100 [ 55.597696][ T4335] inode_init_always_gfp+0x4a2/0x4f0 [ 55.603100][ T4335] ? __pfx_isofs_alloc_inode+0x10/0x10 [ 55.608621][ T4335] alloc_inode+0x82/0x160 [ 55.613017][ T4335] ? __pfx_isofs_iget5_test+0x10/0x10 [ 55.618465][ T4335] ? __pfx_isofs_iget5_set+0x10/0x10 [ 55.623815][ T4335] iget5_locked+0x4a/0xa0 [ 55.628246][ T4335] __isofs_iget+0xde/0xf80 [ 55.632725][ T4335] ? mntput+0x49/0x70 [ 55.636901][ T4335] ? terminate_walk+0x260/0x280 [ 55.641765][ T4335] ? path_openat+0x1a5a/0x1fa0 [ 55.646590][ T4335] ? _parse_integer_limit+0x167/0x180 [ 55.651991][ T4335] isofs_fh_to_dentry+0x83/0x110 [ 55.656976][ T4335] exportfs_decode_fh_raw+0xc9/0x4d0 [ 55.662354][ T4335] ? kstrtouint+0x77/0xc0 [ 55.666686][ T4335] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 55.672605][ T4335] do_handle_to_path+0x68/0xd0 [ 55.677391][ T4335] do_handle_open+0x4b4/0x580 [ 55.682090][ T4335] __x64_sys_open_by_handle_at+0x46/0x50 [ 55.687742][ T4335] x64_sys_call+0x2cca/0x2dc0 [ 55.692428][ T4335] do_syscall_64+0xc9/0x1c0 [ 55.696940][ T4335] ? clear_bhb_loop+0x55/0xb0 [ 55.701650][ T4335] ? clear_bhb_loop+0x55/0xb0 [ 55.706334][ T4335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.712284][ T4335] RIP: 0033:0x7f8b8d8a5d29 [ 55.716783][ T4335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.736538][ T4335] RSP: 002b:00007f8b8bf17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 55.744958][ T4335] RAX: ffffffffffffffda RBX: 00007f8b8da95fa0 RCX: 00007f8b8d8a5d29 [ 55.752939][ T4335] RDX: 0000000000202400 RSI: 0000000020000640 RDI: ffffffffffffff9c [ 55.760988][ T4335] RBP: 00007f8b8bf17090 R08: 0000000000000000 R09: 0000000000000000 [ 55.769033][ T4335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.777009][ T4335] R13: 0000000000000000 R14: 00007f8b8da95fa0 R15: 00007ffe20638778 [ 55.784993][ T4335] [ 55.881790][ T4338] syz.3.214[4338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.881874][ T4338] syz.3.214[4338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.906784][ T4338] syz.3.214[4338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.940535][ T3657] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.977546][ T4347] mmap: syz.5.215 (4347) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.980585][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 56.028576][ T4351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 56.037396][ T4351] netlink: 84 bytes leftover after parsing attributes in process `syz.0.217'. [ 56.084636][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.091852][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.099019][ T4284] bridge_slave_0: entered allmulticast mode [ 56.105510][ T4284] bridge_slave_0: entered promiscuous mode [ 56.112468][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.119704][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.126803][ T4284] bridge_slave_1: entered allmulticast mode [ 56.133455][ T4284] bridge_slave_1: entered promiscuous mode [ 56.214774][ T4375] Illegal XDP return value 4294967274 on prog (id 211) dev N/A, expect packet loss! [ 56.227301][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.241680][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.303916][ T36] hsr_slave_0: left promiscuous mode [ 56.312814][ T36] hsr_slave_1: left promiscuous mode [ 56.319063][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.326578][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.342322][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.349844][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.361782][ T36] veth1_macvtap: left promiscuous mode [ 56.367307][ T36] veth0_macvtap: left promiscuous mode [ 56.372984][ T36] veth1_vlan: left promiscuous mode [ 56.378288][ T36] veth0_vlan: left promiscuous mode [ 56.446731][ T36] team0 (unregistering): Port device team_slave_1 removed [ 56.457519][ T36] team0 (unregistering): Port device team_slave_0 removed [ 56.490355][ T4284] team0: Port device team_slave_0 added [ 56.502259][ T4284] team0: Port device team_slave_1 added [ 56.524330][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.531319][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.557319][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.568644][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.575666][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.579673][ T4398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.226'. [ 56.601885][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.610647][ T4398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.226'. [ 56.612648][ T4398] netlink: 56 bytes leftover after parsing attributes in process `syz.0.226'. [ 56.639653][ T4396] lo speed is unknown, defaulting to 1000 [ 56.656044][ T4284] hsr_slave_0: entered promiscuous mode [ 56.662242][ T4284] hsr_slave_1: entered promiscuous mode [ 56.669403][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.677017][ T4284] Cannot create hsr debugfs directory [ 56.757082][ T4284] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 56.765706][ T4284] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 56.774921][ T4284] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 56.783930][ T4284] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 56.818431][ T4402] loop3: detected capacity change from 0 to 512 [ 56.831788][ T4402] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.834235][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.855599][ T4402] EXT4-fs (loop3): 1 truncate cleaned up [ 56.862626][ T4402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.865142][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.885495][ T1629] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.892569][ T1629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.904041][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.904307][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.911191][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.958412][ T4406] syz.3.228[4406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.958488][ T4406] syz.3.228[4406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.971131][ T4406] syz.3.228[4406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.018990][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.084006][ T4415] bridge0: port 3(erspan0) entered blocking state [ 57.090762][ T4415] bridge0: port 3(erspan0) entered disabled state [ 57.097661][ T4415] erspan0: entered allmulticast mode [ 57.103736][ T4415] erspan0: entered promiscuous mode [ 57.109433][ T4415] bridge0: port 3(erspan0) entered blocking state [ 57.115941][ T4415] bridge0: port 3(erspan0) entered forwarding state [ 57.187999][ T4284] veth0_vlan: entered promiscuous mode [ 57.197492][ T4284] veth1_vlan: entered promiscuous mode [ 57.219366][ T4428] program syz.5.230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.220097][ T4284] veth0_macvtap: entered promiscuous mode [ 57.239182][ T4284] veth1_macvtap: entered promiscuous mode [ 57.271105][ T4428] program syz.5.230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.285992][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.296513][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.306519][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.317069][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.327314][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.337851][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.347688][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.358212][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.372964][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.384088][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.394579][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.404656][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.415207][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.425175][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.435621][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.445533][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.456192][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.468711][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.487539][ T4284] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.496325][ T4284] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.505074][ T4284] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.513843][ T4284] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.168273][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 58.168319][ T29] audit: type=1400 audit(1736456312.295:1600): avc: denied { connect } for pid=4446 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 58.194036][ T29] audit: type=1400 audit(1736456312.295:1601): avc: denied { name_connect } for pid=4446 comm="syz.0.236" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 58.362685][ T4456] loop0: detected capacity change from 0 to 512 [ 58.450596][ T4456] EXT4-fs error (device loop0): ext4_get_journal_inode:5809: inode #32: comm syz.0.238: iget: special inode unallocated [ 58.470132][ T4458] netlink: 'syz.3.239': attribute type 1 has an invalid length. [ 58.485106][ T4456] EXT4-fs (loop0): Remounting filesystem read-only [ 58.491779][ T4456] EXT4-fs (loop0): no journal found [ 58.497000][ T4456] EXT4-fs (loop0): can't get journal size [ 58.559251][ T4460] loop5: detected capacity change from 0 to 8192 [ 58.572836][ T4456] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 58.596257][ T4460] vfat: Unknown parameter '0177777777777777777777718446744073709551615' [ 58.627554][ T4456] EXT4-fs (loop0): failed to initialize system zone (-117) [ 58.646275][ T4456] EXT4-fs (loop0): mount failed [ 58.686248][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 58.705583][ T29] audit: type=1400 audit(1736456312.855:1602): avc: denied { write } for pid=4465 comm="syz.7.242" path="socket:[7991]" dev="sockfs" ino=7991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.724823][ T4456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.238'. [ 58.741094][ T4470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.243'. [ 58.773483][ T29] audit: type=1326 audit(1736456312.935:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.7.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 58.791409][ T4474] loop3: detected capacity change from 0 to 128 [ 58.796921][ T29] audit: type=1326 audit(1736456312.935:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.7.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 58.826451][ T29] audit: type=1326 audit(1736456312.935:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.7.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 58.849811][ T29] audit: type=1326 audit(1736456312.935:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.7.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 58.849838][ T29] audit: type=1326 audit(1736456312.935:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.7.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 58.849889][ T29] audit: type=1326 audit(1736456312.935:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.7.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 58.849914][ T29] audit: type=1326 audit(1736456312.935:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.7.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 58.887900][ T4474] netlink: 'syz.3.245': attribute type 58 has an invalid length. [ 58.926744][ T4480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.247'. [ 58.947464][ T4474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.245'. [ 59.377052][ T4516] netlink: '+}[@': attribute type 39 has an invalid length. [ 59.408942][ T4517] lo speed is unknown, defaulting to 1000 [ 59.513944][ T4520] delete_channel: no stack [ 59.518830][ T4520] delete_channel: no stack [ 59.565927][ T4528] capability: warning: `syz.6.259' uses deprecated v2 capabilities in a way that may be insecure [ 59.585732][ T4528] loop6: detected capacity change from 0 to 256 [ 59.715011][ T4539] loop3: detected capacity change from 0 to 512 [ 59.731830][ T4539] EXT4-fs: Ignoring removed nobh option [ 59.737662][ T4539] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.766810][ T4539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.787728][ T4533] loop6: detected capacity change from 0 to 8192 [ 59.835826][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.861828][ T4547] bridge_slave_1: left allmulticast mode [ 59.867551][ T4547] bridge_slave_1: left promiscuous mode [ 59.873511][ T4547] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.931540][ T4547] bridge_slave_0: left allmulticast mode [ 59.937323][ T4547] bridge_slave_0: left promiscuous mode [ 59.943040][ T4547] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.230831][ T4572] loop0: detected capacity change from 0 to 512 [ 60.276823][ T4575] loop5: detected capacity change from 0 to 164 [ 60.285808][ T4572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.295288][ T4578] vhci_hcd: invalid port number 157 [ 60.298709][ T4572] ext4 filesystem being mounted at /68/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.303534][ T4578] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 60.772415][ T4596] 9pnet: p9_errstr2errno: server reported unknown error [ 60.791424][ T4588] lo speed is unknown, defaulting to 1000 [ 60.812769][ T4597] xt_hashlimit: max too large, truncated to 1048576 [ 61.015604][ T4603] loop7: detected capacity change from 0 to 512 [ 61.039838][ T4603] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 61.145978][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.442618][ T4618] loop7: detected capacity change from 0 to 4096 [ 61.462896][ T4618] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.863776][ T4633] loop3: detected capacity change from 0 to 128 [ 61.911688][ T4633] netlink: 'syz.3.295': attribute type 58 has an invalid length. [ 61.919523][ T4633] __nla_validate_parse: 11 callbacks suppressed [ 61.919538][ T4633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.295'. [ 61.960835][ T4635] loop6: detected capacity change from 0 to 764 [ 61.984475][ T4635] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 62.007687][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 62.201071][ T4284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.256831][ T4662] 9pnet_fd: Insufficient options for proto=fd [ 62.495910][ T4680] loop6: detected capacity change from 0 to 1764 [ 62.506324][ T4674] loop5: detected capacity change from 0 to 4096 [ 62.538653][ T4680] iso9660: Unknown parameter 'I' [ 62.539024][ T4652] serio: Serial port ttyS3 [ 62.588563][ T4674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.616075][ T4680] loop6: detected capacity change from 0 to 1024 [ 62.619279][ T4674] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #15: comm syz.5.309: corrupted inode contents [ 62.656760][ T4680] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 62.670115][ T4674] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #15: comm syz.5.309: mark_inode_dirty error [ 62.681615][ T4680] JBD2: no valid journal superblock found [ 62.687350][ T4680] EXT4-fs (loop6): Could not load journal inode [ 62.700985][ T4674] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #15: comm syz.5.309: corrupted inode contents [ 62.718813][ T4687] FAULT_INJECTION: forcing a failure. [ 62.718813][ T4687] name failslab, interval 1, probability 0, space 0, times 0 [ 62.731531][ T4687] CPU: 1 UID: 0 PID: 4687 Comm: syz.7.311 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 62.740283][ T4674] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.309: mark_inode_dirty error [ 62.742124][ T4687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.753439][ T4674] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #15: comm syz.5.309: corrupted inode contents [ 62.763269][ T4687] Call Trace: [ 62.763280][ T4687] [ 62.763289][ T4687] dump_stack_lvl+0xf2/0x150 [ 62.786029][ T4687] dump_stack+0x15/0x1a [ 62.790207][ T4687] should_fail_ex+0x223/0x230 [ 62.794916][ T4687] ? register_netdevice+0x1fa/0xe30 [ 62.800196][ T4687] should_failslab+0x8f/0xb0 [ 62.804881][ T4687] __kmalloc_cache_noprof+0x4e/0x320 [ 62.810248][ T4687] register_netdevice+0x1fa/0xe30 [ 62.815327][ T4687] ? snprintf+0x87/0xb0 [ 62.819500][ T4687] ppp_dev_configure+0x64a/0x700 [ 62.824521][ T4687] ppp_ioctl+0x4b3/0x11b0 [ 62.828945][ T4687] ? __fget_files+0x17c/0x1c0 [ 62.833718][ T4687] ? __pfx_ppp_ioctl+0x10/0x10 [ 62.838569][ T4687] __se_sys_ioctl+0xc9/0x140 [ 62.843267][ T4687] __x64_sys_ioctl+0x43/0x50 [ 62.847877][ T4687] x64_sys_call+0x1690/0x2dc0 [ 62.852566][ T4687] do_syscall_64+0xc9/0x1c0 [ 62.857075][ T4687] ? clear_bhb_loop+0x55/0xb0 [ 62.861776][ T4687] ? clear_bhb_loop+0x55/0xb0 [ 62.866470][ T4687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.872387][ T4687] RIP: 0033:0x7fdcb4cb5d29 [ 62.876872][ T4687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.896507][ T4687] RSP: 002b:00007fdcb3306038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.904933][ T4687] RAX: ffffffffffffffda RBX: 00007fdcb4ea6080 RCX: 00007fdcb4cb5d29 [ 62.912977][ T4687] RDX: 0000000020001400 RSI: 00000000c004743e RDI: 0000000000000006 [ 62.920951][ T4687] RBP: 00007fdcb3306090 R08: 0000000000000000 R09: 0000000000000000 [ 62.929018][ T4687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.937074][ T4687] R13: 0000000000000000 R14: 00007fdcb4ea6080 R15: 00007fff97f53858 [ 62.945065][ T4687] [ 62.958357][ T4674] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.309: mark_inode_dirty error [ 62.971832][ T4674] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #15: comm syz.5.309: corrupted inode contents [ 62.994169][ T4690] netlink: 'syz.0.314': attribute type 2 has an invalid length. [ 63.008511][ T4674] EXT4-fs error (device loop5): ext4_truncate:4240: inode #15: comm syz.5.309: mark_inode_dirty error [ 63.045209][ T4674] EXT4-fs error (device loop5) in ext4_setattr:5568: Corrupt filesystem [ 63.059254][ T4696] vlan2: entered promiscuous mode [ 63.065273][ T4688] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #15: comm syz.5.309: corrupted inode contents [ 63.119342][ T3657] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.191203][ T29] kauditd_printk_skb: 597 callbacks suppressed [ 63.191216][ T29] audit: type=1400 audit(1736456317.355:2207): avc: denied { write } for pid=4699 comm="syz.6.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.192764][ T4704] loop3: detected capacity change from 0 to 512 [ 63.197595][ T29] audit: type=1400 audit(1736456317.355:2208): avc: denied { nlmsg_write } for pid=4699 comm="syz.6.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.225802][ T4704] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.267678][ T4701] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.286516][ T29] audit: type=1400 audit(1736456317.405:2209): avc: denied { connect } for pid=4699 comm="syz.6.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.306517][ T29] audit: type=1400 audit(1736456317.415:2210): avc: denied { tracepoint } for pid=4699 comm="syz.6.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 63.326280][ T29] audit: type=1400 audit(1736456317.445:2211): avc: denied { read } for pid=4708 comm="syz.5.320" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 63.349636][ T29] audit: type=1400 audit(1736456317.445:2212): avc: denied { open } for pid=4708 comm="syz.5.320" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 63.350262][ T4715] loop7: detected capacity change from 0 to 2048 [ 63.374998][ T4710] sch_tbf: burst 25 is lower than device lo mtu (65550) ! [ 63.388111][ T29] audit: type=1400 audit(1736456317.545:2213): avc: denied { ioctl } for pid=4708 comm="syz.5.320" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 63.388699][ T4704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.416166][ T29] audit: type=1400 audit(1736456317.575:2214): avc: denied { bind } for pid=4699 comm="syz.6.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.438635][ T4704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.455563][ T29] audit: type=1400 audit(1736456317.605:2215): avc: denied { ioctl } for pid=4699 comm="syz.6.317" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 63.481692][ T29] audit: type=1400 audit(1736456317.645:2216): avc: denied { unlink } for pid=2981 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.505381][ T4701] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.551527][ T4701] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.565247][ T4720] capability: warning: `syz.3.323' uses 32-bit capabilities (legacy support in use) [ 63.577793][ T4718] netlink: 60 bytes leftover after parsing attributes in process `syz.7.322'. [ 63.586995][ T4718] netlink: 12 bytes leftover after parsing attributes in process `syz.7.322'. [ 63.595949][ T4718] netlink: 20 bytes leftover after parsing attributes in process `syz.7.322'. [ 63.616075][ T4701] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.625999][ T4724] syz.7.325[4724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.626652][ T4724] syz.7.325[4724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.638160][ T4724] syz.7.325[4724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.689568][ T4701] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.713296][ T4701] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.734535][ T4701] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.749478][ T4701] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.809261][ T4736] loop3: detected capacity change from 0 to 512 [ 63.816568][ T4736] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.848422][ T4736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.881830][ T4736] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.975920][ T4745] loop6: detected capacity change from 0 to 512 [ 63.989608][ T4745] EXT4-fs: dax option not supported [ 64.055905][ T4757] tmpfs: Bad value for 'nr_blocks' [ 64.069830][ T4759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4759 comm=syz.6.339 [ 64.112063][ T4759] netlink: 'syz.6.339': attribute type 1 has an invalid length. [ 64.137168][ T4759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=4759 comm=syz.6.339 [ 64.141335][ T4770] loop0: detected capacity change from 0 to 512 [ 64.163712][ T4763] loop7: detected capacity change from 0 to 512 [ 64.187756][ T4770] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 64.204698][ T4763] /dev/loop7: Can't open blockdev [ 64.265353][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.272886][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.280426][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.287837][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.295275][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.302720][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.310218][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.317621][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.325114][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.332548][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.339995][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.347445][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.354952][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.362394][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.370012][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.377477][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.384934][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.392458][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.399895][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.407354][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.414772][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.422185][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.429592][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.437071][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.444577][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.451993][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.459398][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.466787][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.474259][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.481660][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.489058][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.496514][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.503921][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.511366][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.518784][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.526200][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.533628][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.541089][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.548545][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.555932][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.563330][ T3367] hid-generic 0000:0000:0000.0002: item fetching failed at offset 40/43 [ 64.571769][ T3367] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22 [ 64.638056][ T4788] loop6: detected capacity change from 0 to 764 [ 64.651071][ T4788] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 64.671333][ T4790] bridge0: port 4(syz_tun) entered blocking state [ 64.677883][ T4790] bridge0: port 4(syz_tun) entered disabled state [ 64.684470][ T4790] syz_tun: entered allmulticast mode [ 64.690478][ T4790] syz_tun: entered promiscuous mode [ 64.695954][ T4790] bridge0: port 4(syz_tun) entered blocking state [ 64.702450][ T4790] bridge0: port 4(syz_tun) entered forwarding state [ 64.753500][ T4790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.347'. [ 64.764332][ T4798] netlink: 20 bytes leftover after parsing attributes in process `syz.6.352'. [ 64.772182][ T4790] vlan2: entered promiscuous mode [ 64.778332][ T4790] dummy0: entered promiscuous mode [ 64.796224][ T4790] dummy0: left promiscuous mode [ 64.861437][ T4804] loop6: detected capacity change from 0 to 164 [ 64.895871][ T4809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.356'. [ 64.946654][ T4811] loop7: detected capacity change from 0 to 512 [ 64.957853][ T4811] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.959688][ T4804] lo speed is unknown, defaulting to 1000 [ 64.985000][ T4811] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.009379][ T4815] loop3: detected capacity change from 0 to 1024 [ 65.017763][ T4815] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.026680][ T4811] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.041949][ T4815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.147342][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.161028][ T4829] netlink: 20 bytes leftover after parsing attributes in process `syz.7.362'. [ 65.271474][ T4834] loop3: detected capacity change from 0 to 8192 [ 65.415712][ T4850] loop7: detected capacity change from 0 to 2048 [ 65.440800][ T4852] loop3: detected capacity change from 0 to 1024 [ 65.447635][ T4852] EXT4-fs: quotafile must be on filesystem root [ 65.631322][ T4873] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 65.678999][ T4876] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 65.741878][ T4882] FAULT_INJECTION: forcing a failure. [ 65.741878][ T4882] name failslab, interval 1, probability 0, space 0, times 0 [ 65.754653][ T4882] CPU: 0 UID: 0 PID: 4882 Comm: +}[@ Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 65.764819][ T4882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.774952][ T4882] Call Trace: [ 65.778245][ T4882] [ 65.781229][ T4882] dump_stack_lvl+0xf2/0x150 [ 65.785940][ T4882] dump_stack+0x15/0x1a [ 65.790164][ T4882] should_fail_ex+0x223/0x230 [ 65.794943][ T4882] should_failslab+0x8f/0xb0 [ 65.799615][ T4882] kmem_cache_alloc_noprof+0x52/0x320 [ 65.805121][ T4882] ? getname_flags+0x81/0x3b0 [ 65.809827][ T4882] ? __rcu_read_unlock+0x4e/0x70 [ 65.814848][ T4882] getname_flags+0x81/0x3b0 [ 65.819373][ T4882] getname_uflags+0x24/0x30 [ 65.823896][ T4882] io_statx_prep+0x10c/0x180 [ 65.828534][ T4882] io_submit_sqes+0x5d0/0x1090 [ 65.833424][ T4882] __se_sys_io_uring_enter+0x1b9/0x1ba0 [ 65.839106][ T4882] ? 0xffffffff81000000 [ 65.843270][ T4882] ? selinux_file_permission+0x22a/0x360 [ 65.848936][ T4882] ? get_pid_task+0x8e/0xc0 [ 65.853446][ T4882] ? proc_fail_nth_write+0x12a/0x150 [ 65.858766][ T4882] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 65.864479][ T4882] ? vfs_write+0x596/0x920 [ 65.868948][ T4882] ? __fget_files+0x17c/0x1c0 [ 65.873695][ T4882] ? fput+0x1c4/0x200 [ 65.877747][ T4882] ? ksys_write+0x176/0x1b0 [ 65.882357][ T4882] __x64_sys_io_uring_enter+0x78/0x90 [ 65.887771][ T4882] x64_sys_call+0xb5e/0x2dc0 [ 65.892386][ T4882] do_syscall_64+0xc9/0x1c0 [ 65.896897][ T4882] ? clear_bhb_loop+0x55/0xb0 [ 65.901694][ T4882] ? clear_bhb_loop+0x55/0xb0 [ 65.906394][ T4882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.912388][ T4882] RIP: 0033:0x7fdcb4cb5d29 [ 65.916822][ T4882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.936913][ T4882] RSP: 002b:00007fdcb3327038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 65.945370][ T4882] RAX: ffffffffffffffda RBX: 00007fdcb4ea5fa0 RCX: 00007fdcb4cb5d29 [ 65.953434][ T4882] RDX: 0000000000001aa5 RSI: 0000000000001c40 RDI: 0000000000000003 [ 65.961422][ T4882] RBP: 00007fdcb3327090 R08: 0000000000000000 R09: 0000000000000000 [ 65.969461][ T4882] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 65.977447][ T4882] R13: 0000000000000000 R14: 00007fdcb4ea5fa0 R15: 00007fff97f53858 [ 65.985443][ T4882] [ 65.990174][ T4883] syz.3.381[4883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.990288][ T4883] syz.3.381[4883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.008741][ T4883] syz.3.381[4883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.089413][ T4890] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 66.112996][ T4888] loop7: detected capacity change from 0 to 1024 [ 66.128346][ T4888] program syz.7.382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.262771][ T4909] loop7: detected capacity change from 0 to 512 [ 66.269839][ T4909] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 66.272665][ T4904] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 66.290037][ T4914] siw: device registration error -23 [ 66.324503][ T4914] serio: Serial port ptm0 [ 66.438899][ T4924] FAULT_INJECTION: forcing a failure. [ 66.438899][ T4924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.452196][ T4924] CPU: 1 UID: 0 PID: 4924 Comm: syz.7.394 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 66.462808][ T4924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.472901][ T4924] Call Trace: [ 66.476247][ T4924] [ 66.479185][ T4924] dump_stack_lvl+0xf2/0x150 [ 66.483820][ T4924] dump_stack+0x15/0x1a [ 66.488003][ T4924] should_fail_ex+0x223/0x230 [ 66.492766][ T4924] should_fail+0xb/0x10 [ 66.497011][ T4924] should_fail_usercopy+0x1a/0x20 [ 66.502059][ T4924] _copy_from_user+0x1e/0xb0 [ 66.506722][ T4924] memdup_user_nul+0x65/0xd0 [ 66.511335][ T4924] sel_commit_bools_write+0xcd/0x260 [ 66.516644][ T4924] vfs_writev+0x3fb/0x880 [ 66.520981][ T4924] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 66.526903][ T4924] ? mutex_lock+0xd/0x40 [ 66.531200][ T4924] do_writev+0xf4/0x220 [ 66.535365][ T4924] __x64_sys_writev+0x45/0x50 [ 66.540133][ T4924] x64_sys_call+0x1fab/0x2dc0 [ 66.544826][ T4924] do_syscall_64+0xc9/0x1c0 [ 66.549348][ T4924] ? clear_bhb_loop+0x55/0xb0 [ 66.554086][ T4924] ? clear_bhb_loop+0x55/0xb0 [ 66.558883][ T4924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.564907][ T4924] RIP: 0033:0x7fdcb4cb5d29 [ 66.569376][ T4924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.588991][ T4924] RSP: 002b:00007fdcb3327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 66.597492][ T4924] RAX: ffffffffffffffda RBX: 00007fdcb4ea5fa0 RCX: 00007fdcb4cb5d29 [ 66.605468][ T4924] RDX: 0000000000000002 RSI: 00000000200025c0 RDI: 0000000000000003 [ 66.613474][ T4924] RBP: 00007fdcb3327090 R08: 0000000000000000 R09: 0000000000000000 [ 66.621482][ T4924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.629459][ T4924] R13: 0000000000000000 R14: 00007fdcb4ea5fa0 R15: 00007fff97f53858 [ 66.637523][ T4924] [ 66.646879][ T4926] loop3: detected capacity change from 0 to 1024 [ 66.658225][ T4926] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.682890][ T4926] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 66.703476][ T4932] netlink: 3 bytes leftover after parsing attributes in process `syz.5.398'. [ 66.706816][ T4926] EXT4-fs (loop3): orphan cleanup on readonly fs [ 66.714685][ T4932] 0ªX¹¦À: renamed from caif0 [ 66.732517][ T4926] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 66.743415][ T4926] EXT4-fs (loop3): Remounting filesystem read-only [ 66.750088][ T4932] 0ªX¹¦À: entered allmulticast mode [ 66.750798][ T4926] EXT4-fs (loop3): 1 orphan inode deleted [ 66.755503][ T4932] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 66.765974][ T4926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 66.789397][ T4926] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 66.814050][ T4938] loop5: detected capacity change from 0 to 512 [ 66.824161][ T4938] EXT4-fs (loop5): #clusters per group too big: 201392385 [ 66.887915][ T4942] loop3: detected capacity change from 0 to 2048 [ 66.902889][ T4942] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.903047][ T4944] loop7: detected capacity change from 0 to 512 [ 66.927776][ T4940] loop5: detected capacity change from 0 to 8192 [ 66.936405][ T4944] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.271192][ T4965] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.402: bg 0: block 234: padding at end of block bitmap is not set [ 67.286757][ T4965] EXT4-fs (loop3): Remounting filesystem read-only [ 67.408356][ T4966] loop7: detected capacity change from 0 to 164 [ 67.519023][ T4966] syz.7.408: attempt to access beyond end of device [ 67.519023][ T4966] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 67.654531][ T4966] syz.7.408: attempt to access beyond end of device [ 67.654531][ T4966] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 67.694806][ T4975] FAULT_INJECTION: forcing a failure. [ 67.694806][ T4975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.695264][ T4977] loop5: detected capacity change from 0 to 128 [ 67.707884][ T4975] CPU: 0 UID: 0 PID: 4975 Comm: syz.6.412 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 67.707917][ T4975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.707932][ T4975] Call Trace: [ 67.707940][ T4975] [ 67.707948][ T4975] dump_stack_lvl+0xf2/0x150 [ 67.745633][ T4975] dump_stack+0x15/0x1a [ 67.749896][ T4975] should_fail_ex+0x223/0x230 [ 67.754593][ T4975] should_fail+0xb/0x10 [ 67.758761][ T4975] should_fail_usercopy+0x1a/0x20 [ 67.763806][ T4975] _copy_to_user+0x20/0xa0 [ 67.768242][ T4975] simple_read_from_buffer+0xa0/0x110 [ 67.773633][ T4975] proc_fail_nth_read+0xf9/0x140 [ 67.778656][ T4975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.784226][ T4975] vfs_read+0x1a2/0x700 [ 67.788460][ T4975] ? __rcu_read_unlock+0x4e/0x70 [ 67.793464][ T4975] ? __fget_files+0x17c/0x1c0 [ 67.798171][ T4975] ksys_read+0xe8/0x1b0 [ 67.802415][ T4975] __x64_sys_read+0x42/0x50 [ 67.806999][ T4975] x64_sys_call+0x2874/0x2dc0 [ 67.811712][ T4975] do_syscall_64+0xc9/0x1c0 [ 67.816247][ T4975] ? clear_bhb_loop+0x55/0xb0 [ 67.820969][ T4975] ? clear_bhb_loop+0x55/0xb0 [ 67.825731][ T4975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.831744][ T4975] RIP: 0033:0x7fe90dd8473c [ 67.836165][ T4975] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 67.855844][ T4975] RSP: 002b:00007fe90c3f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.864338][ T4975] RAX: ffffffffffffffda RBX: 00007fe90df75fa0 RCX: 00007fe90dd8473c [ 67.872317][ T4975] RDX: 000000000000000f RSI: 00007fe90c3f70a0 RDI: 0000000000000007 [ 67.880352][ T4975] RBP: 00007fe90c3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.888397][ T4975] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 67.896375][ T4975] R13: 0000000000000000 R14: 00007fe90df75fa0 R15: 00007ffcd6537a58 [ 67.904407][ T4975] [ 67.956306][ T3298] EXT4-fs unmount: 4 callbacks suppressed [ 67.956323][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.055972][ T4981] sg_write: data in/out 14238/8 bytes for SCSI command 0xd0-- guessing data in; [ 68.055972][ T4981] program syz.7.416 not setting count and/or reply_len properly [ 68.143314][ T4990] loop5: detected capacity change from 0 to 512 [ 68.157856][ T4990] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.179729][ T4990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.184128][ T4995] 9pnet: p9_errstr2errno: server reported unknown error [ 68.195149][ T4990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.282117][ T5007] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 68.319612][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 68.319629][ T29] audit: type=1326 audit(1736456322.422:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.7.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 68.349308][ T29] audit: type=1326 audit(1736456322.422:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.7.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 68.353585][ T5016] loop6: detected capacity change from 0 to 764 [ 68.372700][ T29] audit: type=1326 audit(1736456322.422:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.7.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 68.402367][ T29] audit: type=1326 audit(1736456322.422:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.7.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 68.425740][ T29] audit: type=1326 audit(1736456322.422:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.7.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 68.449078][ T29] audit: type=1326 audit(1736456322.422:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.7.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 68.472457][ T29] audit: type=1326 audit(1736456322.422:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.7.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 68.495767][ T29] audit: type=1326 audit(1736456322.422:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.7.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 68.519122][ T29] audit: type=1326 audit(1736456322.422:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.7.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 68.542520][ T29] audit: type=1326 audit(1736456322.422:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.7.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 68.589941][ T5023] loop3: detected capacity change from 0 to 512 [ 68.590197][ T5023] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 68.592523][ T5025] FAULT_INJECTION: forcing a failure. [ 68.592523][ T5025] name failslab, interval 1, probability 0, space 0, times 0 [ 68.592550][ T5025] CPU: 0 UID: 0 PID: 5025 Comm: syz.5.433 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 68.592581][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.592597][ T5025] Call Trace: [ 68.592605][ T5025] [ 68.592613][ T5025] dump_stack_lvl+0xf2/0x150 [ 68.592734][ T5025] dump_stack+0x15/0x1a [ 68.592764][ T5025] should_fail_ex+0x223/0x230 [ 68.592795][ T5025] ? sctp_association_new+0x71/0x1130 [ 68.593012][ T5025] should_failslab+0x8f/0xb0 [ 68.593053][ T5025] __kmalloc_cache_noprof+0x4e/0x320 [ 68.593080][ T5025] sctp_association_new+0x71/0x1130 [ 68.593112][ T5025] sctp_connect_new_asoc+0x1b0/0x3b0 [ 68.593193][ T5025] sctp_sendmsg+0xf05/0x1920 [ 68.593237][ T5025] ? __pfx_sctp_sendmsg+0x10/0x10 [ 68.593270][ T5025] inet_sendmsg+0xc5/0xd0 [ 68.593370][ T5025] __sock_sendmsg+0x102/0x180 [ 68.593401][ T5025] __sys_sendto+0x1a8/0x230 [ 68.593477][ T5025] __x64_sys_sendto+0x78/0x90 [ 68.593506][ T5025] x64_sys_call+0x29fa/0x2dc0 [ 68.593533][ T5025] do_syscall_64+0xc9/0x1c0 [ 68.593558][ T5025] ? clear_bhb_loop+0x55/0xb0 [ 68.593621][ T5025] ? clear_bhb_loop+0x55/0xb0 [ 68.593643][ T5025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.593689][ T5025] RIP: 0033:0x7f8ca38b5d29 [ 68.593709][ T5025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.593802][ T5025] RSP: 002b:00007f8ca1f21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 68.593828][ T5025] RAX: ffffffffffffffda RBX: 00007f8ca3aa5fa0 RCX: 00007f8ca38b5d29 [ 68.593845][ T5025] RDX: 0000000000034000 RSI: 0000000020000180 RDI: 0000000000000006 [ 68.593862][ T5025] RBP: 00007f8ca1f21090 R08: 0000000020000480 R09: 000000000000001c [ 68.593878][ T5025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.593903][ T5025] R13: 0000000000000000 R14: 00007f8ca3aa5fa0 R15: 00007ffcc1d90d18 [ 68.593922][ T5025] [ 68.753171][ T5036] loop3: detected capacity change from 0 to 512 [ 68.755338][ T5036] EXT4-fs: Ignoring removed i_version option [ 68.755367][ T5036] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.761236][ T5036] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.762966][ T5036] EXT4-fs (loop3): 1 truncate cleaned up [ 68.763419][ T5036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.815165][ T5029] lo speed is unknown, defaulting to 1000 [ 68.856891][ T5041] 9pnet: p9_errstr2errno: server reported unknown error [ 68.997976][ T5021] FAULT_INJECTION: forcing a failure. [ 68.997976][ T5021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.011092][ T5021] CPU: 0 UID: 0 PID: 5021 Comm: syz.0.432 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 69.021729][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.031834][ T5021] Call Trace: [ 69.035106][ T5021] [ 69.038036][ T5021] dump_stack_lvl+0xf2/0x150 [ 69.042682][ T5021] dump_stack+0x15/0x1a [ 69.047023][ T5021] should_fail_ex+0x223/0x230 [ 69.051747][ T5021] should_fail+0xb/0x10 [ 69.055983][ T5021] should_fail_usercopy+0x1a/0x20 [ 69.061054][ T5021] _copy_from_iter+0xd5/0xd00 [ 69.065749][ T5021] ? __virt_addr_valid+0x1ed/0x250 [ 69.070959][ T5021] ? __check_object_size+0x364/0x520 [ 69.076289][ T5021] file_tty_write+0x329/0x680 [ 69.081035][ T5021] tty_write+0x28/0x30 [ 69.085145][ T5021] vfs_write+0x77f/0x920 [ 69.089414][ T5021] ? __pfx_tty_write+0x10/0x10 [ 69.094222][ T5021] ksys_write+0xe8/0x1b0 [ 69.098477][ T5021] __x64_sys_write+0x42/0x50 [ 69.103233][ T5021] x64_sys_call+0x287e/0x2dc0 [ 69.107931][ T5021] do_syscall_64+0xc9/0x1c0 [ 69.112484][ T5021] ? clear_bhb_loop+0x55/0xb0 [ 69.117180][ T5021] ? clear_bhb_loop+0x55/0xb0 [ 69.121887][ T5021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.127804][ T5021] RIP: 0033:0x7f8b8d8a5d29 [ 69.132220][ T5021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.151906][ T5021] RSP: 002b:00007f8b8bf17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.160354][ T5021] RAX: ffffffffffffffda RBX: 00007f8b8da95fa0 RCX: 00007f8b8d8a5d29 [ 69.168344][ T5021] RDX: 0000000000001006 RSI: 00000000200029c0 RDI: 0000000000000004 [ 69.176319][ T5021] RBP: 00007f8b8bf17090 R08: 0000000000000000 R09: 0000000000000000 [ 69.184429][ T5021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.192459][ T5021] R13: 0000000000000000 R14: 00007f8b8da95fa0 R15: 00007ffe20638778 [ 69.200440][ T5021] [ 69.254075][ T5049] loop6: detected capacity change from 0 to 512 [ 69.289623][ T5048] loop0: detected capacity change from 0 to 1024 [ 69.307258][ T5049] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.441: bg 0: block 248: padding at end of block bitmap is not set [ 69.331425][ T5049] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.441: Failed to acquire dquot type 1 [ 69.343626][ T5049] EXT4-fs (loop6): 1 truncate cleaned up [ 69.351310][ T5049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.364308][ T5049] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.406326][ T5063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 69.457640][ T5061] loop5: detected capacity change from 0 to 2048 [ 69.557676][ T5071] SELinux: Context Ü is not valid (left unmapped). [ 69.564921][ T3376] kernel write not supported for file /input/event2 (pid: 3376 comm: kworker/1:4) [ 69.588471][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.675179][ T5087] 9pnet: p9_errstr2errno: server reported unknown error [ 69.728065][ T5097] loop0: detected capacity change from 0 to 512 [ 69.735289][ T5097] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.745426][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 69.748880][ T5097] EXT4-fs (loop0): 1 truncate cleaned up [ 69.760435][ T5097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.776421][ T5097] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 69.791024][ T5095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.791164][ T5097] EXT4-fs (loop0): Remounting filesystem read-only [ 69.798434][ T5095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.812518][ T5095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.820055][ T5095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.829497][ T5097] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -5) [ 69.839478][ T5102] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 69.842235][ T5103] netlink: 12 bytes leftover after parsing attributes in process `syz.7.462'. [ 69.899089][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.900401][ T5105] syz.5.463[5105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.908280][ T5105] syz.5.463[5105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.920153][ T5105] syz.5.463[5105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.962207][ T5110] loop0: detected capacity change from 0 to 128 [ 69.993145][ T5112] loop5: detected capacity change from 0 to 1024 [ 70.002711][ T5110] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.019645][ T5110] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.055832][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.092992][ T5121] loop3: detected capacity change from 0 to 512 [ 70.100803][ T5125] netlink: 132 bytes leftover after parsing attributes in process `syz.5.467'. [ 70.114696][ T4153] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.140250][ T5124] FAULT_INJECTION: forcing a failure. [ 70.140250][ T5124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.153446][ T5124] CPU: 0 UID: 0 PID: 5124 Comm: syz.7.470 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 70.164117][ T5124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.174343][ T5124] Call Trace: [ 70.177644][ T5124] [ 70.180585][ T5124] dump_stack_lvl+0xf2/0x150 [ 70.185270][ T5124] dump_stack+0x15/0x1a [ 70.189521][ T5124] should_fail_ex+0x223/0x230 [ 70.194274][ T5124] should_fail+0xb/0x10 [ 70.198517][ T5124] should_fail_usercopy+0x1a/0x20 [ 70.203622][ T5124] _copy_to_user+0x20/0xa0 [ 70.208062][ T5124] copy_siginfo_to_user+0x24/0xb0 [ 70.213141][ T5124] x64_setup_rt_frame+0x2b4/0x590 [ 70.218277][ T5124] arch_do_signal_or_restart+0x287/0x4b0 [ 70.224017][ T5124] syscall_exit_to_user_mode+0x62/0x120 [ 70.229678][ T5124] do_syscall_64+0xd6/0x1c0 [ 70.234191][ T5124] ? clear_bhb_loop+0x55/0xb0 [ 70.238881][ T5124] ? clear_bhb_loop+0x55/0xb0 [ 70.243570][ T5124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.249538][ T5124] RIP: 0033:0x7fdcb4cb468e [ 70.253960][ T5124] Code: 24 30 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 <0f> 05 48 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 [ 70.273648][ T5124] RSP: 002b:00007fdcb3326b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 70.282086][ T5124] RAX: 0000000000000101 RBX: 0000000000127081 RCX: 00007fdcb4cb4690 [ 70.290073][ T5124] RDX: 0000000000127081 RSI: 00007fdcb3326c10 RDI: 00000000ffffff9c [ 70.298073][ T5124] RBP: 00007fdcb3326c10 R08: 0000000000000000 R09: 002367732f766564 [ 70.306186][ T5124] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 70.314165][ T5124] R13: 0000000000000000 R14: 00007fdcb4ea5fa0 R15: 00007fff97f53858 [ 70.322150][ T5124] [ 70.423287][ T5134] loop7: detected capacity change from 0 to 128 [ 70.472771][ T5141] syzkaller1: entered promiscuous mode [ 70.478361][ T5141] syzkaller1: entered allmulticast mode [ 70.515674][ T5143] FAULT_INJECTION: forcing a failure. [ 70.515674][ T5143] name failslab, interval 1, probability 0, space 0, times 0 [ 70.528694][ T5143] CPU: 1 UID: 0 PID: 5143 Comm: syz.3.477 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 70.539329][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.549497][ T5143] Call Trace: [ 70.552818][ T5143] [ 70.555854][ T5143] dump_stack_lvl+0xf2/0x150 [ 70.560497][ T5143] dump_stack+0x15/0x1a [ 70.564696][ T5143] should_fail_ex+0x223/0x230 [ 70.569451][ T5143] should_failslab+0x8f/0xb0 [ 70.574070][ T5143] kmem_cache_alloc_noprof+0x52/0x320 [ 70.579464][ T5143] ? getname_flags+0x81/0x3b0 [ 70.584212][ T5143] getname_flags+0x81/0x3b0 [ 70.588739][ T5143] getname+0x17/0x20 [ 70.592686][ T5143] path_setxattrat+0x23a/0x310 [ 70.597492][ T5143] __x64_sys_lsetxattr+0x71/0x90 [ 70.602484][ T5143] x64_sys_call+0x29c8/0x2dc0 [ 70.607265][ T5143] do_syscall_64+0xc9/0x1c0 [ 70.611787][ T5143] ? clear_bhb_loop+0x55/0xb0 [ 70.616485][ T5143] ? clear_bhb_loop+0x55/0xb0 [ 70.621306][ T5143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.627332][ T5143] RIP: 0033:0x7fe1098d5d29 [ 70.631769][ T5143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.651582][ T5143] RSP: 002b:00007fe107f47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 70.660091][ T5143] RAX: ffffffffffffffda RBX: 00007fe109ac5fa0 RCX: 00007fe1098d5d29 [ 70.668177][ T5143] RDX: 0000000020000380 RSI: 0000000020000040 RDI: 0000000020000a40 [ 70.676163][ T5143] RBP: 00007fe107f47090 R08: 0000000000000000 R09: 0000000000000000 [ 70.684223][ T5143] R10: 00000000000000c7 R11: 0000000000000246 R12: 0000000000000001 [ 70.692215][ T5143] R13: 0000000000000000 R14: 00007fe109ac5fa0 R15: 00007ffd11138e58 [ 70.700229][ T5143] [ 70.741199][ T5145] loop3: detected capacity change from 0 to 128 [ 70.802737][ T5145] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.858540][ T5145] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.953230][ T5155] loop7: detected capacity change from 0 to 512 [ 70.964217][ T5147] lo speed is unknown, defaulting to 1000 [ 70.968027][ T5155] EXT4-fs: inline encryption not supported [ 70.977189][ T5145] syz.3.478[5145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.977317][ T5145] syz.3.478[5145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.989304][ T5158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.481'. [ 71.019580][ T5155] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.047297][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.100446][ T5155] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.145797][ T1036] IPVS: starting estimator thread 0... [ 71.151841][ T5163] random: crng reseeded on system resumption [ 71.250238][ T4284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.278590][ T5166] IPVS: using max 2064 ests per chain, 103200 per kthread [ 71.429784][ T5182] FAULT_INJECTION: forcing a failure. [ 71.429784][ T5182] name failslab, interval 1, probability 0, space 0, times 0 [ 71.442499][ T5182] CPU: 1 UID: 0 PID: 5182 Comm: syz.7.490 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 71.453100][ T5182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.463195][ T5182] Call Trace: [ 71.466499][ T5182] [ 71.469441][ T5182] dump_stack_lvl+0xf2/0x150 [ 71.474129][ T5182] dump_stack+0x15/0x1a [ 71.478317][ T5182] should_fail_ex+0x223/0x230 [ 71.483021][ T5182] should_failslab+0x8f/0xb0 [ 71.487712][ T5182] kmem_cache_alloc_noprof+0x52/0x320 [ 71.493100][ T5182] ? __anon_vma_prepare+0x73/0x310 [ 71.498272][ T5182] ? __alloc_pages_noprof+0x1bc/0x340 [ 71.503679][ T5182] __anon_vma_prepare+0x73/0x310 [ 71.508855][ T5182] ? do_wp_page+0x100e/0x2340 [ 71.513629][ T5182] do_wp_page+0x1016/0x2340 [ 71.518207][ T5182] ? __rcu_read_lock+0x36/0x50 [ 71.523066][ T5182] handle_mm_fault+0xc63/0x2ac0 [ 71.527970][ T5182] exc_page_fault+0x3b9/0x650 [ 71.532738][ T5182] asm_exc_page_fault+0x26/0x30 [ 71.537604][ T5182] RIP: 0033:0x7fdcb4b78ba3 [ 71.542054][ T5182] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 71.561738][ T5182] RSP: 002b:00007fdcb33264a0 EFLAGS: 00010202 [ 71.567855][ T5182] RAX: 0000000000000400 RBX: 00007fdcb3326540 RCX: 00007fdcaaf07000 [ 71.575866][ T5182] RDX: 00007fdcb33266e0 RSI: 0000000000000001 RDI: 00007fdcb33265e0 [ 71.578758][ T5135] syz.6.472 (5135) used greatest stack depth: 6288 bytes left [ 71.583842][ T5182] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000ab [ 71.583861][ T5182] R10: 00000000000000be R11: 00007fdcb3326540 R12: 0000000000000001 [ 71.607271][ T5182] R13: 00007fdcb4d49040 R14: 0000000000000020 R15: 00007fdcb33265e0 [ 71.615269][ T5182] [ 71.618532][ T5182] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 71.631298][ T5182] loop7: detected capacity change from 0 to 1024 [ 71.648599][ T5182] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 71.661825][ T5182] JBD2: no valid journal superblock found [ 71.667625][ T5182] EXT4-fs (loop7): Could not load journal inode [ 71.668244][ T5186] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 71.781563][ T5194] loop6: detected capacity change from 0 to 8192 [ 71.859579][ T5203] FAULT_INJECTION: forcing a failure. [ 71.859579][ T5203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.872722][ T5203] CPU: 1 UID: 0 PID: 5203 Comm: syz.7.499 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 71.883333][ T5203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.893454][ T5203] Call Trace: [ 71.896758][ T5203] [ 71.899745][ T5203] dump_stack_lvl+0xf2/0x150 [ 71.904417][ T5203] dump_stack+0x15/0x1a [ 71.908646][ T5203] should_fail_ex+0x223/0x230 [ 71.913387][ T5203] should_fail+0xb/0x10 [ 71.917575][ T5203] should_fail_usercopy+0x1a/0x20 [ 71.922726][ T5203] _copy_to_user+0x20/0xa0 [ 71.927180][ T5203] simple_read_from_buffer+0xa0/0x110 [ 71.932607][ T5203] proc_fail_nth_read+0xf9/0x140 [ 71.937582][ T5203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.943157][ T5203] vfs_read+0x1a2/0x700 [ 71.947341][ T5203] ? __cond_resched+0x28/0x50 [ 71.952161][ T5203] ksys_read+0xe8/0x1b0 [ 71.956388][ T5203] __x64_sys_read+0x42/0x50 [ 71.960919][ T5203] x64_sys_call+0x2874/0x2dc0 [ 71.965626][ T5203] do_syscall_64+0xc9/0x1c0 [ 71.970183][ T5203] ? clear_bhb_loop+0x55/0xb0 [ 71.974941][ T5203] ? clear_bhb_loop+0x55/0xb0 [ 71.979701][ T5203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.985623][ T5203] RIP: 0033:0x7fdcb4cb473c [ 71.990041][ T5203] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 72.009721][ T5203] RSP: 002b:00007fdcb3327030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.018281][ T5203] RAX: ffffffffffffffda RBX: 00007fdcb4ea5fa0 RCX: 00007fdcb4cb473c [ 72.026255][ T5203] RDX: 000000000000000f RSI: 00007fdcb33270a0 RDI: 0000000000000006 [ 72.034285][ T5203] RBP: 00007fdcb3327090 R08: 0000000000000000 R09: 0000000000000000 [ 72.042271][ T5203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.050311][ T5203] R13: 0000000000000000 R14: 00007fdcb4ea5fa0 R15: 00007fff97f53858 [ 72.058341][ T5203] [ 72.199937][ T5216] loop5: detected capacity change from 0 to 8192 [ 72.201089][ T5222] netlink: 64 bytes leftover after parsing attributes in process `syz.3.506'. [ 72.230409][ T1629] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.289563][ T1629] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.338996][ T1629] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.389201][ T1629] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.449649][ T5234] syz.3.510[5234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.449720][ T5234] syz.3.510[5234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.469097][ T5234] syz.3.510[5234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.529126][ T1629] bridge_slave_1: left allmulticast mode [ 72.546270][ T1629] bridge_slave_1: left promiscuous mode [ 72.552289][ T1629] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.583057][ T1629] bridge_slave_0: left allmulticast mode [ 72.588751][ T1629] bridge_slave_0: left promiscuous mode [ 72.594398][ T1629] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.762683][ T1629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.773468][ T1629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.783589][ T1629] bond0 (unregistering): Released all slaves [ 72.871165][ T5230] lo speed is unknown, defaulting to 1000 [ 72.878272][ T5255] loop5: detected capacity change from 0 to 512 [ 72.898679][ T5255] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.941889][ T5257] loop0: detected capacity change from 0 to 512 [ 72.957698][ T5257] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.988771][ T5255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.030659][ T5255] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.049028][ T5257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.068238][ T1629] hsr_slave_0: left promiscuous mode [ 73.086068][ T5257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.095252][ T1629] hsr_slave_1: left promiscuous mode [ 73.109209][ T1629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.116628][ T1629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.125768][ T1629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.133219][ T1629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.175041][ T5219] syz.7.504 (5219) used greatest stack depth: 6256 bytes left [ 73.183580][ T1629] veth1_macvtap: left promiscuous mode [ 73.189136][ T1629] veth0_macvtap: left promiscuous mode [ 73.194726][ T1629] veth1_vlan: left promiscuous mode [ 73.200132][ T1629] veth0_vlan: left promiscuous mode [ 73.306057][ T5281] syz.7.518[5281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.306176][ T5281] syz.7.518[5281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.328375][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 73.328455][ T29] audit: type=1400 audit(1736456327.492:3082): avc: denied { mounton } for pid=5280 comm="syz.7.518" path="/75/file0" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 73.369096][ T1629] team0 (unregistering): Port device team_slave_1 removed [ 73.382480][ T1629] team0 (unregistering): Port device team_slave_0 removed [ 73.394368][ T29] audit: type=1400 audit(1736456327.532:3083): avc: denied { mount } for pid=5280 comm="syz.7.518" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 73.416378][ T29] audit: type=1400 audit(1736456327.532:3084): avc: denied { read } for pid=5280 comm="syz.7.518" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.436950][ T29] audit: type=1400 audit(1736456327.532:3085): avc: denied { open } for pid=5280 comm="syz.7.518" path="/75/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.459061][ T29] audit: type=1326 audit(1736456327.532:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5280 comm="syz.7.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 73.482420][ T29] audit: type=1326 audit(1736456327.532:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5280 comm="syz.7.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 73.505916][ T29] audit: type=1326 audit(1736456327.532:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5280 comm="syz.7.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb4cb5d29 code=0x7ffc0000 [ 73.529247][ T29] audit: type=1400 audit(1736456327.542:3089): avc: denied { unmount } for pid=4284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 73.584776][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 73.620769][ T5295] dvmrp0: entered allmulticast mode [ 73.627376][ T29] audit: type=1326 audit(1736456327.792:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.7.520" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcb4cb5d29 code=0x0 [ 73.690864][ T5302] pimreg: entered allmulticast mode [ 73.720095][ T5302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.735412][ T5302] batadv_slave_1: entered promiscuous mode [ 73.743765][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.750895][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.758203][ T5230] bridge_slave_0: entered allmulticast mode [ 73.764678][ T5230] bridge_slave_0: entered promiscuous mode [ 73.771422][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.778704][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.785865][ T5230] bridge_slave_1: entered allmulticast mode [ 73.792436][ T5230] bridge_slave_1: entered promiscuous mode [ 73.813501][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.823742][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.859270][ T5230] team0: Port device team_slave_0 added [ 73.924669][ T5230] team0: Port device team_slave_1 added [ 74.063030][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.070052][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.092733][ T5387] loop5: detected capacity change from 0 to 128 [ 74.096064][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.113596][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.120585][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.146585][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.151893][ T5387] ext4: Unknown parameter 'subj_user' [ 74.191477][ T5380] 0ªX¹¦À: left allmulticast mode [ 74.196462][ T5380] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 74.215672][ T5389] tipc: Started in network mode [ 74.220612][ T5389] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 74.229805][ T5389] tipc: Enabled bearer , priority 10 [ 74.253377][ T5230] hsr_slave_0: entered promiscuous mode [ 74.259860][ T5230] hsr_slave_1: entered promiscuous mode [ 74.265895][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.274647][ T5230] Cannot create hsr debugfs directory [ 74.306034][ T4443] IPVS: starting estimator thread 0... [ 74.319732][ T5395] loop3: detected capacity change from 0 to 512 [ 74.333322][ T5395] EXT4-fs: Ignoring removed orlov option [ 74.340117][ T5395] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.349940][ T5380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.358469][ T5395] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.365151][ T5380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.370738][ T5395] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.526: bg 0: block 248: padding at end of block bitmap is not set [ 74.381201][ T5230] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 74.394001][ T5395] Quota error (device loop3): write_blk: dquota write failed [ 74.396601][ T5230] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 74.401501][ T5395] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.526: Failed to acquire dquot type 1 [ 74.408319][ T5396] IPVS: using max 2160 ests per chain, 108000 per kthread [ 74.421547][ T5395] EXT4-fs (loop3): 1 truncate cleaned up [ 74.429744][ T5230] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 74.439474][ T5395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.441152][ T5230] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 74.473987][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.481167][ T5230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.488556][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.495671][ T5230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.524316][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.536134][ T5360] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.545169][ T5360] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.557584][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.574686][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.584811][ T1629] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.591915][ T1629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.621491][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.628736][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.651393][ T5401] loop3: detected capacity change from 0 to 512 [ 74.693231][ T5401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.711919][ T5401] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.722523][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.735566][ T5411] dccp_close: ABORT with 40 bytes unread [ 74.747280][ T5401] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 74.764668][ T5401] SELinux: syz.3.528 (5401) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 74.799059][ T5419] netlink: 268 bytes leftover after parsing attributes in process `syz.7.531'. [ 74.806494][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.808229][ T5419] unsupported nla_type 65024 [ 74.853759][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.861277][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.868735][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.876906][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.884466][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.891987][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.899569][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.907070][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.914525][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.921949][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.929555][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.937028][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.944505][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.951962][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.020300][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.027837][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.035281][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.042769][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.050245][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.057662][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.065164][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.072647][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.078377][ T5425] loop7: detected capacity change from 0 to 128 [ 75.080189][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.092313][ T5425] binfmt_misc: register: failed to install interpreter file ./file0 [ 75.093739][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.109268][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.116690][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.124129][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.131658][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.139320][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.146724][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.163388][ T1036] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 75.169268][ T5230] veth0_vlan: entered promiscuous mode [ 75.208330][ T5230] veth1_vlan: entered promiscuous mode [ 75.215434][ T5230] veth0_macvtap: entered promiscuous mode [ 75.216705][ T5230] veth1_macvtap: entered promiscuous mode [ 75.220458][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.220490][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.220505][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.220562][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.220590][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.220603][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.221183][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.221973][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.221988][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.222048][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.222064][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.222714][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.223631][ T5230] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.223665][ T5230] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.223791][ T5230] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.223895][ T5230] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.316906][ T5453] netlink: 'syz.3.541': attribute type 1 has an invalid length. [ 75.346968][ T3376] tipc: Node number set to 4269801488 [ 75.535715][ T5463] loop8: detected capacity change from 0 to 764 [ 75.546237][ T5473] netlink: 76 bytes leftover after parsing attributes in process `syz.3.548'. [ 75.618007][ T5474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.547'. [ 75.628481][ T5479] 9pnet: p9_errstr2errno: server reported unknown error [ 75.628740][ T5474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.642266][ T5481] 9pnet: p9_errstr2errno: server reported unknown error [ 75.643107][ T5474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.658040][ T5474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.665455][ T5474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.689825][ T5483] netlink: 'syz.0.552': attribute type 1 has an invalid length. [ 75.697532][ T5483] netlink: 'syz.0.552': attribute type 2 has an invalid length. [ 75.705207][ T5483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 75.752907][ T5485] loop8: detected capacity change from 0 to 512 [ 75.757520][ T5487] loop0: detected capacity change from 0 to 512 [ 75.763283][ T5485] EXT4-fs: Ignoring removed i_version option [ 75.780276][ T5487] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.782043][ T5485] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 75.801669][ T5485] EXT4-fs (loop8): 1 truncate cleaned up [ 75.811519][ T5485] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.825325][ T5487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.839327][ T5487] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.904688][ T5496] netlink: 16 bytes leftover after parsing attributes in process `syz.8.553'. [ 75.928121][ T5493] netlink: 16 bytes leftover after parsing attributes in process `syz.8.553'. [ 75.962563][ T5503] bpf_get_probe_write_proto: 4 callbacks suppressed [ 75.962628][ T5503] syz.3.559[5503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.971928][ T5485] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.974853][ T5503] syz.3.559[5503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.992579][ T5503] syz.3.559[5503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.169369][ T5528] loop0: detected capacity change from 0 to 2048 [ 76.198315][ T5531] loop8: detected capacity change from 0 to 512 [ 76.204968][ T5531] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.216712][ T5531] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 76.236517][ T5531] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.570: corrupted in-inode xattr: e_value out of bounds [ 76.251299][ T5537] FAULT_INJECTION: forcing a failure. [ 76.251299][ T5537] name failslab, interval 1, probability 0, space 0, times 0 [ 76.259258][ T5539] loop3: detected capacity change from 0 to 1024 [ 76.264033][ T5537] CPU: 1 UID: 0 PID: 5537 Comm: syz.5.565 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 76.271401][ T5531] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.570: couldn't read orphan inode 15 (err -117) [ 76.280803][ T5537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.280821][ T5537] Call Trace: [ 76.280829][ T5537] [ 76.280838][ T5537] dump_stack_lvl+0xf2/0x150 [ 76.293256][ T5531] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.302591][ T5537] dump_stack+0x15/0x1a [ 76.308285][ T5528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.308844][ T5537] should_fail_ex+0x223/0x230 [ 76.346416][ T5537] should_failslab+0x8f/0xb0 [ 76.351039][ T5537] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 76.356790][ T5537] ? shmem_alloc_inode+0x34/0x50 [ 76.361748][ T5537] shmem_alloc_inode+0x34/0x50 [ 76.366544][ T5537] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 76.372155][ T5537] alloc_inode+0x3c/0x160 [ 76.376495][ T5537] new_inode+0x1e/0x100 [ 76.380733][ T5537] shmem_get_inode+0x24e/0x730 [ 76.385517][ T5537] __shmem_file_setup+0x127/0x1f0 [ 76.390603][ T5537] shmem_file_setup+0x3b/0x50 [ 76.395290][ T5537] __se_sys_memfd_create+0x31d/0x5c0 [ 76.400661][ T5537] __x64_sys_memfd_create+0x31/0x40 [ 76.405876][ T5537] x64_sys_call+0x2d4c/0x2dc0 [ 76.410622][ T5537] do_syscall_64+0xc9/0x1c0 [ 76.415135][ T5537] ? clear_bhb_loop+0x55/0xb0 [ 76.419823][ T5537] ? clear_bhb_loop+0x55/0xb0 [ 76.424571][ T5537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.430491][ T5537] RIP: 0033:0x7f8ca38b5d29 [ 76.434911][ T5537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.454582][ T5537] RSP: 002b:00007f8ca1ecdd68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 76.463032][ T5537] RAX: ffffffffffffffda RBX: 00000000000005f8 RCX: 00007f8ca38b5d29 [ 76.471013][ T5537] RDX: 00007f8ca1ecddec RSI: 0000000000000000 RDI: 00007f8ca3932469 [ 76.478999][ T5537] RBP: 0000000020000bc0 R08: 00007f8ca1ecdb07 R09: 0000000000000000 [ 76.487040][ T5537] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 76.495017][ T5537] R13: 00007f8ca1ecddec R14: 00007f8ca1ecddf0 R15: 00007ffcc1d90d18 [ 76.503006][ T5537] [ 76.528453][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.539148][ T5539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.606360][ T5550] loop7: detected capacity change from 0 to 1024 [ 76.618046][ T5230] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.669816][ T5550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.672465][ T5553] loop8: detected capacity change from 0 to 512 [ 76.690150][ T5550] FAULT_INJECTION: forcing a failure. [ 76.690150][ T5550] name failslab, interval 1, probability 0, space 0, times 0 [ 76.702838][ T5550] CPU: 0 UID: 0 PID: 5550 Comm: syz.7.575 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 76.710157][ T5553] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.713445][ T5550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.732537][ T5550] Call Trace: [ 76.735821][ T5550] [ 76.738774][ T5550] dump_stack_lvl+0xf2/0x150 [ 76.739917][ T5553] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.743393][ T5550] dump_stack+0x15/0x1a [ 76.743455][ T5550] should_fail_ex+0x223/0x230 [ 76.760428][ T5553] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.764701][ T5550] ? do_inotify_init+0x94/0x270 [ 76.778592][ T5550] should_failslab+0x8f/0xb0 [ 76.783201][ T5550] __kmalloc_cache_noprof+0x4e/0x320 [ 76.788496][ T5550] ? __mutex_init+0x4c/0x60 [ 76.793165][ T5550] do_inotify_init+0x94/0x270 [ 76.797852][ T5550] __do_sys_inotify_init+0x10/0x20 [ 76.802992][ T5550] x64_sys_call+0x2c2a/0x2dc0 [ 76.807721][ T5550] do_syscall_64+0xc9/0x1c0 [ 76.812240][ T5550] ? clear_bhb_loop+0x55/0xb0 [ 76.816944][ T5550] ? clear_bhb_loop+0x55/0xb0 [ 76.821706][ T5550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.827710][ T5550] RIP: 0033:0x7fdcb4cb5d29 [ 76.832201][ T5550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.851830][ T5550] RSP: 002b:00007fdcb3327038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 76.860246][ T5550] RAX: ffffffffffffffda RBX: 00007fdcb4ea5fa0 RCX: 00007fdcb4cb5d29 [ 76.868219][ T5550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.876193][ T5550] RBP: 00007fdcb3327090 R08: 0000000000000000 R09: 0000000000000000 [ 76.884186][ T5550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.892160][ T5550] R13: 0000000000000000 R14: 00007fdcb4ea5fa0 R15: 00007fff97f53858 [ 76.900166][ T5550] [ 76.939274][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.960984][ T5558] loop0: detected capacity change from 0 to 512 [ 77.058206][ T5558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.070809][ T5558] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.089765][ T5558] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 77.089765][ T5558] program syz.0.572 not setting count and/or reply_len properly [ 77.107910][ T5558] sch_tbf: peakrate 4294967295 is lower than or equals to rate 4393538363069990702 ! [ 77.141555][ T4284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.188869][ T5562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.577'. [ 77.197717][ T5562] netlink: 36 bytes leftover after parsing attributes in process `syz.5.577'. [ 77.479852][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.527696][ T5575] loop5: detected capacity change from 0 to 2048 [ 77.537128][ T5575] ext4: Unknown parameter 'uid>00000000000000000000' [ 77.566016][ T5580] 9pnet: p9_errstr2errno: server reported unknown error [ 77.576191][ T5572] 9pnet: p9_errstr2errno: server reported unknown error [ 77.582874][ T5577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 77.602574][ T5577] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 77.664288][ T5582] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 77.719695][ T5585] loop3: detected capacity change from 0 to 164 [ 77.744865][ T5585] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 77.910165][ T5595] netlink: 64 bytes leftover after parsing attributes in process `syz.5.583'. [ 78.045451][ T5608] loop8: detected capacity change from 0 to 512 [ 78.068816][ T5608] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.118800][ T5608] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.138517][ T5608] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.164792][ T5613] loop3: detected capacity change from 0 to 1024 [ 78.265371][ T5628] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 78.280147][ T5628] pim6reg: entered allmulticast mode [ 78.286118][ T5628] pim6reg: left allmulticast mode [ 78.319975][ T5629] xt_CT: No such helper "syz0" [ 78.575660][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 78.575678][ T29] audit: type=1400 audit(1736456332.732:3502): avc: denied { connect } for pid=5625 comm="syz.8.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.620813][ T29] audit: type=1400 audit(1736456332.782:3503): avc: denied { bind } for pid=5652 comm="syz.3.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.681063][ T5664] loop3: detected capacity change from 0 to 1024 [ 78.688562][ T5664] EXT4-fs: Ignoring removed i_version option [ 78.705789][ T5664] EXT4-fs (loop3): orphan cleanup on readonly fs [ 78.713288][ T5664] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 78.722395][ T5664] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 78.731899][ T5664] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.613: Failed to acquire dquot type 0 [ 78.743506][ T5664] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 78.758132][ T5664] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.613: corrupted inode contents [ 78.776660][ T5664] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #13: comm syz.3.613: mark_inode_dirty error [ 78.789310][ T5664] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.613: corrupted inode contents [ 78.802269][ T5664] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.613: mark_inode_dirty error [ 78.814453][ T5664] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.613: corrupted inode contents [ 78.830533][ T5664] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 78.839488][ T5664] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.613: corrupted inode contents [ 78.851582][ T5664] EXT4-fs error (device loop3): ext4_truncate:4240: inode #13: comm syz.3.613: mark_inode_dirty error [ 78.862797][ T5664] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 78.872982][ T5664] EXT4-fs (loop3): 1 truncate cleaned up [ 78.879131][ T5664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.895533][ T5664] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 78.905391][ T5664] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 78.933518][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.979043][ T29] audit: type=1326 audit(1736456333.142:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5678 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1098d5d29 code=0x7ffc0000 [ 79.002670][ T29] audit: type=1326 audit(1736456333.142:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5678 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1098d5d29 code=0x7ffc0000 [ 79.026060][ T29] audit: type=1326 audit(1736456333.142:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5678 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe1098d5d29 code=0x7ffc0000 [ 79.049247][ T29] audit: type=1326 audit(1736456333.142:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5678 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1098d5d29 code=0x7ffc0000 [ 79.072659][ T29] audit: type=1326 audit(1736456333.142:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5678 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fe1098d5d29 code=0x7ffc0000 [ 79.096217][ T29] audit: type=1326 audit(1736456333.142:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5678 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1098d5d29 code=0x7ffc0000 [ 79.265203][ T5686] loop8: detected capacity change from 0 to 1024 [ 79.276592][ T5686] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 79.289201][ T5690] loop3: detected capacity change from 0 to 512 [ 79.299141][ T5686] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.314728][ T5686] lo speed is unknown, defaulting to 1000 [ 79.320814][ T5686] lo speed is unknown, defaulting to 1000 [ 79.323491][ T5690] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.622: bg 0: block 248: padding at end of block bitmap is not set [ 79.327981][ T5686] lo speed is unknown, defaulting to 1000 [ 79.343607][ T5690] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.622: Failed to acquire dquot type 1 [ 79.348614][ T5686] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 79.358432][ T5690] EXT4-fs (loop3): 1 truncate cleaned up [ 79.372054][ T5686] lo speed is unknown, defaulting to 1000 [ 79.372078][ T5690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.378627][ T5686] lo speed is unknown, defaulting to 1000 [ 79.391710][ T5690] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.396796][ T5686] lo speed is unknown, defaulting to 1000 [ 79.416789][ T5686] lo speed is unknown, defaulting to 1000 [ 79.429279][ T5686] lo speed is unknown, defaulting to 1000 [ 79.432401][ T5696] loop7: detected capacity change from 0 to 512 [ 79.460515][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.480539][ T5230] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.528937][ T5705] loop7: detected capacity change from 0 to 512 [ 79.566525][ T5705] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.627: corrupted in-inode xattr: invalid ea_ino [ 79.581249][ T5709] FAULT_INJECTION: forcing a failure. [ 79.581249][ T5709] name failslab, interval 1, probability 0, space 0, times 0 [ 79.582325][ T5705] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.627: couldn't read orphan inode 15 (err -117) [ 79.593934][ T5709] CPU: 1 UID: 0 PID: 5709 Comm: syz.3.628 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 79.607109][ T5705] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.616187][ T5709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.616205][ T5709] Call Trace: [ 79.616214][ T5709] [ 79.633858][ T5705] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.7.627: path /100/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 79.638647][ T5709] dump_stack_lvl+0xf2/0x150 [ 79.638706][ T5709] dump_stack+0x15/0x1a [ 79.638737][ T5709] should_fail_ex+0x223/0x230 [ 79.679732][ T5709] should_failslab+0x8f/0xb0 [ 79.684352][ T5709] __kmalloc_noprof+0xab/0x3f0 [ 79.689132][ T5709] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 79.695404][ T5709] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 79.701521][ T5709] ? ns_capable+0x7d/0xb0 [ 79.705877][ T5709] genl_rcv_msg+0x470/0x6c0 [ 79.710467][ T5709] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 79.715962][ T5709] ? __pfx_nl802154_set_backoff_exponent+0x10/0x10 [ 79.722483][ T5709] ? __pfx_nl802154_post_doit+0x10/0x10 [ 79.728088][ T5709] ? should_fail_ex+0x31/0x230 [ 79.732941][ T5709] ? __rcu_read_unlock+0x4e/0x70 [ 79.737979][ T5709] ? avc_has_perm_noaudit+0x1cc/0x210 [ 79.743378][ T5709] netlink_rcv_skb+0x12c/0x230 [ 79.748156][ T5709] ? __pfx_genl_rcv_msg+0x10/0x10 [ 79.753214][ T5709] genl_rcv+0x28/0x40 [ 79.757228][ T5709] netlink_unicast+0x599/0x670 [ 79.762091][ T5709] netlink_sendmsg+0x5cc/0x6e0 [ 79.766980][ T5709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.772304][ T5709] __sock_sendmsg+0x140/0x180 [ 79.777097][ T5709] ____sys_sendmsg+0x312/0x410 [ 79.781942][ T5709] __sys_sendmsg+0x19d/0x230 [ 79.786694][ T5709] __x64_sys_sendmsg+0x46/0x50 [ 79.791483][ T5709] x64_sys_call+0x2734/0x2dc0 [ 79.796176][ T5709] do_syscall_64+0xc9/0x1c0 [ 79.800735][ T5709] ? clear_bhb_loop+0x55/0xb0 [ 79.805426][ T5709] ? clear_bhb_loop+0x55/0xb0 [ 79.810177][ T5709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.816141][ T5709] RIP: 0033:0x7fe1098d5d29 [ 79.820563][ T5709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.840224][ T5709] RSP: 002b:00007fe107f47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.848651][ T5709] RAX: ffffffffffffffda RBX: 00007fe109ac5fa0 RCX: 00007fe1098d5d29 [ 79.856635][ T5709] RDX: 0000000000000000 RSI: 00000000200042c0 RDI: 0000000000000004 [ 79.864613][ T5709] RBP: 00007fe107f47090 R08: 0000000000000000 R09: 0000000000000000 [ 79.872596][ T5709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.880854][ T5709] R13: 0000000000000000 R14: 00007fe109ac5fa0 R15: 00007ffd11138e58 [ 79.888842][ T5709] [ 79.896801][ T5715] syz.7.627[5715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.896863][ T5715] syz.7.627[5715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.908422][ T5715] syz.7.627[5715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.947486][ T5715] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.7.627: path /100/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 80.007162][ T5715] syz.7.627[5715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.007297][ T5715] syz.7.627[5715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.007504][ T5715] syz.7.627[5715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.028003][ T5723] syz.3.630[5723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.092502][ T5729] __nla_validate_parse: 70 callbacks suppressed [ 80.092572][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.635'. [ 80.092682][ T5730] netlink: 348 bytes leftover after parsing attributes in process `syz.0.634'. [ 80.134538][ T5730] ucma_write: process 332 (syz.0.634) changed security contexts after opening file descriptor, this is not allowed. [ 80.156295][ T5732] loop3: detected capacity change from 0 to 512 [ 80.202054][ T5732] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.203351][ T5739] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 80.245479][ T5744] loop0: detected capacity change from 0 to 128 [ 80.252819][ T5744] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.269717][ T5732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.293706][ T5732] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.322882][ T5749] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 80.323578][ T5750] loop5: detected capacity change from 0 to 1024 [ 80.338730][ T5750] EXT4-fs: Ignoring removed orlov option [ 80.366579][ T5750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.403393][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 80.431686][ T5758] 9pnet: p9_errstr2errno: server reported unknown error [ 80.447932][ T5759] EXT4-fs (loop5): shut down requested (0) [ 80.470610][ T3657] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.495397][ T4284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.499913][ T5761] loop5: detected capacity change from 0 to 512 [ 80.528469][ T5761] EXT4-fs: Ignoring removed orlov option [ 80.537078][ T5761] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.545606][ T5761] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 80.612691][ T5772] loop7: detected capacity change from 0 to 1024 [ 80.619805][ T5771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.649'. [ 80.624498][ T5772] EXT4-fs: Ignoring removed orlov option [ 80.651609][ T5776] loop5: detected capacity change from 0 to 128 [ 80.662419][ T5776] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.678800][ T5776] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.683929][ T5772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.699840][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.650'. [ 80.718424][ T5781] xt_hashlimit: max too large, truncated to 1048576 [ 80.725958][ T5781] Cannot find set identified by id 0 to match [ 80.772978][ T5772] EXT4-fs (loop7): shut down requested (0) [ 80.799448][ T5783] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.823093][ T4284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.862175][ T5783] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.865836][ T5788] loop7: detected capacity change from 0 to 512 [ 80.891580][ T5788] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.922983][ T5783] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.933728][ T5788] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.962700][ T5795] netlink: 132 bytes leftover after parsing attributes in process `syz.8.656'. [ 80.973680][ T5788] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.984857][ T5795] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5795 comm=syz.8.656 [ 81.019326][ T5783] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.088811][ T5802] 9pnet: p9_errstr2errno: server reported unknown error [ 81.107644][ T5783] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.127106][ T5783] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.156507][ T5783] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.169030][ T5783] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.181809][ T5816] bpf_get_probe_write_proto: 5 callbacks suppressed [ 81.181824][ T5816] syz.8.662[5816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.189955][ T5816] syz.8.662[5816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.201607][ T5816] syz.8.662[5816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.224733][ T5819] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.273184][ T5824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.665'. [ 81.452409][ T5837] loop5: detected capacity change from 0 to 512 [ 81.479262][ T5837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.492106][ T5837] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.521956][ T3657] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.552437][ T5843] loop5: detected capacity change from 0 to 512 [ 81.568081][ T5843] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.589547][ T5843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.603206][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.673847][ T5854] netlink: 176 bytes leftover after parsing attributes in process `syz.8.673'. [ 81.704874][ T5852] lo speed is unknown, defaulting to 1000 [ 81.714169][ T5852] lo speed is unknown, defaulting to 1000 [ 81.740182][ T9] IPVS: starting estimator thread 0... [ 81.786239][ T5864] syz.0.676[5864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.786318][ T5864] syz.0.676[5864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.800969][ T5864] syz.0.676[5864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.827148][ T5862] IPVS: using max 2016 ests per chain, 100800 per kthread [ 81.970706][ T5880] xt_hashlimit: max too large, truncated to 1048576 [ 81.978512][ T5880] Cannot find set identified by id 0 to match [ 82.031380][ T5885] loop7: detected capacity change from 0 to 512 [ 82.041191][ T5885] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.083297][ T5885] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.133638][ T5894] 9pnet: p9_errstr2errno: server reported unknown error [ 82.141997][ T5885] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.158131][ T5896] 9pnet: p9_errstr2errno: server reported unknown error [ 82.169026][ T5891] vxcan3: entered promiscuous mode [ 82.194173][ T5891] xt_CT: No such helper "syz0" [ 82.203428][ T5891] netlink: 24 bytes leftover after parsing attributes in process `syz.5.685'. [ 82.251758][ T5901] FAULT_INJECTION: forcing a failure. [ 82.251758][ T5901] name failslab, interval 1, probability 0, space 0, times 0 [ 82.257063][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 82.264486][ T5901] CPU: 0 UID: 0 PID: 5901 Comm: syz.8.689 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 82.283828][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.293900][ T5901] Call Trace: [ 82.297261][ T5901] [ 82.300211][ T5901] dump_stack_lvl+0xf2/0x150 [ 82.300787][ T5905] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 82.304890][ T5901] dump_stack+0x15/0x1a [ 82.317320][ T5901] should_fail_ex+0x223/0x230 [ 82.322050][ T5901] ? alloc_bprm+0x62/0x5d0 [ 82.326569][ T5901] should_failslab+0x8f/0xb0 [ 82.331200][ T5901] __kmalloc_cache_noprof+0x4e/0x320 [ 82.336653][ T5901] alloc_bprm+0x62/0x5d0 [ 82.341036][ T5901] do_execveat_common+0x134/0x800 [ 82.346534][ T5901] __x64_sys_execve+0x5a/0x70 [ 82.351310][ T5901] x64_sys_call+0x1333/0x2dc0 [ 82.356152][ T5901] do_syscall_64+0xc9/0x1c0 [ 82.360745][ T5901] ? clear_bhb_loop+0x55/0xb0 [ 82.365433][ T5901] ? clear_bhb_loop+0x55/0xb0 [ 82.370123][ T5901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.376111][ T5901] RIP: 0033:0x7f35c2605d29 [ 82.380615][ T5901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.400235][ T5901] RSP: 002b:00007f35c0c77038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 82.408715][ T5901] RAX: ffffffffffffffda RBX: 00007f35c27f5fa0 RCX: 00007f35c2605d29 [ 82.416733][ T5901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 82.424751][ T5901] RBP: 00007f35c0c77090 R08: 0000000000000000 R09: 0000000000000000 [ 82.432826][ T5901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.440827][ T5901] R13: 0000000000000000 R14: 00007f35c27f5fa0 R15: 00007ffe8dc2e018 [ 82.448813][ T5901] [ 82.548227][ T5917] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 82.566593][ T5917] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 82.584377][ T5924] loop5: detected capacity change from 0 to 512 [ 82.594693][ T5924] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.621559][ T5924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.682390][ T5929] xt_CT: No such helper "syz0" [ 82.840340][ T5950] netlink: 'syz.3.709': attribute type 21 has an invalid length. [ 83.273542][ T5981] FAULT_INJECTION: forcing a failure. [ 83.273542][ T5981] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 83.286888][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: syz.3.720 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 83.297541][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.307614][ T5981] Call Trace: [ 83.310913][ T5981] [ 83.313868][ T5981] dump_stack_lvl+0xf2/0x150 [ 83.318553][ T5981] dump_stack+0x15/0x1a [ 83.322744][ T5981] should_fail_ex+0x223/0x230 [ 83.327447][ T5981] should_fail_alloc_page+0xfd/0x110 [ 83.332809][ T5981] __alloc_pages_noprof+0x109/0x340 [ 83.338136][ T5981] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 83.343538][ T5981] folio_alloc_mpol_noprof+0x36/0x70 [ 83.348840][ T5981] shmem_get_folio_gfp+0x3d1/0xd90 [ 83.354000][ T5981] shmem_write_begin+0xa2/0x180 [ 83.358879][ T5981] generic_perform_write+0x1a8/0x4a0 [ 83.364226][ T5981] shmem_file_write_iter+0xc2/0xe0 [ 83.369449][ T5981] vfs_write+0x77f/0x920 [ 83.373751][ T5981] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 83.379597][ T5981] ksys_write+0xe8/0x1b0 [ 83.383878][ T5981] __x64_sys_write+0x42/0x50 [ 83.388560][ T5981] x64_sys_call+0x287e/0x2dc0 [ 83.393349][ T5981] do_syscall_64+0xc9/0x1c0 [ 83.397873][ T5981] ? clear_bhb_loop+0x55/0xb0 [ 83.402634][ T5981] ? clear_bhb_loop+0x55/0xb0 [ 83.407433][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.413428][ T5981] RIP: 0033:0x7fe1098d47df [ 83.417888][ T5981] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 83.437564][ T5981] RSP: 002b:00007fe107f46df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 83.446051][ T5981] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fe1098d47df [ 83.454042][ T5981] RDX: 0000000000040000 RSI: 00007fe0ffb27000 RDI: 0000000000000004 [ 83.462111][ T5981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000437 [ 83.470162][ T5981] R10: 0000000020000902 R11: 0000000000000293 R12: 0000000000000004 [ 83.478147][ T5981] R13: 00007fe107f46ef0 R14: 00007fe107f46eb0 R15: 00007fe0ffb27000 [ 83.486200][ T5981] [ 83.557131][ C0] ================================================================== [ 83.565268][ C0] BUG: KCSAN: data-race in can_send / can_stat_update [ 83.572061][ C0] [ 83.574400][ C0] read to 0xffff88811af9a8f0 of 8 bytes by interrupt on cpu 1: [ 83.581963][ C0] can_stat_update+0x48f/0x6b0 [ 83.586732][ C0] call_timer_fn+0x3a/0x300 [ 83.591248][ C0] __run_timer_base+0x417/0x640 [ 83.596106][ C0] run_timer_softirq+0x31/0x70 [ 83.600878][ C0] handle_softirqs+0xbf/0x280 [ 83.605659][ C0] __irq_exit_rcu+0x3a/0xc0 [ 83.610179][ C0] common_interrupt+0x81/0x90 [ 83.614868][ C0] asm_common_interrupt+0x26/0x40 [ 83.619906][ C0] _raw_spin_unlock_irqrestore+0x3d/0x60 [ 83.625550][ C0] hrtimer_start_range_ns+0x53d/0x580 [ 83.630937][ C0] do_nanosleep+0x86/0x300 [ 83.635362][ C0] hrtimer_nanosleep+0xc4/0x1c0 [ 83.640227][ C0] common_nsleep+0x68/0x90 [ 83.644655][ C0] __se_sys_clock_nanosleep+0x20a/0x240 [ 83.650212][ C0] __x64_sys_clock_nanosleep+0x55/0x70 [ 83.655690][ C0] x64_sys_call+0x25b8/0x2dc0 [ 83.660380][ C0] do_syscall_64+0xc9/0x1c0 [ 83.664888][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.670806][ C0] [ 83.673127][ C0] read-write to 0xffff88811af9a8f0 of 8 bytes by interrupt on cpu 0: [ 83.681195][ C0] can_send+0x5b6/0x6d0 [ 83.685369][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 83.690057][ C0] can_rcv_filter+0x225/0x4c0 [ 83.694750][ C0] can_receive+0x182/0x1f0 [ 83.699181][ C0] can_rcv+0xe7/0x180 [ 83.703179][ C0] __netif_receive_skb+0x123/0x280 [ 83.708301][ C0] process_backlog+0x22e/0x440 [ 83.713085][ C0] __napi_poll+0x63/0x3c0 [ 83.717425][ C0] net_rx_action+0x3a1/0x7f0 [ 83.722025][ C0] handle_softirqs+0xbf/0x280 [ 83.726717][ C0] run_ksoftirqd+0x1c/0x30 [ 83.731136][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 83.736088][ C0] kthread+0x1d1/0x210 [ 83.740160][ C0] ret_from_fork+0x4b/0x60 [ 83.744578][ C0] ret_from_fork_asm+0x1a/0x30 [ 83.749353][ C0] [ 83.751680][ C0] value changed: 0x000000000000e08d -> 0x0000000000000000 [ 83.758786][ C0] [ 83.761111][ C0] Reported by Kernel Concurrency Sanitizer on: [ 83.767257][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 83.777849][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.787908][ C0] ==================================================================