last executing test programs: 15m24.607698009s ago: executing program 32 (id=6158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x800004, &(0x7f0000002080), 0x1, 0x586, &(0x7f0000000f80)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 15m17.902704154s ago: executing program 33 (id=6278): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) 15m8.305903078s ago: executing program 34 (id=6395): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r1, r2, 0x0) syz_io_uring_setup(0x207, &(0x7f0000000340)={0x0, 0x0, 0x10100}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x25, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1007, 0x6, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14m58.035120418s ago: executing program 35 (id=6513): creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000031c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 14m51.700302834s ago: executing program 36 (id=6593): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) chdir(&(0x7f0000000140)='./file0\x00') 14m41.711787607s ago: executing program 37 (id=6794): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xf, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 14m40.618521353s ago: executing program 38 (id=6812): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62c46, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={0x0, 0x8}, 0x104001, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x8000600) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000044d900000000000000000a20000000000a03000000000060000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2c001280140001800c000100636f756e7465720004000280140000800900019a6c617374000000000400028008000340000001", @ANYRES32], 0xb8}, 0x1, 0x0, 0x0, 0x81}, 0x54800) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {&(0x7f0000000280), r6, 0xef2}}, 0x18) 14m37.392042351s ago: executing program 39 (id=6856): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_pts(r0, 0x0) 14m36.580218298s ago: executing program 40 (id=6873): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, &(0x7f0000000000)=0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x43, 0x7800, 0x7, 0x7, {{0xa, 0x4, 0x3, 0x1, 0x28, 0x68, 0x0, 0xf, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@rr={0x7, 0x13, 0x4f, [@empty, @broadcast, @broadcast, @private=0xa010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gre0\x00', r4, 0x1, 0x20, 0x3, 0x10001, {{0xa, 0x4, 0x1, 0x1, 0x28, 0x68, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @multicast1, {[@rr={0x7, 0xb, 0x7c, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x7, 0x74, [@remote]}, @end]}}}}}) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[@ANYRESHEX=r3, @ANYRES32=r5, @ANYBLOB="83450500000000002c0012020900010069706970000000001c00028006000f0002000000060011004e210000080002007f"], 0x4c}, 0x1, 0x0, 0x0, 0x18000015}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000440)=ANY=[], 0x8, 0x307, &(0x7f0000000a00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xb, &(0x7f0000000300), 0x0) timer_create(0xfffffffd, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000f8ff00"], &(0x7f00000001c0)=""/188, 0x26, 0xbc, 0x1, 0x0, 0x0, @void, @value}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setlease(r9, 0x400, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) 13m44.573545491s ago: executing program 41 (id=8230): syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9b, &(0x7f0000000000)=ANY=[@ANYBLOB="9b03abe98397850d9289638d7120310994176d76ee8005e3bf5de76d569d98cc3ce7d4419c84da5f7e420900d136a14f65099da81db6c35a3e0c7fb9fe03b0fa265df2be125facefe74e0e21bb6a1889f400fb206292c4d96927f019fba2ad2987739c5e0d5935"]}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0xda2, 0x7, 0x4, 0xfffffffc, 0x7}, [@TCA_NETEM_LOSS={0x18, 0xd, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xe055, 0x9, 0x89}}]}]}}}]}, 0x64}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x8, 0x1006, &(0x7f0000003300)=""/4102, 0x41100, 0x24, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x65d, @void, @value}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r9, &(0x7f0000000300)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r11, &(0x7f00000002c0)="14419e5465f0006fc8afa8e40800", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1d0, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d0}}, 0x20000000) flock(r4, 0x5) r13 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r13, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r14 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) sendfile(r14, r14, 0x0, 0x8) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) 13m43.765285168s ago: executing program 42 (id=8245): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB], 0x1c}}, 0x0) 13m28.56223425s ago: executing program 43 (id=8543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000100070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000001"], 0xf8}}, 0x0) 13m26.723458893s ago: executing program 44 (id=8582): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f00000003c0), &(0x7f00000004c0)=r1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 13m23.420844541s ago: executing program 45 (id=8641): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) 13m22.674303978s ago: executing program 46 (id=8648): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') writev(r3, &(0x7f0000000140)=[{&(0x7f0000001080)='9', 0x1}, {&(0x7f0000000100)="2683", 0x2}], 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0xe, 0xffffffff, 0x1, 0x1, 0x20000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0xfffffebe, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 13m22.231479226s ago: executing program 47 (id=8660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 13m22.201988066s ago: executing program 0 (id=8662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000020000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioperm(0x0, 0x4, 0x2) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x0) clock_nanosleep(0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x103f, 0x0, 0x0) 13m22.183051976s ago: executing program 0 (id=8663): r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000500)=@keyring) 13m22.124075266s ago: executing program 0 (id=8664): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x9, @loopback, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x4, 0x5, 0x80000000}, &(0x7f0000000080)=0x10) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000002c0)={{r1}, "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"}) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) fcntl$getownex(r2, 0x10, &(0x7f0000001340)) 13m22.112416366s ago: executing program 0 (id=8665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 13m22.061398716s ago: executing program 0 (id=8666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) (fail_nth: 1) 13m21.838725525s ago: executing program 0 (id=8668): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r4, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) r8 = open(&(0x7f0000000340)='./file0\x00', 0x2a4201, 0xa4) r9 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$setperm(0x5, r9, 0x20008) keyctl$read(0xb, r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000012c0)={'macvtap0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={r1, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000001340)=[0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f00000013c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001400), &(0x7f0000001440), 0x8, 0x90, 0x8, 0x8, &(0x7f0000001480)}}, 0x10) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f0000000000)={@empty, 0x1, r15}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f00000017c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001780)={&(0x7f00000016c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r10, @ANYBLOB="0800ff0f0000fcdbdf25040000000c00018008000300060000002800018008000100", @ANYRES32=r11, @ANYBLOB="08000300010000001400020076657468305f746f5f6261746164760028000180080003000200000008000300010000001400020073797a6b616c6c6572310000000000000c00018008000100", @ANYRES32=r12, @ANYBLOB="34000182140002007465616d30000000000000000000000008000100", @ANYRES32=r15, @ANYBLOB="140002006d616376746170300000000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x808}, 0x40000) r16 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r4, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) r8 = open(&(0x7f0000000340)='./file0\x00', 0x2a4201, 0xa4) r9 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$setperm(0x5, r9, 0x20008) keyctl$read(0xb, r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000012c0)={'macvtap0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={r1, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000001340)=[0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f00000013c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001400), &(0x7f0000001440), 0x8, 0x90, 0x8, 0x8, &(0x7f0000001480)}}, 0x10) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f0000000000)={@empty, 0x1, r15}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f00000017c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001780)={&(0x7f00000016c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r10, @ANYBLOB="0800ff0f0000fcdbdf25040000000c00018008000300060000002800018008000100", @ANYRES32=r11, @ANYBLOB="08000300010000001400020076657468305f746f5f6261746164760028000180080003000200000008000300010000001400020073797a6b616c6c6572310000000000000c00018008000100", @ANYRES32=r12, @ANYBLOB="34000182140002007465616d30000000000000000000000008000100", @ANYRES32=r15, @ANYBLOB="140002006d616376746170300000000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x808}, 0x40000) r16 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) write$binfmt_elf32(r5, 0x0, 0xd8) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x0, 0x6, 0x9, 0x0, 0x7, 0x7d497, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x0, 0xc}, 0x0, 0x9, 0x4, 0x0, 0x40000000002, 0x2, 0x6, 0x0, 0x5, 0x0, 0xed}, 0x0, 0xffffffffffffffff, r4, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000210000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 13m21.478369203s ago: executing program 2 (id=8671): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000340)=0x4, 0x12) 13m21.390310963s ago: executing program 2 (id=8672): r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000500)=@keyring) 13m21.390003383s ago: executing program 2 (id=8673): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 13m21.386729733s ago: executing program 2 (id=8674): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4083, 0xff3, 0x10120, 0x0, 0x0) 13m21.255992452s ago: executing program 2 (id=8675): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='system_u:object_r:updpwd_exec_t '], 0x56) 13m21.255724573s ago: executing program 49 (id=8675): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='system_u:object_r:updpwd_exec_t '], 0x56) 7m5.809021303s ago: executing program 7 (id=15983): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001b1401"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioperm(0xa516, 0x1, 0x4) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000700)=0x7ffc0000) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) fcntl$addseals(r2, 0x409, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={0x0, 0x18, 0x4000}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) read(r0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14}}, 0x5c}}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, r7, 0x2fc7b000) 7m5.750753812s ago: executing program 7 (id=15984): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="3f00000000040000070000000200000000220000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="04000000010000000300"/28], 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x48, 0x0, 0x1, 0x70ad2b, 0x25dfdc00, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, 0x48}}, 0x2040094) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r1, r1, 0x0, 0xfffe80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', r0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r9, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) 7m4.933123619s ago: executing program 7 (id=16005): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64) 7m4.861359749s ago: executing program 7 (id=16006): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) r5 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000580)='./file1\x00', 0x40c0, &(0x7f0000002480)=ANY=[], 0x3, 0x11f4, &(0x7f0000001280)="$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") r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x400, 0x8, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8db48224ad54afa051d875397bdb22d0000b420a100005240f45f819e00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000980)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x80) mount_setattr(r5, &(0x7f0000000280)='./file1\x00', 0x100, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x3, 0x0, 0x1e, 0x28, "561bfcadb322e7a648b826f003c1851a9c242527cb3d254dada276366a87ccc588949546a12cc5809eccd37a8564cabfda4c147b3a45b8e943bced07fd3fffbf", "2b416beaef043ee1e602417940bd7c3771390871faaa7103228109660205a039", [0x3, 0x7]}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x40}}, 0xc814) 7m4.362413497s ago: executing program 7 (id=16012): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r0, 0x1) 7m4.181088626s ago: executing program 7 (id=16014): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000080000001c4b144f0a00850000000800007100"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]}) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x20) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000400)) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan1\x00', 0x0}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1348, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000900)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0x1b, &(0x7f0000001d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd8a, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0xa, 0x2, 0x6, 0xfffffffffffffffc, 0x10}, @generic={0x7, 0x0, 0x8, 0x9, 0x100}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6b}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x8, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x2, 0x5, 0x3, 0xe9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000940)=[r0, r0, r5, r0, r6, r0, r0, r0, r0, r0], &(0x7f0000000980)=[{0x3, 0x4, 0x0, 0x4}, {0x3, 0x5, 0xe, 0x1}, {0x4, 0x0, 0x400000f, 0x8}, {0x0, 0x1, 0x2, 0x7}, {0x2, 0xfffffffe, 0x3, 0xa}], 0x10, 0x65, @void, @value}, 0x94) r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r3, {0x1b}}, './file0\x00'}) ioctl$PPPIOCSACTIVE(r9, 0x40107446, &(0x7f0000001d00)={0xa, &(0x7f0000001c80)=[{0xf, 0x7f, 0x5, 0x1}, {0x3, 0x0, 0xfe, 0x80000000}, {0xfffe, 0xb, 0x1, 0x8}, {0xd, 0x3, 0x5, 0xfffffff7}, {0x7299, 0x85, 0x8, 0x2}, {0x3, 0x3, 0x7b, 0xfffffffd}, {0x2, 0x0, 0xff, 0x5}, {0xc, 0x5, 0x2, 0xfffffffc}, {0x548, 0x80, 0x6, 0x4}, {0x5, 0x2, 0x6, 0x2f41}]}) close(r8) socket(0x1d, 0x2, 0x6) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) r12 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) execveat(r12, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000040)='\x00', &(0x7f0000000080)='kmem_cache_free\x00', &(0x7f0000000180)='^)\x00', &(0x7f00000001c0)='*\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='GPL\x00', &(0x7f00000002c0)='TIPC\x00', &(0x7f0000000300)='kmem_cache_free\x00']}, &(0x7f00000006c0)={[&(0x7f0000000400)='\x00', &(0x7f0000000540)=']\x00', &(0x7f0000000580)='\xde)\x00', &(0x7f00000005c0)='GPL\x00', &(0x7f0000000600)='.-!.\x00', &(0x7f0000000680)='![%{\x00']}, 0x1000) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000400)) writev(r14, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000100000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) r15 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r15, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) 7m4.180530107s ago: executing program 50 (id=16014): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000080000001c4b144f0a00850000000800007100"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]}) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x20) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000400)) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan1\x00', 0x0}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1348, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000900)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0x1b, &(0x7f0000001d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd8a, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0xa, 0x2, 0x6, 0xfffffffffffffffc, 0x10}, @generic={0x7, 0x0, 0x8, 0x9, 0x100}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6b}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x8, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x2, 0x5, 0x3, 0xe9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000940)=[r0, r0, r5, r0, r6, r0, r0, r0, r0, r0], &(0x7f0000000980)=[{0x3, 0x4, 0x0, 0x4}, {0x3, 0x5, 0xe, 0x1}, {0x4, 0x0, 0x400000f, 0x8}, {0x0, 0x1, 0x2, 0x7}, {0x2, 0xfffffffe, 0x3, 0xa}], 0x10, 0x65, @void, @value}, 0x94) r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r3, {0x1b}}, './file0\x00'}) ioctl$PPPIOCSACTIVE(r9, 0x40107446, &(0x7f0000001d00)={0xa, &(0x7f0000001c80)=[{0xf, 0x7f, 0x5, 0x1}, {0x3, 0x0, 0xfe, 0x80000000}, {0xfffe, 0xb, 0x1, 0x8}, {0xd, 0x3, 0x5, 0xfffffff7}, {0x7299, 0x85, 0x8, 0x2}, {0x3, 0x3, 0x7b, 0xfffffffd}, {0x2, 0x0, 0xff, 0x5}, {0xc, 0x5, 0x2, 0xfffffffc}, {0x548, 0x80, 0x6, 0x4}, {0x5, 0x2, 0x6, 0x2f41}]}) close(r8) socket(0x1d, 0x2, 0x6) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) r12 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) execveat(r12, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000040)='\x00', &(0x7f0000000080)='kmem_cache_free\x00', &(0x7f0000000180)='^)\x00', &(0x7f00000001c0)='*\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='GPL\x00', &(0x7f00000002c0)='TIPC\x00', &(0x7f0000000300)='kmem_cache_free\x00']}, &(0x7f00000006c0)={[&(0x7f0000000400)='\x00', &(0x7f0000000540)=']\x00', &(0x7f0000000580)='\xde)\x00', &(0x7f00000005c0)='GPL\x00', &(0x7f0000000600)='.-!.\x00', &(0x7f0000000680)='![%{\x00']}, 0x1000) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000400)) writev(r14, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000100000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) r15 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r15, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) 4m43.070606703s ago: executing program 8 (id=19404): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) socket$inet6(0xa, 0x802, 0x0) fstat(r1, &(0x7f0000000240)) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) fadvise64(r2, 0x6, 0x4, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r7, @ANYBLOB='\b\x00', @ANYRES32=r7], 0x6c}, 0x1, 0xba01}, 0x0) 4m42.945596122s ago: executing program 8 (id=19408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r3, 0xee72) sendfile(r2, r3, 0x0, 0x8000fffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0x1, 0x5, 0x4104, r0, 0x8, '\x00', 0x0, r2, 0x2, 0x4, 0x3, 0xb, @void, @value, @void, @value}, 0x50) 4m42.892276392s ago: executing program 8 (id=19410): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x7fffeffe, 0x40, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x47, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a40)={r3, 0x0, &(0x7f0000000040)=""/38}, 0x20) 4m42.818437472s ago: executing program 8 (id=19412): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) mkdir(&(0x7f0000000480)='./file0\x00', 0xc7) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)='ramfs\x00', 0x808410, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) 4m42.635862411s ago: executing program 8 (id=19415): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{0x200000000006, 0xde, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r4}, 0x10) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) write(r0, 0x0, 0x0) 4m42.3587081s ago: executing program 8 (id=19416): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t') 4m42.3583909s ago: executing program 51 (id=19416): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t') 3m32.816563537s ago: executing program 6 (id=20626): syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000340)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 3m32.461090376s ago: executing program 6 (id=20632): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f00000003c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) 3m32.421306006s ago: executing program 6 (id=20634): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x24) lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0xee00) 3m32.398613695s ago: executing program 6 (id=20635): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0x42032, r0, 0x80000000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x326b, 0x4, 0xe}, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@filename='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0\x00') r5 = getpgid(0x0) sched_setscheduler(r5, 0x0, &(0x7f0000000140)=0xdaad) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x4e21, @multicast2}}}, 0x88) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000240)={0xfffffff8, {{0x2, 0x4e24, @private=0xa010100}}}, 0x88) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) sendmsg$sock(r3, &(0x7f0000001540)={&(0x7f0000000500)=@pppoe={0x2a, 0x0, {0x0, @empty, 'nicvf0\x00'}}, 0x80, 0x0}, 0x0) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r11, r6, 0x0) 3m32.332733835s ago: executing program 6 (id=20637): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) r2 = open(0x0, 0x40542, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x4}, 0x18) unshare(0x20000600) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x9c, r6, 0xc4fc9e906872338b, 0x70bd28, 0x0, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc}}}}, [@NL80211_ATTR_TID_CONFIG={0x74, 0x11d, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x6c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf172, 0x1, 0x5, 0x5bd, 0xa8, 0x6, 0xff, 0x2]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x1b, 0x6, 0x36, 0x30, 0x5, 0x2, 0x30, 0x4, 0x9, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x20, 0x8, 0x0, 0x84, 0x400, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0x4, 0x3, 0x5, 0x6, 0x48, 0x1b, 0x6c, 0x10, 0x4, 0x16, 0x36, 0x16, 0x35, 0x67, 0xf, 0x3, 0x5, 0x4, 0x60, 0x6, 0x9, 0x30]}]}]}]}]}]}, 0x9c}}, 0x4c000) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xcf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x0, 0x30, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "2607b1aeae3a"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1, 0xff, 0x8}, {0x6, 0x24, 0x1a, 0x10, 0x16}, [@mbim={0xc, 0x24, 0x1b, 0x7e6c, 0x1, 0x4, 0xab, 0x5, 0xe}, @dmm={0x7, 0x24, 0x14, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x44, 0x40, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0xca, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x2, 0x3}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x5, 0x9, 0xc5, 0x20}, 0xdf, &(0x7f00000004c0)={0x5, 0xf, 0xdf, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xce, 0x10, 0x3, "8c3c1ba886ef94ea853368c2902233ba6cd07cb2c12a2173ba1e1bce4748dad0b3250427ae19d21669e18786729989acb72db378cdc9fdb376089434fad1a70cda1886d1a862ce11c2cc1c6b947d2123a67b2d1e48a38cfa36eee232ea556358575061df9cc570c13209d52b9cb287b4d0a7d92650fdd8d7233f0189d0f1241e2b35469212dc2e3b5acbb97c11cc3edddd0060e0c33de2b6434d350943f39cdb21247a7fc2d16133fbc0bedb523c2a63c28e44bc393fcc32d576d0bad7a9124e767b5b53fd38a08b15fa19"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x443}}, {0x13, &(0x7f0000000600)=@string={0x13, 0x3, "cb871b488b0b129b52d318b3f72ad5c7f1"}}]}) 3m32.235981395s ago: executing program 6 (id=20639): syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 3m32.235858765s ago: executing program 52 (id=20639): syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 2.306707908s ago: executing program 1 (id=24554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x98, r1, 0xc4fc9e906872338b, 0x70bd28, 0x0, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc}}}}, [@NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf172, 0x1, 0x5, 0x5bd, 0xa8, 0x6, 0xff, 0x2]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x1b, 0x6, 0x36, 0x30, 0x5, 0x2, 0x30, 0x4, 0x9, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x20, 0x8, 0x0, 0x84, 0x400, 0x5]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x60, 0x4, 0x3, 0x5, 0x6, 0x48, 0x1b, 0x6c, 0x10, 0x4, 0x16, 0x36, 0x16, 0x35, 0x67, 0xf, 0x60, 0x9, 0x30]}]}]}]}]}]}, 0x98}}, 0x4c000) 2.294712538s ago: executing program 1 (id=24556): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, 0x0, &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00'}, 0x18) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044880) 2.226489978s ago: executing program 1 (id=24557): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xd0, &(0x7f0000000240), 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xa0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000180)={@remote, @multicast2, 0x0, 0x3, [@rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}]}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000001a80)={@local, @random="89ab9b4c72ca", @void, {@ipv6={0x86dd, @dccp_packet={0xc, 0x6, "46ce76", 0x10, 0x21, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}, @mcast2, {[], {{0x4e23, 0x4e21, 0x4, 0x1, 0x9, 0x0, 0x0, 0x821b8c107e4fadb7, 0x5, "119296", 0xe, "8df660"}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000740), 0x0, 0x0, 0x2) 1.668676016s ago: executing program 4 (id=24566): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000700000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000000906210200000000000000000500ffff240007800c000180080001406401010008f30a40004000020c00028008000140e00000020900020073797a31000000000500010007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x20, r6, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r11}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xf20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x63db, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.239270624s ago: executing program 9 (id=24572): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) fallocate(r0, 0x3, 0x0, 0x10000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfa, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = epoll_create(0x3ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)) r4 = socket$inet6(0xa, 0x3, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c0000003400010000000000fedbdf2502"], 0x1c}}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x0, 0x4, 0x12, @empty, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x1, 0x8000, 0x8cec, 0x7}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x64, 0x63, 0x30, 0x63, 0x39, 0x33, 0x64, 0x36, 0x62, 0x36, 0x56, 0x30, 0x30, 0xde196de1a425906c, 0x62]}, &(0x7f00000002c0)={0x0, "e328d9548557ddf526ddf3452e312ed6d07d4d059cd3d875f681e659a5e07b8a2949d9308f7a9a6dee2591672db7674e8f87f1bed385b0d4718b29ba3c1e8e62", 0x3c}, 0x48, 0xfffffffffffffffc) socket$netlink(0x10, 0x3, 0x0) 1.188739374s ago: executing program 1 (id=24574): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bind$inet(r0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x3, 0x0, 0xc003, 0x0, "f1870d07f2cf8baf"}) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x2, 0xf, "1000a87d827bc2c95a5947380b00"}) syz_open_pts(r2, 0x303041) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x700, 0x8000, 0x6, 0x6, {{0x5, 0x4, 0x1, 0x21, 0x14, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @rand_addr=0x64010100}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000380)='ext4_unlink_exit\x00', 0xffffffffffffffff, 0x0, 0x100007ff}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x3, 0xe76b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) mount$bpf(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x400, &(0x7f0000000740)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYRESOCT=r4]) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0055d10000000000000000100000000000000000000063749d0000002f6762df20acc42313c6cb235347aa8072a50852107c678d7fbb7d7cd5b1f2f56c649b32d2f32e4516112ec477cf951ed8633a6048b7cb1b4abdcd5e70c57db64b09e5925f27e53b3606508e69eb8c9fa84880203a2f5733b591d9887d5376dae88e7c250f25f5775914f5aa6d946855"], 0x50) 1.111535154s ago: executing program 4 (id=24575): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x2040, 0x0) 1.110477634s ago: executing program 9 (id=24576): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x1000) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1502, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffffffffc51, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x5}, 0x18) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1, 0xfffffffe}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000000000010000000900010073797a3100000000080002400000000140000000030a01020000000000000000010000000900030073717a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480140000001100010000000000000000000000000a"], 0xc0}}, 0x0) 1.067156564s ago: executing program 4 (id=24577): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) unshare(0x20000600) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0xa, 0x0, 0x0, 0x3, &(0x7f0000000100), 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 1.066477564s ago: executing program 9 (id=24578): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x4, 0x3}, {0x401, 0xfff}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 1.018709423s ago: executing program 9 (id=24579): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) unshare(0x20000600) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0xa, 0x0, 0x0, 0x3, &(0x7f0000000100), 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 1.018040153s ago: executing program 4 (id=24580): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x35, 0x39, 0x39, 0x36, 0x65, 0x60, 0x61, 0x31, 0x54, 0x36, 0x34, 0x63, 0x66, 0x66, 0x64, 0x65]}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x63, 0x63, 0x2, [@volatile={0x3, 0x0, 0x0, 0x9, 0x3}, @union={0x4, 0x0, 0x0, 0x5, 0x1, 0x7}, @datasec={0xf, 0x4, 0x0, 0xf, 0x3, [{0x1, 0x9}, {0x3, 0x6, 0x8}, {0x3, 0x2, 0x200}, {0x1, 0xff, 0x6}], "e0a7fa"}, @typedef={0x4, 0x0, 0x0, 0x8, 0x1}]}}, &(0x7f00000006c0)=""/174, 0x7e, 0xae, 0x1, 0xa1eb, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) keyctl$KEYCTL_MOVE(0x4, r1, r0, 0x0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) (fail_nth: 2) 998.452683ms ago: executing program 5 (id=24581): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) unshare(0x20000600) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0xa, 0x0, 0x0, 0x3, &(0x7f0000000100), 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 964.472183ms ago: executing program 9 (id=24582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r2 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="000088caffffffffffffaaaaaaaaaa0086dd608a2d5500780000fe8000000000000000000000005d0000fe800000000000000000000000000000040e"], 0xb2) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000800000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x3) 744.721262ms ago: executing program 5 (id=24583): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async, rerun: 32) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) (async, rerun: 32) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0xfffffffffffffef8, 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) (rerun: 64) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket(0x1e, 0x4, 0x0) (async) syz_io_uring_setup(0x4432, &(0x7f0000000180)={0x0, 0x0, 0x13291, 0xfffffffd}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0xffffffffffffffff) 644.110022ms ago: executing program 4 (id=24584): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000de3b60fc58e3910dd27c232e000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8000000000000001, 0x3}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="6cb1bacfc4433de2c11a702b7f5e0c5164ac435fa102f64cb23a42ffce17ee0f29ea3f2beb3787642a664224235b6815b0222b60709e92ff45d64650b89b2c3348cd78b641d069a1fb554bc6ba380dc4a2a8d6ed6ec9636f2854a3cdee9b0c"], 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 405.249611ms ago: executing program 5 (id=24585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 385.893971ms ago: executing program 3 (id=24586): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2000006, 0x6}, 0x0, 0x3, 0x4, 0x5, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)=""/161, 0xa1}, {0x0}], 0x2) sendmmsg$inet(r1, 0x0, 0x0, 0x4008804) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x568, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000020000103000000000000000002002000040000011a00000008d6bfd45ac6fdf208ce02000000000000000101"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}}, 0x0) 339.715331ms ago: executing program 5 (id=24587): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) fallocate(r0, 0x3, 0x0, 0x10000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfa, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = epoll_create(0x3ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)) r4 = socket$inet6(0xa, 0x3, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c0000003400010000000000fedbdf2502"], 0x1c}}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x0, 0x4, 0x12, @empty, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x1, 0x8000, 0x8cec, 0x7}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x64, 0x63, 0x30, 0x63, 0x39, 0x33, 0x64, 0x36, 0x62, 0x36, 0x56, 0x30, 0x30, 0xde196de1a425906c, 0x62]}, &(0x7f00000002c0)={0x0, "e328d9548557ddf526ddf3452e312ed6d07d4d059cd3d875f681e659a5e07b8a2949d9308f7a9a6dee2591672db7674e8f87f1bed385b0d4718b29ba3c1e8e62", 0x3c}, 0x48, 0xfffffffffffffffc) socket$netlink(0x10, 0x3, 0x0) 338.481051ms ago: executing program 3 (id=24588): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x2040, 0x0) 333.352161ms ago: executing program 3 (id=24589): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x1000) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1502, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffffffffc51, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x5}, 0x18) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1, 0xfffffffe}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000000000010000000900010073797a3100000000080002400000000140000000030a01020000000000000000010000000900030073717a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480140000001100010000000000000000000000000a"], 0xc0}}, 0x0) 332.831251ms ago: executing program 5 (id=24590): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x4, 0x3}, {0x401, 0xfff}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 313.954741ms ago: executing program 4 (id=24591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c000200190000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x58}}, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 299.990511ms ago: executing program 5 (id=24592): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000de3b60fc58e3910dd27c232e000000000000"], 0x48) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8000000000000001, 0x3}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="6cb1bacfc4433de2c11a702b7f5e0c5164ac435fa102f64cb23a42ffce17ee0f29ea3f2beb3787642a664224235b6815b0222b60709e92ff45d64650b89b2c3348cd78b641d069a1fb554bc6ba380dc4a2a8d6ed6ec9636f2854a3cdee"], 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 299.21598ms ago: executing program 3 (id=24593): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x1000) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1502, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffffffffc51, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x5}, 0x18) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1, 0xfffffffe}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000000000010000000900010073797a3100000000080002400000000140000000030a01020000000000000000010000000900030073717a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480140000001100010000000000000000000000000a"], 0xc0}}, 0x0) 245.417481ms ago: executing program 9 (id=24594): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000002, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$vsock_stream(0x28, 0x1, 0x0) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000280)=""/29, 0x1d}, {&(0x7f0000000380)=""/125, 0x7d}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000300)=""/34, 0x22}, {&(0x7f0000000540)=""/239, 0xef}, {&(0x7f0000000480)=""/80, 0x50}, {&(0x7f0000000400)=""/54, 0x36}, {&(0x7f0000000940)=""/201, 0xc9}, {&(0x7f0000000a40)=""/178, 0xb2}], 0x9, &(0x7f0000000bc0)=""/255, 0xff}, 0x160) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000001c0)={0x1d, 0x22, 0x9, 0xb, 0x6, 0x99b, 0x6, 0x53, 0xfffffffffffffffe}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2001c801}, 0x4000000) close(r3) 242.34378ms ago: executing program 3 (id=24595): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000008978b21900000000000000000000000000000000eb8383cb78"], 0x48) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x35, 0x39, 0x39, 0x36, 0x65, 0x60, 0x61, 0x31, 0x54, 0x36, 0x34, 0x63, 0x66, 0x66, 0x64, 0x65]}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r2}) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, r3) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 225.042031ms ago: executing program 3 (id=24596): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7ffffffe, &(0x7f0000000000)=[{0x400, 0x6, 0xfffffffffffffffc}], 0x1, 0x0, 0xb, 0x0, 0x0, 0x59}) 218.57313ms ago: executing program 1 (id=24597): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") (async) r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x40800) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x40800) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r6, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x58}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x4084) iopl(0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000002c0)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007e000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r5, 0x1, 0x0, 0x0, {0x3a}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) fallocate(r1, 0x0, 0x0, 0x404042bbe) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000080)) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000080)) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x12) 0s ago: executing program 1 (id=24598): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7ffffffe, &(0x7f0000000000)=[{0x400, 0x6, 0xfffffffffffffffc}], 0x1, 0x0, 0xb, 0x0, 0x0, 0x59}) (fail_nth: 1) kernel console output (not intermixed with test programs): total_workingset_refault_anon 3935 [ 1148.890433][ T3645] total_workingset_refault_file 439 [ 1148.895733][ T3645] total_swap 176128 [ 1148.899696][ T3645] total_swapcached 12288 [ 1148.904073][ T3645] total_pgpgin 1229763 [ 1148.908185][ T3645] total_pgpgout 1229760 [ 1148.912403][ T3645] total_pgfault 1642943 [ 1148.916628][ T3645] total_pgmajfault 1334 [ 1148.920774][ T3645] total_inactive_anon 12288 [ 1148.925287][ T3645] total_active_anon 0 [ 1148.929301][ T3645] total_inactive_file 0 [ 1148.933465][ T3645] total_active_file 0 [ 1148.937484][ T3645] total_unevictable 0 [ 1148.941479][ T3645] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.24202,pid=3645,uid=0 [ 1148.956199][ T3645] Memory cgroup out of memory: Killed process 3645 (syz.4.24202) total-vm:93384kB, anon-rss:916kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1149.102182][ T3693] loop3: detected capacity change from 0 to 512 [ 1149.268777][ T29] audit: type=1326 audit(1155.049:105883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.4.24225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d694c5d29 code=0x7ffc0000 [ 1149.294120][ T29] audit: type=1326 audit(1155.049:105884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.4.24225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d694c5d29 code=0x7ffc0000 [ 1149.297353][ T3705] loop3: detected capacity change from 0 to 512 [ 1149.317388][ T29] audit: type=1326 audit(1155.049:105885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.4.24225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d694c5d29 code=0x7ffc0000 [ 1149.317438][ T29] audit: type=1326 audit(1155.049:105886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.4.24225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d694c5d29 code=0x7ffc0000 [ 1149.325434][ T3701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24225'. [ 1149.346864][ T29] audit: type=1326 audit(1155.049:105887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.4.24225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f2d694c5d29 code=0x7ffc0000 [ 1149.375484][ T3706] dccp_invalid_packet: P.Data Offset(4) too small [ 1149.378990][ T29] audit: type=1326 audit(1155.049:105888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.4.24225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d694c5d29 code=0x7ffc0000 [ 1149.405687][ T3705] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1149.408616][ T29] audit: type=1326 audit(1155.049:105889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.4.24225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d694c5d29 code=0x7ffc0000 [ 1149.464805][ T29] audit: type=1326 audit(1155.049:105890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.4.24225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d694c5d29 code=0x7ffc0000 [ 1149.488343][ T29] audit: type=1326 audit(1155.049:105891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.4.24225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d694c5d29 code=0x7ffc0000 [ 1149.546695][ T3705] EXT4-fs (loop3): 1 truncate cleaned up [ 1149.871429][ T3737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24239'. [ 1149.880627][ T3737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24239'. [ 1149.891280][ T3735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24238'. [ 1149.981349][ T3741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24241'. [ 1149.990489][ T3741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24241'. [ 1150.002253][ T3741] batadv0: entered promiscuous mode [ 1150.008662][ T3741] batadv_slave_1: entered promiscuous mode [ 1150.014610][ T3741] batadv_slave_1: left promiscuous mode [ 1150.020623][ T3741] batadv0: left promiscuous mode [ 1150.030618][ T3742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3742 comm=syz.5.24240 [ 1150.224259][ T3746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24243'. [ 1150.316081][ T3749] dccp_invalid_packet: P.Data Offset(4) too small [ 1151.067755][ T3747] syz.4.24244 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1151.078961][ T3747] CPU: 1 UID: 0 PID: 3747 Comm: syz.4.24244 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1151.089740][ T3747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1151.099816][ T3747] Call Trace: [ 1151.103099][ T3747] [ 1151.106033][ T3747] dump_stack_lvl+0xf2/0x150 [ 1151.110690][ T3747] dump_stack+0x15/0x1a [ 1151.114942][ T3747] dump_header+0x83/0x2d0 [ 1151.119430][ T3747] oom_kill_process+0x341/0x4c0 [ 1151.124295][ T3747] out_of_memory+0x9af/0xbe0 [ 1151.128971][ T3747] ? css_next_descendant_pre+0x11c/0x140 [ 1151.134708][ T3747] mem_cgroup_out_of_memory+0x13e/0x190 [ 1151.140317][ T3747] try_charge_memcg+0x508/0x7f0 [ 1151.145182][ T3747] charge_memcg+0x50/0xc0 [ 1151.149526][ T3747] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 1151.155522][ T3747] __read_swap_cache_async+0x236/0x480 [ 1151.160996][ T3747] swap_cluster_readahead+0x279/0x3f0 [ 1151.166490][ T3747] swapin_readahead+0xe4/0x6f0 [ 1151.171269][ T3747] ? __rcu_read_unlock+0x34/0x70 [ 1151.176303][ T3747] ? swap_cache_get_folio+0x77/0x210 [ 1151.181658][ T3747] do_swap_page+0x31b/0x2550 [ 1151.186313][ T3747] ? __rcu_read_lock+0x36/0x50 [ 1151.191096][ T3747] ? __pfx_default_wake_function+0x10/0x10 [ 1151.196938][ T3747] handle_mm_fault+0x8e4/0x2ac0 [ 1151.201804][ T3747] exc_page_fault+0x3b9/0x650 [ 1151.206517][ T3747] asm_exc_page_fault+0x26/0x30 [ 1151.211389][ T3747] RIP: 0033:0x7f2d6939cb1c [ 1151.215807][ T3747] Code: 66 0f 1f 44 00 00 69 3d 96 8b e4 00 e8 03 00 00 48 8d 1d 97 94 31 00 e8 72 91 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 1151.235491][ T3747] RSP: 002b:00007fff6054e900 EFLAGS: 00010283 [ 1151.241801][ T3747] RAX: 0000000000000000 RBX: 00007f2d696b6080 RCX: 0000000000000000 [ 1151.249923][ T3747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558e08f808 [ 1151.257913][ T3747] RBP: 00007f2d696b7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 1151.265937][ T3747] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000011a689 [ 1151.273943][ T3747] R13: 00007f2d696b6160 R14: 0000000000000032 R15: ffffffffffffffff [ 1151.281927][ T3747] [ 1151.285312][ T3747] memory: usage 307200kB, limit 307200kB, failcnt 12426 [ 1151.292350][ T3747] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 1151.300315][ T3747] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 1151.307607][ T3747] Memory cgroup stats for /syz4: [ 1151.308448][ T3747] cache 0 [ 1151.316428][ T3747] rss 0 [ 1151.319219][ T3747] shmem 0 [ 1151.322182][ T3747] mapped_file 0 [ 1151.325704][ T3747] dirty 0 [ 1151.328666][ T3747] writeback 8192 [ 1151.332246][ T3747] workingset_refault_anon 4025 [ 1151.337018][ T3747] workingset_refault_file 439 [ 1151.341827][ T3747] swap 184320 [ 1151.345252][ T3747] swapcached 20480 [ 1151.349027][ T3747] pgpgin 1233369 [ 1151.352587][ T3747] pgpgout 1233364 [ 1151.356263][ T3747] pgfault 1647203 [ 1151.359919][ T3747] pgmajfault 1369 [ 1151.363580][ T3747] inactive_anon 0 [ 1151.367228][ T3747] active_anon 20480 [ 1151.371156][ T3747] inactive_file 0 [ 1151.374843][ T3747] active_file 0 [ 1151.378316][ T3747] unevictable 0 [ 1151.381763][ T3747] hierarchical_memory_limit 314572800 [ 1151.387175][ T3747] hierarchical_memsw_limit 9223372036854771712 [ 1151.393343][ T3747] total_cache 0 [ 1151.396912][ T3747] total_rss 0 [ 1151.400215][ T3747] total_shmem 0 [ 1151.403706][ T3747] total_mapped_file 0 [ 1151.407719][ T3747] total_dirty 0 [ 1151.411260][ T3747] total_writeback 8192 [ 1151.415317][ T3747] total_workingset_refault_anon 4025 [ 1151.420621][ T3747] total_workingset_refault_file 439 [ 1151.425817][ T3747] total_swap 184320 [ 1151.429767][ T3747] total_swapcached 20480 [ 1151.434001][ T3747] total_pgpgin 1233369 [ 1151.438068][ T3747] total_pgpgout 1233364 [ 1151.442331][ T3747] total_pgfault 1647203 [ 1151.446506][ T3747] total_pgmajfault 1369 [ 1151.450772][ T3747] total_inactive_anon 0 [ 1151.454981][ T3747] total_active_anon 20480 [ 1151.459405][ T3747] total_inactive_file 0 [ 1151.463573][ T3747] total_active_file 0 [ 1151.467571][ T3747] total_unevictable 0 [ 1151.471591][ T3747] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.24244,pid=3747,uid=0 [ 1151.486388][ T3747] Memory cgroup out of memory: Killed process 3747 (syz.4.24244) total-vm:93648kB, anon-rss:912kB, file-rss:22344kB, shmem-rss:128kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 1151.620130][ T3791] hub 6-0:1.0: USB hub found [ 1151.628842][ T3791] hub 6-0:1.0: 8 ports detected [ 1151.742081][ T3801] loop9: detected capacity change from 0 to 512 [ 1151.767600][ T3805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3805 comm=syz.1.24264 [ 1151.782981][ T3806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.794351][ T3806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.855363][ T3813] syz.9.24270[3813] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1151.855489][ T3813] syz.9.24270[3813] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1151.856784][ T3814] syz.4.24271[3814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1151.871516][ T3813] syz.9.24270[3813] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.474301][ T3831] loop3: detected capacity change from 0 to 512 [ 1152.495742][ T3831] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1152.522082][ T3831] EXT4-fs (loop3): 1 truncate cleaned up [ 1152.641234][ T3841] loop3: detected capacity change from 0 to 1024 [ 1152.707473][ T3841] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.3.24283: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1152.951107][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x1 [ 1152.958602][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1152.966015][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1152.973481][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1152.980910][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1152.988444][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1152.998556][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.006227][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x2 [ 1153.013894][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.021511][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.028975][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.034127][ T3825] syz.5.24276 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1153.036425][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.050494][ T3825] CPU: 0 UID: 0 PID: 3825 Comm: syz.5.24276 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1153.057907][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x4 [ 1153.057932][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.068657][ T3825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1153.076168][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.083392][ T3825] Call Trace: [ 1153.083404][ T3825] [ 1153.093494][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.100785][ T3825] dump_stack_lvl+0xf2/0x150 [ 1153.100834][ T3825] dump_stack+0x15/0x1a [ 1153.100872][ T3825] dump_header+0x83/0x2d0 [ 1153.100900][ T3825] oom_kill_process+0x341/0x4c0 [ 1153.104195][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.107115][ T3825] out_of_memory+0x9af/0xbe0 [ 1153.114518][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.119100][ T3825] ? css_next_descendant_pre+0x11c/0x140 [ 1153.123273][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.127572][ T3825] mem_cgroup_out_of_memory+0x13e/0x190 [ 1153.127620][ T3825] try_charge_memcg+0x508/0x7f0 [ 1153.132479][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.139827][ T3825] obj_cgroup_charge_pages+0xbd/0x1a0 [ 1153.139874][ T3825] __memcg_kmem_charge_page+0x9d/0x170 [ 1153.145067][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.152408][ T3825] __alloc_pages_noprof+0x1bc/0x340 [ 1153.152454][ T3825] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 1153.158082][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.165421][ T3825] alloc_pages_noprof+0xe1/0x100 [ 1153.165455][ T3825] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 1153.171058][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.175847][ T3825] __kvmalloc_node_noprof+0x121/0x170 [ 1153.183230][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.183255][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.188595][ T3825] ? ip_set_alloc+0x1f/0x30 [ 1153.194075][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.201468][ T3825] ip_set_alloc+0x1f/0x30 [ 1153.201502][ T3825] hash_netiface_create+0x273/0x730 [ 1153.206761][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.212134][ T3825] ? __nla_parse+0x40/0x60 [ 1153.219510][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.224402][ T3825] ? __pfx_hash_netiface_create+0x10/0x10 [ 1153.230226][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.237572][ T3825] ip_set_create+0x359/0x8a0 [ 1153.242988][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.250321][ T3825] ? memchr+0x1/0x50 [ 1153.250365][ T3825] ? __nla_parse+0x40/0x60 [ 1153.257838][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.262280][ T3825] nfnetlink_rcv_msg+0x4a9/0x570 [ 1153.269835][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.273961][ T3825] netlink_rcv_skb+0x12c/0x230 [ 1153.279267][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.286464][ T3825] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1153.290934][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.298229][ T3825] nfnetlink_rcv+0x16c/0x15d0 [ 1153.303985][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.311319][ T3825] ? kmem_cache_free+0x158/0x2d0 [ 1153.311356][ T3825] ? nlmon_xmit+0x51/0x60 [ 1153.315964][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.323264][ T3825] ? __kfree_skb+0x102/0x150 [ 1153.323293][ T3825] ? consume_skb+0x49/0x160 [ 1153.327175][ T1029] hid-generic 0000:0000:0000.010D: unknown main item tag 0x0 [ 1153.331560][ T3825] ? nlmon_xmit+0x51/0x60 [ 1153.331592][ T3825] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1153.431471][ T3825] ? __dev_queue_xmit+0xb6e/0x2090 [ 1153.436656][ T3825] ? ref_tracker_free+0x3a5/0x410 [ 1153.441686][ T3825] ? __dev_queue_xmit+0x186/0x2090 [ 1153.446910][ T3825] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 1153.452383][ T3825] netlink_unicast+0x599/0x670 [ 1153.457196][ T3825] netlink_sendmsg+0x5cc/0x6e0 [ 1153.461994][ T3825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1153.467380][ T3825] __sock_sendmsg+0x140/0x180 [ 1153.472135][ T3825] ____sys_sendmsg+0x312/0x410 [ 1153.477003][ T3825] __sys_sendmsg+0x19d/0x230 [ 1153.481724][ T3825] __x64_sys_sendmsg+0x46/0x50 [ 1153.486625][ T3825] x64_sys_call+0x2734/0x2dc0 [ 1153.491309][ T3825] do_syscall_64+0xc9/0x1c0 [ 1153.495916][ T3825] ? clear_bhb_loop+0x55/0xb0 [ 1153.500618][ T3825] ? clear_bhb_loop+0x55/0xb0 [ 1153.505309][ T3825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.511277][ T3825] RIP: 0033:0x7f4d68565d29 [ 1153.515707][ T3825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1153.535494][ T3825] RSP: 002b:00007f4d66bd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1153.543933][ T3825] RAX: ffffffffffffffda RBX: 00007f4d68755fa0 RCX: 00007f4d68565d29 [ 1153.551975][ T3825] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1153.560025][ T3825] RBP: 00007f4d685e1aa8 R08: 0000000000000000 R09: 0000000000000000 [ 1153.568193][ T3825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.576260][ T3825] R13: 0000000000000000 R14: 00007f4d68755fa0 R15: 00007ffe776ef308 [ 1153.584274][ T3825] [ 1153.587588][ T3825] memory: usage 307200kB, limit 307200kB, failcnt 8503 [ 1153.594519][ T3825] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 1153.602690][ T3825] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 1153.610023][ T3825] Memory cgroup stats for /syz5: [ 1153.610327][ T3825] cache 4096 [ 1153.618489][ T3825] rss 4096 [ 1153.621592][ T3825] shmem 0 [ 1153.622037][ T1029] hid-generic 0000:0000:0000.010D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1153.624523][ T3825] mapped_file 0 [ 1153.624535][ T3825] dirty 0 [ 1153.640522][ T3825] writeback 0 [ 1153.643969][ T3825] workingset_refault_anon 1437 [ 1153.648975][ T3825] workingset_refault_file 6763 [ 1153.653907][ T3825] swap 172032 [ 1153.657462][ T3825] swapcached 16384 [ 1153.661316][ T3825] pgpgin 837851 [ 1153.664807][ T3825] pgpgout 837838 [ 1153.668362][ T3825] pgfault 1027801 [ 1153.672010][ T3825] pgmajfault 1058 [ 1153.675731][ T3825] inactive_anon 16384 [ 1153.679711][ T3825] active_anon 0 [ 1153.683217][ T3825] inactive_file 36864 [ 1153.687203][ T3825] active_file 0 [ 1153.690691][ T3825] unevictable 0 [ 1153.694187][ T3825] hierarchical_memory_limit 314572800 [ 1153.699571][ T3825] hierarchical_memsw_limit 9223372036854771712 [ 1153.705807][ T3825] total_cache 4096 [ 1153.709602][ T3825] total_rss 4096 [ 1153.713161][ T3825] total_shmem 0 [ 1153.716673][ T3825] total_mapped_file 0 [ 1153.720679][ T3825] total_dirty 0 [ 1153.724148][ T3825] total_writeback 0 [ 1153.728021][ T3825] total_workingset_refault_anon 1437 [ 1153.733321][ T3825] total_workingset_refault_file 6763 [ 1153.738671][ T3825] total_swap 172032 [ 1153.742500][ T3825] total_swapcached 16384 [ 1153.746780][ T3825] total_pgpgin 837851 [ 1153.750815][ T3825] total_pgpgout 837838 [ 1153.754894][ T3825] total_pgfault 1027801 [ 1153.759088][ T3825] total_pgmajfault 1058 [ 1153.763250][ T3825] total_inactive_anon 16384 [ 1153.767756][ T3825] total_active_anon 0 [ 1153.771766][ T3825] total_inactive_file 36864 [ 1153.776278][ T3825] total_active_file 0 [ 1153.780286][ T3825] total_unevictable 0 [ 1153.784285][ T3825] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.24276,pid=3824,uid=0 [ 1153.799100][ T3825] Memory cgroup out of memory: Killed process 3824 (syz.5.24276) total-vm:93384kB, anon-rss:916kB, file-rss:22212kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 1153.885989][ T3865] loop3: detected capacity change from 0 to 512 [ 1153.893769][ T3865] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1153.987880][ T3865] EXT4-fs (loop3): 1 truncate cleaned up [ 1154.048851][ T3865] __nla_validate_parse: 3 callbacks suppressed [ 1154.048869][ T3865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24291'. [ 1154.049156][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 1154.049173][ T29] audit: type=1326 audit(1159.464:106256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.3.24291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c19825d29 code=0x7ffc0000 [ 1154.093395][ T29] audit: type=1326 audit(1159.464:106257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.3.24291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c19825d29 code=0x7ffc0000 [ 1154.116610][ T29] audit: type=1326 audit(1159.464:106258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.3.24291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c19825d29 code=0x7ffc0000 [ 1154.139818][ T29] audit: type=1326 audit(1159.464:106259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.3.24291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0c19825d29 code=0x7ffc0000 [ 1154.139887][ T29] audit: type=1326 audit(1159.464:106260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.3.24291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c19825d29 code=0x7ffc0000 [ 1154.186382][ T29] audit: type=1326 audit(1159.464:106261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.3.24291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c19825d29 code=0x7ffc0000 [ 1154.209677][ T29] audit: type=1326 audit(1159.464:106262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.3.24291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c19825d29 code=0x7ffc0000 [ 1154.232885][ T29] audit: type=1326 audit(1159.464:106263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.3.24291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c19825d29 code=0x7ffc0000 [ 1154.256173][ T29] audit: type=1326 audit(1159.464:106264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.3.24291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c19825d29 code=0x7ffc0000 [ 1154.279462][ T29] audit: type=1326 audit(1159.464:106265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.3.24291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0c19825d29 code=0x7ffc0000 [ 1154.398738][ T3878] chnl_net:caif_netlink_parms(): no params data found [ 1154.438777][ T3878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.446246][ T3878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.453523][ T3878] bridge_slave_0: entered allmulticast mode [ 1154.460110][ T3878] bridge_slave_0: entered promiscuous mode [ 1154.467278][ T3878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.474368][ T3878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.481599][ T3878] bridge_slave_1: entered allmulticast mode [ 1154.488031][ T3878] bridge_slave_1: entered promiscuous mode [ 1154.533456][ T9048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1154.543346][ T9048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1154.554534][ T9048] bond0 (unregistering): Released all slaves [ 1154.563027][ T9048] bond1 (unregistering): Released all slaves [ 1154.584413][ T3878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.595103][ T3878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.615601][ T3878] team0: Port device team_slave_0 added [ 1154.622314][ T3878] team0: Port device team_slave_1 added [ 1154.634199][ T9048] hsr_slave_0: left promiscuous mode [ 1154.640150][ T9048] hsr_slave_1: left promiscuous mode [ 1154.646244][ T9048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.653706][ T9048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.661790][ T9048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1154.669261][ T9048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1154.678997][ T9048] veth1_macvtap: left promiscuous mode [ 1154.684478][ T9048] veth0_macvtap: left promiscuous mode [ 1154.740760][ T9048] team0 (unregistering): Port device team_slave_1 removed [ 1154.750730][ T9048] team0 (unregistering): Port device team_slave_0 removed [ 1154.787164][ T3910] loop9: detected capacity change from 0 to 1024 [ 1154.796820][ T3878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.799131][ T3910] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.9.24304: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1154.803755][ T3878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.845580][ T3878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.857649][ T3878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.864640][ T3878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.890603][ T3878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.921149][ T3878] hsr_slave_0: entered promiscuous mode [ 1154.927257][ T3878] hsr_slave_1: entered promiscuous mode [ 1155.016549][ T3878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.029552][ T3878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.044273][ T7855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.051375][ T7855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.060628][ T7855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.067809][ T7855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.171773][ T3878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.314323][ T3941] loop3: detected capacity change from 0 to 1024 [ 1155.322202][ T3878] veth0_vlan: entered promiscuous mode [ 1155.360532][ T3941] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.3.24309: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1155.377427][ T3943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24310'. [ 1155.383924][ T3878] veth1_vlan: entered promiscuous mode [ 1155.433121][ T3878] veth0_macvtap: entered promiscuous mode [ 1155.483526][ T3878] veth1_macvtap: entered promiscuous mode [ 1155.529009][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.539559][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.549462][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.560001][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.569888][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.580324][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.590176][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.600684][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.610598][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.621347][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.631196][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.641684][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.651539][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.662158][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.672014][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.682455][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.715872][ T3878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1155.733322][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.743830][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.753790][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.764315][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.774229][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.784680][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.794639][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.805102][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.814972][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.825508][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.832616][ T3963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1155.835513][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.854277][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.861050][ T3963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1155.864110][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.882246][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.892092][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.902546][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.914136][ T3878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1156.036542][ T3972] bpf_get_probe_write_proto: 5 callbacks suppressed [ 1156.036562][ T3972] syz.3.24316[3972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1156.052933][ T3972] syz.3.24316[3972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1156.064835][ T3972] syz.3.24316[3972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1156.213979][ T3985] FAULT_INJECTION: forcing a failure. [ 1156.213979][ T3985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.238744][ T3985] CPU: 1 UID: 0 PID: 3985 Comm: syz.3.24323 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1156.249601][ T3985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1156.259676][ T3985] Call Trace: [ 1156.262966][ T3985] [ 1156.265993][ T3985] dump_stack_lvl+0xf2/0x150 [ 1156.270622][ T3985] dump_stack+0x15/0x1a [ 1156.274857][ T3985] should_fail_ex+0x223/0x230 [ 1156.279559][ T3985] should_fail+0xb/0x10 [ 1156.283770][ T3985] should_fail_usercopy+0x1a/0x20 [ 1156.288822][ T3985] _copy_from_user+0x1e/0xb0 [ 1156.293432][ T3985] copy_msghdr_from_user+0x54/0x2a0 [ 1156.298714][ T3985] ? __fget_files+0x17c/0x1c0 [ 1156.303428][ T3985] __sys_sendmsg+0x13e/0x230 [ 1156.308071][ T3985] __x64_sys_sendmsg+0x46/0x50 [ 1156.312979][ T3985] x64_sys_call+0x2734/0x2dc0 [ 1156.317690][ T3985] do_syscall_64+0xc9/0x1c0 [ 1156.322263][ T3985] ? clear_bhb_loop+0x55/0xb0 [ 1156.326958][ T3985] ? clear_bhb_loop+0x55/0xb0 [ 1156.331674][ T3985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.337660][ T3985] RIP: 0033:0x7f0c19825d29 [ 1156.337684][ T3985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1156.361789][ T3985] RSP: 002b:00007f0c17e91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1156.370239][ T3985] RAX: ffffffffffffffda RBX: 00007f0c19a15fa0 RCX: 00007f0c19825d29 [ 1156.378224][ T3985] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000006 [ 1156.386213][ T3985] RBP: 00007f0c17e91090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.394265][ T3985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.402254][ T3985] R13: 0000000000000000 R14: 00007f0c19a15fa0 R15: 00007ffe1cc2b3d8 [ 1156.410248][ T3985] [ 1156.574117][ T4008] loop3: detected capacity change from 0 to 1024 [ 1156.589952][ T4009] dccp_invalid_packet: P.Data Offset(4) too small [ 1156.601017][ T8] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x4 [ 1156.608899][ T8] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x2 [ 1156.621000][ T4008] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.3.24333: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1156.640942][ T8] hid-generic 0000:3000000:0000.010E: unknown main item tag 0x3 [ 1156.657656][ T8] hid-generic 0000:3000000:0000.010E: hidraw0: HID v0.00 Device [sy] on syz0 [ 1157.279300][ T4021] FAULT_INJECTION: forcing a failure. [ 1157.279300][ T4021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1157.292458][ T4021] CPU: 0 UID: 0 PID: 4021 Comm: syz.3.24337 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1157.303246][ T4021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1157.313326][ T4021] Call Trace: [ 1157.316647][ T4021] [ 1157.319619][ T4021] dump_stack_lvl+0xf2/0x150 [ 1157.324258][ T4021] dump_stack+0x15/0x1a [ 1157.328456][ T4021] should_fail_ex+0x223/0x230 [ 1157.333154][ T4021] should_fail+0xb/0x10 [ 1157.337403][ T4021] should_fail_usercopy+0x1a/0x20 [ 1157.342512][ T4021] _copy_to_iter+0xd5/0xd00 [ 1157.347109][ T4021] ? down_read+0x171/0x4b0 [ 1157.351701][ T4021] copy_page_to_iter+0x171/0x2b0 [ 1157.356693][ T4021] process_vm_rw+0x5b6/0x890 [ 1157.361350][ T4021] ? ksys_write+0x176/0x1b0 [ 1157.365944][ T4021] __x64_sys_process_vm_readv+0x7a/0x90 [ 1157.371525][ T4021] x64_sys_call+0xb24/0x2dc0 [ 1157.376230][ T4021] do_syscall_64+0xc9/0x1c0 [ 1157.380767][ T4021] ? clear_bhb_loop+0x55/0xb0 [ 1157.385597][ T4021] ? clear_bhb_loop+0x55/0xb0 [ 1157.390347][ T4021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.396313][ T4021] RIP: 0033:0x7f0c19825d29 [ 1157.400835][ T4021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1157.420613][ T4021] RSP: 002b:00007f0c17e91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 1157.420640][ T4021] RAX: ffffffffffffffda RBX: 00007f0c19a15fa0 RCX: 00007f0c19825d29 [ 1157.420699][ T4021] RDX: 0000000000000001 RSI: 0000000020008400 RDI: 000000000000018b [ 1157.445070][ T4021] RBP: 00007f0c17e91090 R08: 0000000000000001 R09: 0000000000000000 [ 1157.453108][ T4021] R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000001 [ 1157.461105][ T4021] R13: 0000000000000000 R14: 00007f0c19a15fa0 R15: 00007ffe1cc2b3d8 [ 1157.469184][ T4021] [ 1157.581134][ T4047] loop9: detected capacity change from 0 to 128 [ 1157.616968][ T4050] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1157.672224][ T4053] loop9: detected capacity change from 0 to 1024 [ 1157.685696][ T4053] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.9.24346: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1157.728217][ T4057] loop9: detected capacity change from 0 to 1024 [ 1157.750406][ T4057] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.9.24347: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1157.839505][ T4065] syz.4.24349[4065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1157.839624][ T4065] syz.4.24349[4065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1157.851739][ T4065] syz.4.24349[4065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1157.979121][ T4079] loop9: detected capacity change from 0 to 512 [ 1157.997664][ T4079] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1158.020061][ T4079] EXT4-fs (loop9): 1 truncate cleaned up [ 1158.089969][ T4084] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1158.110430][ T4085] dccp_invalid_packet: P.Data Offset(4) too small [ 1158.202759][ T4089] loop3: detected capacity change from 0 to 1024 [ 1158.254620][ T4089] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.3.24360: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1158.348560][ T4093] loop3: detected capacity change from 0 to 128 [ 1158.454703][ T4107] FAULT_INJECTION: forcing a failure. [ 1158.454703][ T4107] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.467460][ T4107] CPU: 0 UID: 0 PID: 4107 Comm: syz.3.24367 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1158.478433][ T4107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1158.488591][ T4107] Call Trace: [ 1158.491879][ T4107] [ 1158.494854][ T4107] dump_stack_lvl+0xf2/0x150 [ 1158.499559][ T4107] dump_stack+0x15/0x1a [ 1158.503755][ T4107] should_fail_ex+0x223/0x230 [ 1158.508485][ T4107] should_failslab+0x8f/0xb0 [ 1158.513223][ T4107] kmem_cache_alloc_noprof+0x52/0x320 [ 1158.518696][ T4107] ? audit_log_start+0x34c/0x6b0 [ 1158.523707][ T4107] audit_log_start+0x34c/0x6b0 [ 1158.528569][ T4107] audit_seccomp+0x4b/0x130 [ 1158.533101][ T4107] __seccomp_filter+0x6fa/0x1180 [ 1158.538138][ T4107] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1158.543868][ T4107] ? vfs_write+0x596/0x920 [ 1158.548445][ T4107] __secure_computing+0x9f/0x1c0 [ 1158.553497][ T4107] syscall_trace_enter+0xd1/0x1f0 [ 1158.558564][ T4107] ? fpregs_assert_state_consistent+0x83/0xa0 [ 1158.564672][ T4107] do_syscall_64+0xaa/0x1c0 [ 1158.569225][ T4107] ? clear_bhb_loop+0x55/0xb0 [ 1158.574003][ T4107] ? clear_bhb_loop+0x55/0xb0 [ 1158.578873][ T4107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.584812][ T4107] RIP: 0033:0x7f0c19825d29 [ 1158.589256][ T4107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.608882][ T4107] RSP: 002b:00007f0c17e91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 1158.617359][ T4107] RAX: ffffffffffffffda RBX: 00007f0c19a15fa0 RCX: 00007f0c19825d29 [ 1158.625363][ T4107] RDX: 0000000000006000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 1158.633449][ T4107] RBP: 00007f0c17e91090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.641446][ T4107] R10: 0000000000000707 R11: 0000000000000246 R12: 0000000000000001 [ 1158.649454][ T4107] R13: 0000000000000000 R14: 00007f0c19a15fa0 R15: 00007ffe1cc2b3d8 [ 1158.657467][ T4107] [ 1158.698080][ T4113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24370'. [ 1158.730564][ T4115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24371'. [ 1158.739752][ T4115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24371'. [ 1158.753630][ T4116] dccp_invalid_packet: P.Data Offset(4) too small [ 1158.753800][ T4117] dccp_invalid_packet: P.Data Offset(4) too small [ 1158.866647][ T4119] loop3: detected capacity change from 0 to 1024 [ 1158.894636][ T4119] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.3.24372: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1159.175946][ T4133] loop3: detected capacity change from 0 to 128 [ 1159.260817][ T4141] syz.9.24380[4141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1159.260978][ T4141] syz.9.24380[4141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1159.287179][ T4141] syz.9.24380[4141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1159.413006][ T4149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24384'. [ 1159.433712][ T4149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24384'. [ 1159.469995][ T4150] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.24383'. [ 1159.539300][ T4153] loop9: detected capacity change from 0 to 2048 [ 1159.567001][ T4153] EXT4-fs (loop9): failed to initialize system zone (-117) [ 1159.588410][ T4153] EXT4-fs (loop9): mount failed [ 1159.677808][ T4162] dccp_invalid_packet: P.Data Offset(4) too small [ 1159.753484][ T4164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=4164 comm=syz.9.24388 [ 1159.801514][ T4164] loop9: detected capacity change from 0 to 512 [ 1159.827398][ T4164] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.24388: bg 0: block 248: padding at end of block bitmap is not set [ 1159.863288][ T4164] __quota_error: 457 callbacks suppressed [ 1159.863306][ T4164] Quota error (device loop9): write_blk: dquota write failed [ 1159.876599][ T4164] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1159.886588][ T4164] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.24388: Failed to acquire dquot type 1 [ 1159.914809][ T4164] EXT4-fs (loop9): 1 truncate cleaned up [ 1159.985806][ T4173] dccp_invalid_packet: P.Data Offset(4) too small [ 1160.140943][ T4176] loop3: detected capacity change from 0 to 512 [ 1160.147719][ T4176] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1160.158901][ T4176] EXT4-fs (loop3): 1 truncate cleaned up [ 1160.251938][ T4178] dccp_invalid_packet: P.Data Offset(4) too small [ 1160.480921][ T4158] syz.4.24387 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1160.495238][ T4158] CPU: 0 UID: 0 PID: 4158 Comm: syz.4.24387 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1160.506105][ T4158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1160.516179][ T4158] Call Trace: [ 1160.519470][ T4158] [ 1160.522406][ T4158] dump_stack_lvl+0xf2/0x150 [ 1160.527033][ T4158] dump_stack+0x15/0x1a [ 1160.531262][ T4158] dump_header+0x83/0x2d0 [ 1160.535603][ T4158] oom_kill_process+0x341/0x4c0 [ 1160.540537][ T4158] out_of_memory+0x9af/0xbe0 [ 1160.545154][ T4158] ? css_next_descendant_pre+0x11c/0x140 [ 1160.550849][ T4158] mem_cgroup_out_of_memory+0x13e/0x190 [ 1160.556422][ T4158] try_charge_memcg+0x508/0x7f0 [ 1160.561376][ T4158] obj_cgroup_charge_pages+0xbd/0x1a0 [ 1160.566766][ T4158] __memcg_kmem_charge_page+0x9d/0x170 [ 1160.572338][ T4158] __alloc_pages_noprof+0x1bc/0x340 [ 1160.577614][ T4158] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 1160.583058][ T4158] alloc_pages_noprof+0xe1/0x100 [ 1160.588029][ T4158] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 1160.593875][ T4158] __kvmalloc_node_noprof+0x121/0x170 [ 1160.599272][ T4158] ? ip_set_alloc+0x1f/0x30 [ 1160.603796][ T4158] ip_set_alloc+0x1f/0x30 [ 1160.608277][ T4158] hash_netiface_create+0x273/0x730 [ 1160.613496][ T4158] ? __nla_parse+0x40/0x60 [ 1160.618005][ T4158] ? __pfx_hash_netiface_create+0x10/0x10 [ 1160.623746][ T4158] ip_set_create+0x359/0x8a0 [ 1160.628401][ T4158] ? __schedule+0x6fa/0x930 [ 1160.632997][ T4158] ? __pfx_ip_set_create+0x10/0x10 [ 1160.638135][ T4158] nfnetlink_rcv_msg+0x4a9/0x570 [ 1160.643119][ T4158] netlink_rcv_skb+0x12c/0x230 [ 1160.647900][ T4158] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1160.653402][ T4158] nfnetlink_rcv+0x16c/0x15d0 [ 1160.658236][ T4158] ? kmem_cache_free+0xdc/0x2d0 [ 1160.663120][ T4158] ? nlmon_xmit+0x51/0x60 [ 1160.667459][ T4158] ? __kfree_skb+0x102/0x150 [ 1160.672056][ T4158] ? consume_skb+0x49/0x160 [ 1160.676629][ T4158] ? nlmon_xmit+0x51/0x60 [ 1160.680994][ T4158] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1160.686372][ T4158] ? __dev_queue_xmit+0xb6e/0x2090 [ 1160.691490][ T4158] ? ref_tracker_free+0x3a5/0x410 [ 1160.696554][ T4158] ? __dev_queue_xmit+0x186/0x2090 [ 1160.701704][ T4158] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 1160.707349][ T4158] netlink_unicast+0x599/0x670 [ 1160.712180][ T4158] netlink_sendmsg+0x5cc/0x6e0 [ 1160.717044][ T4158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1160.722357][ T4158] __sock_sendmsg+0x140/0x180 [ 1160.727050][ T4158] ____sys_sendmsg+0x312/0x410 [ 1160.731870][ T4158] __sys_sendmsg+0x19d/0x230 [ 1160.736488][ T4158] __x64_sys_sendmsg+0x46/0x50 [ 1160.741292][ T4158] x64_sys_call+0x2734/0x2dc0 [ 1160.745976][ T4158] do_syscall_64+0xc9/0x1c0 [ 1160.750551][ T4158] ? clear_bhb_loop+0x55/0xb0 [ 1160.755248][ T4158] ? clear_bhb_loop+0x55/0xb0 [ 1160.760002][ T4158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.765941][ T4158] RIP: 0033:0x7f2d694c5d29 [ 1160.770383][ T4158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1160.790073][ T4158] RSP: 002b:00007f2d67b37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1160.798566][ T4158] RAX: ffffffffffffffda RBX: 00007f2d696b5fa0 RCX: 00007f2d694c5d29 [ 1160.806585][ T4158] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000009 [ 1160.814608][ T4158] RBP: 00007f2d69541aa8 R08: 0000000000000000 R09: 0000000000000000 [ 1160.822605][ T4158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1160.830583][ T4158] R13: 0000000000000000 R14: 00007f2d696b5fa0 R15: 00007fff6054e798 [ 1160.838576][ T4158] [ 1160.842944][ T4158] memory: usage 307200kB, limit 307200kB, failcnt 13015 [ 1160.850221][ T4158] memory+swap: usage 307564kB, limit 9007199254740988kB, failcnt 0 [ 1160.858209][ T4158] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 1160.865575][ T4158] Memory cgroup stats for /syz4: [ 1160.865758][ T4158] cache 0 [ 1160.873702][ T4158] rss 0 [ 1160.876473][ T4158] shmem 0 [ 1160.879676][ T4158] mapped_file 0 [ 1160.883229][ T4158] dirty 0 [ 1160.886231][ T4158] writeback 0 [ 1160.889674][ T4158] workingset_refault_anon 4134 [ 1160.894443][ T4158] workingset_refault_file 439 [ 1160.899115][ T4158] swap 372736 [ 1160.902466][ T4158] swapcached 4096 [ 1160.906124][ T4158] pgpgin 1241421 [ 1160.909667][ T4158] pgpgout 1241420 [ 1160.913336][ T4158] pgfault 1657244 [ 1160.916963][ T4158] pgmajfault 1433 [ 1160.920771][ T4158] inactive_anon 0 [ 1160.924411][ T4158] active_anon 4096 [ 1160.928350][ T4158] inactive_file 0 [ 1160.932017][ T4158] active_file 0 [ 1160.935490][ T4158] unevictable 0 [ 1160.938958][ T4158] hierarchical_memory_limit 314572800 [ 1160.944337][ T4158] hierarchical_memsw_limit 9223372036854771712 [ 1160.950489][ T4158] total_cache 0 [ 1160.953972][ T4158] total_rss 0 [ 1160.957261][ T4158] total_shmem 0 [ 1160.960710][ T4158] total_mapped_file 0 [ 1160.964862][ T4158] total_dirty 0 [ 1160.968394][ T4158] total_writeback 0 [ 1160.972191][ T4158] total_workingset_refault_anon 4134 [ 1160.977550][ T4158] total_workingset_refault_file 439 [ 1160.982748][ T4158] total_swap 372736 [ 1160.986594][ T4158] total_swapcached 4096 [ 1160.990758][ T4158] total_pgpgin 1241421 [ 1160.994868][ T4158] total_pgpgout 1241420 [ 1160.999026][ T4158] total_pgfault 1657244 [ 1161.003200][ T4158] total_pgmajfault 1433 [ 1161.007369][ T4158] total_inactive_anon 0 [ 1161.011586][ T4158] total_active_anon 4096 [ 1161.015823][ T4158] total_inactive_file 0 [ 1161.020043][ T4158] total_active_file 0 [ 1161.024037][ T4158] total_unevictable 0 [ 1161.028116][ T4158] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.24387,pid=4157,uid=0 [ 1161.042837][ T4158] Memory cgroup out of memory: Killed process 4157 (syz.4.24387) total-vm:93648kB, anon-rss:784kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 1161.197374][ T29] audit: type=1400 audit(1166.189:106721): avc: denied { shutdown } for pid=4182 comm="syz.5.24393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1161.216856][ T29] audit: type=1400 audit(1166.189:106722): avc: denied { ioctl } for pid=4182 comm="syz.5.24393" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1161.271614][ T29] audit: type=1326 audit(1166.264:106723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1161.297867][ T29] audit: type=1326 audit(1166.292:106724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1161.320579][ T29] audit: type=1326 audit(1166.292:106725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1161.343438][ T29] audit: type=1326 audit(1166.292:106726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1161.365967][ T29] audit: type=1326 audit(1166.292:106727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1161.388640][ T29] audit: type=1326 audit(1166.292:106728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1161.505169][ T4194] syz.4.24394[4194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1161.505236][ T4194] syz.4.24394[4194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1161.517123][ T4194] syz.4.24394[4194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1161.591044][ T4202] loop3: detected capacity change from 0 to 1024 [ 1161.638592][ T4202] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.3.24397: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1161.693951][ T4216] loop3: detected capacity change from 0 to 512 [ 1161.700981][ T4216] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1161.712511][ T4219] loop9: detected capacity change from 0 to 128 [ 1161.724465][ T4216] EXT4-fs (loop3): 1 truncate cleaned up [ 1161.775779][ T4223] dccp_invalid_packet: P.Data Offset(4) too small [ 1161.833095][ T4225] dccp_invalid_packet: P.Data Offset(4) too small [ 1161.910931][ T4227] netlink: 'syz.9.24409': attribute type 7 has an invalid length. [ 1161.918823][ T4227] netlink: 8 bytes leftover after parsing attributes in process `syz.9.24409'. [ 1162.093018][ T4234] team_slave_0: entered promiscuous mode [ 1162.098730][ T4234] team_slave_1: entered promiscuous mode [ 1162.114595][ T4234] macvtap1: entered promiscuous mode [ 1162.120105][ T4234] team0: entered promiscuous mode [ 1162.129528][ T4234] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1162.138352][ T4234] team0: Device macvtap1 is already an upper device of the team interface [ 1162.150322][ T4234] team0: left promiscuous mode [ 1162.155415][ T4234] team_slave_0: left promiscuous mode [ 1162.160848][ T4234] team_slave_1: left promiscuous mode [ 1162.301753][ T4237] syz.9.24412[4237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1162.301824][ T4237] syz.9.24412[4237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1162.313408][ T4237] syz.9.24412[4237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1162.472805][ T4243] FAULT_INJECTION: forcing a failure. [ 1162.472805][ T4243] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.497542][ T4243] CPU: 1 UID: 0 PID: 4243 Comm: syz.9.24415 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1162.508332][ T4243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1162.518495][ T4243] Call Trace: [ 1162.521789][ T4243] [ 1162.524740][ T4243] dump_stack_lvl+0xf2/0x150 [ 1162.525079][ T4220] syz.1.24407 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1162.529382][ T4243] dump_stack+0x15/0x1a [ 1162.547688][ T4243] should_fail_ex+0x223/0x230 [ 1162.552390][ T4243] should_failslab+0x8f/0xb0 [ 1162.557050][ T4243] __kmalloc_noprof+0xab/0x3f0 [ 1162.561851][ T4243] ? kobject_get_path+0x85/0x160 [ 1162.566859][ T4243] ? kobject_uevent_env+0x1a4/0x550 [ 1162.572072][ T4243] kobject_get_path+0x85/0x160 [ 1162.576849][ T4243] kobject_uevent_env+0x1b9/0x550 [ 1162.581943][ T4243] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 1162.587835][ T4243] ? device_pm_check_callbacks+0x632/0x650 [ 1162.593654][ T4243] kobject_uevent+0x1c/0x30 [ 1162.598197][ T4243] device_del+0x6fa/0x780 [ 1162.602583][ T4243] ? mntput+0x49/0x70 [ 1162.606596][ T4243] device_unregister+0x15/0x40 [ 1162.611380][ T4243] bdi_unregister+0x307/0x3a0 [ 1162.616116][ T4243] del_gendisk+0x309/0x600 [ 1162.620570][ T4243] loop_control_ioctl+0x3ae/0x440 [ 1162.625701][ T4243] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1162.631396][ T4243] __se_sys_ioctl+0xc9/0x140 [ 1162.636030][ T4243] __x64_sys_ioctl+0x43/0x50 [ 1162.640634][ T4243] x64_sys_call+0x1690/0x2dc0 [ 1162.645368][ T4243] do_syscall_64+0xc9/0x1c0 [ 1162.649930][ T4243] ? clear_bhb_loop+0x55/0xb0 [ 1162.654619][ T4243] ? clear_bhb_loop+0x55/0xb0 [ 1162.659340][ T4243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.665280][ T4243] RIP: 0033:0x7f73d5e35d29 [ 1162.669725][ T4243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1162.689350][ T4243] RSP: 002b:00007f73d44a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1162.697775][ T4243] RAX: ffffffffffffffda RBX: 00007f73d6025fa0 RCX: 00007f73d5e35d29 [ 1162.705758][ T4243] RDX: 000000000000000a RSI: 0000000000004c81 RDI: 0000000000000003 [ 1162.713739][ T4243] RBP: 00007f73d44a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.721719][ T4243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.729793][ T4243] R13: 0000000000000000 R14: 00007f73d6025fa0 R15: 00007ffd64277ab8 [ 1162.737778][ T4243] [ 1162.740863][ T4220] CPU: 0 UID: 0 PID: 4220 Comm: syz.1.24407 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1162.751723][ T4220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1162.761808][ T4220] Call Trace: [ 1162.765146][ T4220] [ 1162.768235][ T4220] dump_stack_lvl+0xf2/0x150 [ 1162.772859][ T4220] dump_stack+0x15/0x1a [ 1162.777043][ T4220] dump_header+0x83/0x2d0 [ 1162.781454][ T4220] oom_kill_process+0x341/0x4c0 [ 1162.786323][ T4220] out_of_memory+0x9af/0xbe0 [ 1162.790927][ T4220] ? css_next_descendant_pre+0x11c/0x140 [ 1162.796664][ T4220] mem_cgroup_out_of_memory+0x13e/0x190 [ 1162.802248][ T4220] try_charge_memcg+0x508/0x7f0 [ 1162.807125][ T4220] obj_cgroup_charge_pages+0xbd/0x1a0 [ 1162.812578][ T4220] __memcg_kmem_charge_page+0x9d/0x170 [ 1162.818081][ T4220] __alloc_pages_noprof+0x1bc/0x340 [ 1162.823300][ T4220] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 1162.828838][ T4220] alloc_pages_noprof+0xe1/0x100 [ 1162.833844][ T4220] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 1162.839693][ T4220] __kvmalloc_node_noprof+0x121/0x170 [ 1162.845087][ T4220] ? ip_set_alloc+0x1f/0x30 [ 1162.849664][ T4220] ip_set_alloc+0x1f/0x30 [ 1162.854011][ T4220] hash_netiface_create+0x273/0x730 [ 1162.859274][ T4220] ? __nla_parse+0x40/0x60 [ 1162.863773][ T4220] ? __pfx_hash_netiface_create+0x10/0x10 [ 1162.869533][ T4220] ip_set_create+0x359/0x8a0 [ 1162.874224][ T4220] ? memchr+0x1/0x50 [ 1162.878251][ T4220] ? __nla_parse+0x40/0x60 [ 1162.882685][ T4220] nfnetlink_rcv_msg+0x4a9/0x570 [ 1162.887683][ T4220] netlink_rcv_skb+0x12c/0x230 [ 1162.892466][ T4220] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1162.897948][ T4220] nfnetlink_rcv+0x16c/0x15d0 [ 1162.902723][ T4220] ? kmem_cache_free+0xdc/0x2d0 [ 1162.907640][ T4220] ? nlmon_xmit+0x51/0x60 [ 1162.912065][ T4220] ? __kfree_skb+0x102/0x150 [ 1162.916738][ T4220] ? consume_skb+0x49/0x160 [ 1162.921318][ T4220] ? nlmon_xmit+0x51/0x60 [ 1162.925755][ T4220] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1162.931077][ T4220] ? __dev_queue_xmit+0xb6e/0x2090 [ 1162.936200][ T4220] ? ref_tracker_free+0x3a5/0x410 [ 1162.941253][ T4220] ? __dev_queue_xmit+0x186/0x2090 [ 1162.946382][ T4220] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 1162.951993][ T4220] netlink_unicast+0x599/0x670 [ 1162.956769][ T4220] netlink_sendmsg+0x5cc/0x6e0 [ 1162.961551][ T4220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1162.966895][ T4220] __sock_sendmsg+0x140/0x180 [ 1162.971629][ T4220] ____sys_sendmsg+0x312/0x410 [ 1162.976482][ T4220] __sys_sendmsg+0x19d/0x230 [ 1162.981126][ T4220] __x64_sys_sendmsg+0x46/0x50 [ 1162.985904][ T4220] x64_sys_call+0x2734/0x2dc0 [ 1162.990610][ T4220] do_syscall_64+0xc9/0x1c0 [ 1162.995202][ T4220] ? clear_bhb_loop+0x55/0xb0 [ 1162.999907][ T4220] ? clear_bhb_loop+0x55/0xb0 [ 1163.004595][ T4220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.010514][ T4220] RIP: 0033:0x7f54eec45d29 [ 1163.014934][ T4220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1163.034626][ T4220] RSP: 002b:00007f54ed2b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1163.043050][ T4220] RAX: ffffffffffffffda RBX: 00007f54eee35fa0 RCX: 00007f54eec45d29 [ 1163.051044][ T4220] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1163.059024][ T4220] RBP: 00007f54eecc1aa8 R08: 0000000000000000 R09: 0000000000000000 [ 1163.067064][ T4220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1163.075074][ T4220] R13: 0000000000000000 R14: 00007f54eee35fa0 R15: 00007ffff2e9d238 [ 1163.083060][ T4220] [ 1163.086620][ T4220] memory: usage 307200kB, limit 307200kB, failcnt 14687 [ 1163.093826][ T4220] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 1163.101832][ T4220] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 1163.109129][ T4220] Memory cgroup stats for /syz1: [ 1163.109878][ T4220] cache 0 [ 1163.117827][ T4220] rss 12288 [ 1163.120953][ T4220] shmem 0 [ 1163.123946][ T4220] mapped_file 0 [ 1163.127425][ T4220] dirty 0 [ 1163.130377][ T4220] writeback 4096 [ 1163.133948][ T4220] workingset_refault_anon 1608 [ 1163.138727][ T4220] workingset_refault_file 2525 [ 1163.143567][ T4220] swap 176128 [ 1163.146907][ T4220] swapcached 24576 [ 1163.150650][ T4220] pgpgin 909320 [ 1163.154206][ T4220] pgpgout 909314 [ 1163.157816][ T4220] pgfault 1192899 [ 1163.161555][ T4220] pgmajfault 1037 [ 1163.165189][ T4220] inactive_anon 0 [ 1163.169095][ T4220] active_anon 4096 [ 1163.172964][ T4220] inactive_file 0 [ 1163.176712][ T4220] active_file 0 [ 1163.180179][ T4220] unevictable 0 [ 1163.183718][ T4220] hierarchical_memory_limit 314572800 [ 1163.189359][ T4220] hierarchical_memsw_limit 9223372036854771712 [ 1163.195549][ T4220] total_cache 0 [ 1163.199037][ T4220] total_rss 12288 [ 1163.202674][ T4220] total_shmem 0 [ 1163.206140][ T4220] total_mapped_file 0 [ 1163.210177][ T4220] total_dirty 0 [ 1163.213648][ T4220] total_writeback 4096 [ 1163.217798][ T4220] total_workingset_refault_anon 1608 [ 1163.223115][ T4220] total_workingset_refault_file 2525 [ 1163.228390][ T4220] total_swap 176128 [ 1163.232224][ T4220] total_swapcached 24576 [ 1163.236467][ T4220] total_pgpgin 909320 [ 1163.240447][ T4220] total_pgpgout 909314 [ 1163.244613][ T4220] total_pgfault 1192899 [ 1163.248769][ T4220] total_pgmajfault 1037 [ 1163.252968][ T4220] total_inactive_anon 0 [ 1163.257184][ T4220] total_active_anon 4096 [ 1163.261428][ T4220] total_inactive_file 0 [ 1163.265614][ T4220] total_active_file 0 [ 1163.269584][ T4220] total_unevictable 0 [ 1163.273691][ T4220] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.24407,pid=4218,uid=0 [ 1163.288466][ T4220] Memory cgroup out of memory: Killed process 4218 (syz.1.24407) total-vm:93576kB, anon-rss:764kB, file-rss:22344kB, shmem-rss:128kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 1163.362461][ T4250] netlink: 'syz.9.24417': attribute type 13 has an invalid length. [ 1163.370444][ T4250] netlink: 'syz.9.24417': attribute type 27 has an invalid length. [ 1163.406821][ T4252] bridge_slave_0: default FDB implementation only supports local addresses [ 1163.492016][ T4257] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1163.622412][ T4262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.648678][ T4262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.695643][ T4267] team_slave_0: entered promiscuous mode [ 1163.701341][ T4267] team_slave_1: entered promiscuous mode [ 1163.713884][ T4270] loop3: detected capacity change from 0 to 1024 [ 1163.720976][ T4267] macvtap1: entered promiscuous mode [ 1163.726422][ T4267] team0: entered promiscuous mode [ 1163.733454][ T4267] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1163.742098][ T4267] team0: Device macvtap1 is already an upper device of the team interface [ 1163.751975][ T4267] team0: left promiscuous mode [ 1163.757130][ T4267] team_slave_0: left promiscuous mode [ 1163.762550][ T4267] team_slave_1: left promiscuous mode [ 1163.772760][ T4270] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.3.24425: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1163.852843][ T4275] loop3: detected capacity change from 0 to 1024 [ 1163.865710][ T4275] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.3.24426: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1164.016809][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x1 [ 1164.024455][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.031984][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.039497][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.047017][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.054462][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.065897][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.073334][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x2 [ 1164.080745][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.088222][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.095622][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.103078][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.110492][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x4 [ 1164.117944][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.125398][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.132836][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.140253][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.147655][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.155090][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.162501][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.170020][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.177601][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.185046][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.192487][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.199921][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.207414][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.215056][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.222588][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.230014][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.237501][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.244903][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.252328][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.259847][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.267380][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.274783][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.282283][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.289733][ T3373] hid-generic 0000:0000:0000.010F: unknown main item tag 0x0 [ 1164.306841][ T3373] hid-generic 0000:0000:0000.010F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1164.369481][ T4296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24431'. [ 1164.378680][ T4296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24431'. [ 1164.409915][ T4300] loop3: detected capacity change from 0 to 512 [ 1164.439253][ T4300] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1164.456870][ T4300] EXT4-fs (loop3): 1 truncate cleaned up [ 1164.546288][ T4304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24434'. [ 1164.617640][ T4307] dccp_invalid_packet: P.Data Offset(4) too small [ 1164.718058][ T4316] team_slave_0: entered promiscuous mode [ 1164.723861][ T4316] team_slave_1: entered promiscuous mode [ 1164.730265][ T4318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24436'. [ 1164.748077][ T4316] macvtap1: entered promiscuous mode [ 1164.753440][ T4316] team0: entered promiscuous mode [ 1164.779157][ T4316] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1164.792602][ T4316] team0: Device macvtap1 is already an upper device of the team interface [ 1164.817990][ T4316] team0: left promiscuous mode [ 1164.823066][ T4316] team_slave_0: left promiscuous mode [ 1164.828464][ T4316] team_slave_1: left promiscuous mode [ 1164.919460][ T4326] FAULT_INJECTION: forcing a failure. [ 1164.919460][ T4326] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.932306][ T4326] CPU: 0 UID: 0 PID: 4326 Comm: syz.9.24441 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1164.943171][ T4326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1164.953395][ T4326] Call Trace: [ 1164.956710][ T4326] [ 1164.959661][ T4326] dump_stack_lvl+0xf2/0x150 [ 1164.964332][ T4326] dump_stack+0x15/0x1a [ 1164.968578][ T4326] should_fail_ex+0x223/0x230 [ 1164.973386][ T4326] should_failslab+0x8f/0xb0 [ 1164.978020][ T4326] __kmalloc_noprof+0xab/0x3f0 [ 1164.982815][ T4326] ? security_sb_alloc+0x47/0x110 [ 1164.987887][ T4326] security_sb_alloc+0x47/0x110 [ 1164.992843][ T4326] alloc_super+0x108/0x5a0 [ 1164.997299][ T4326] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1165.002891][ T4326] sget_fc+0x259/0x670 [ 1165.006994][ T4326] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1165.012525][ T4326] ? __pfx_ramfs_fill_super+0x10/0x10 [ 1165.017928][ T4326] get_tree_nodev+0x28/0xf0 [ 1165.022516][ T4326] ramfs_get_tree+0x1c/0x30 [ 1165.027097][ T4326] vfs_get_tree+0x56/0x1e0 [ 1165.031582][ T4326] vfs_cmd_create+0x83/0x130 [ 1165.036288][ T4326] __se_sys_fsconfig+0x6a3/0x980 [ 1165.041354][ T4326] __x64_sys_fsconfig+0x67/0x80 [ 1165.046306][ T4326] x64_sys_call+0x2b58/0x2dc0 [ 1165.051041][ T4326] do_syscall_64+0xc9/0x1c0 [ 1165.055567][ T4326] ? clear_bhb_loop+0x55/0xb0 [ 1165.060305][ T4326] ? clear_bhb_loop+0x55/0xb0 [ 1165.065071][ T4326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.070993][ T4326] RIP: 0033:0x7f73d5e35d29 [ 1165.075455][ T4326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1165.095276][ T4326] RSP: 002b:00007f73d44a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1165.103704][ T4326] RAX: ffffffffffffffda RBX: 00007f73d6025fa0 RCX: 00007f73d5e35d29 [ 1165.111705][ T4326] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1165.119835][ T4326] RBP: 00007f73d44a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.127831][ T4326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.135810][ T4326] R13: 0000000000000000 R14: 00007f73d6025fa0 R15: 00007ffd64277ab8 [ 1165.143866][ T4326] [ 1165.174258][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x1 [ 1165.181747][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.189233][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.196642][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.204214][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.211788][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.222203][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.229793][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x2 [ 1165.237228][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.244783][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.248975][ T4330] batadv_slave_1: entered promiscuous mode [ 1165.252210][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.252235][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.252260][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x4 [ 1165.280842][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.288272][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.295762][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.301844][ T4329] batadv_slave_1: left promiscuous mode [ 1165.303154][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.316339][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.323746][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.331224][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.338768][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.346248][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.353688][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.361160][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.368654][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.376104][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.383615][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.391080][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.398490][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.405934][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.413370][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.420767][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.428304][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.435788][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.443218][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.450704][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.458170][ T8] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 1165.472397][ T8] hid-generic 0000:0000:0000.0110: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1165.591472][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 1165.591490][ T29] audit: type=1326 audit(1170.305:106981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.9.24447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1165.633463][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.9.24447'. [ 1165.642611][ T29] audit: type=1326 audit(1170.342:106982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.9.24447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1165.665907][ T29] audit: type=1326 audit(1170.342:106983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.9.24447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1165.689186][ T29] audit: type=1326 audit(1170.342:106984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.9.24447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1165.712704][ T29] audit: type=1326 audit(1170.342:106985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.9.24447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1165.735977][ T29] audit: type=1326 audit(1170.342:106986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.9.24447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1165.759239][ T29] audit: type=1326 audit(1170.342:106987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.9.24447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1165.782376][ T29] audit: type=1326 audit(1170.342:106988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.9.24447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1165.805636][ T29] audit: type=1326 audit(1170.342:106989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.9.24447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1165.828819][ T29] audit: type=1326 audit(1170.342:106990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.9.24447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1165.863469][ T1661] EXT4-fs unmount: 51 callbacks suppressed [ 1165.863487][ T1661] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.918119][ T4350] netlink: 28 bytes leftover after parsing attributes in process `syz.9.24454'. [ 1165.927318][ T4350] netlink: 28 bytes leftover after parsing attributes in process `syz.9.24454'. [ 1165.996091][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x1 [ 1166.003611][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.011079][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.018508][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.025963][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.033427][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.040841][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.048330][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x2 [ 1166.055790][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.063776][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.071325][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.078765][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.086277][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x4 [ 1166.093749][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.101186][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.108742][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.116192][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.123656][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.131092][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.135393][ T4370] netlink: 52 bytes leftover after parsing attributes in process `syz.9.24458'. [ 1166.138525][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.154975][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.162128][ T4370] bridge_slave_1: left allmulticast mode [ 1166.162570][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.168170][ T4370] bridge_slave_1: left promiscuous mode [ 1166.168341][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.175612][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.195839][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.203332][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.210808][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.218225][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.225687][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.233377][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.235921][ T4373] syz.1.24460[4373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1166.240861][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.241031][ T4373] syz.1.24460[4373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1166.252414][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.263037][ T4373] syz.1.24460[4373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1166.271098][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.271128][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.271179][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.271206][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.271231][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.271256][ T8] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 1166.281374][ T8] hid-generic 0000:0000:0000.0111: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1166.354217][ T4365] ebtables: ebtables: counters copy to user failed while replacing table [ 1166.365781][ T4370] bridge_slave_0: left allmulticast mode [ 1166.371451][ T4370] bridge_slave_0: left promiscuous mode [ 1166.377186][ T4370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.409219][ T4382] FAULT_INJECTION: forcing a failure. [ 1166.409219][ T4382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.422521][ T4382] CPU: 0 UID: 0 PID: 4382 Comm: syz.3.24463 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1166.433346][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1166.443524][ T4382] Call Trace: [ 1166.446806][ T4382] [ 1166.449742][ T4382] dump_stack_lvl+0xf2/0x150 [ 1166.454436][ T4382] dump_stack+0x15/0x1a [ 1166.458651][ T4382] should_fail_ex+0x223/0x230 [ 1166.463357][ T4382] should_fail+0xb/0x10 [ 1166.467538][ T4382] should_fail_usercopy+0x1a/0x20 [ 1166.472570][ T4382] _copy_from_iter+0xd5/0xd00 [ 1166.477268][ T4382] ? skb_set_owner_w+0x164/0x1b0 [ 1166.482293][ T4382] ? __virt_addr_valid+0x1ed/0x250 [ 1166.487438][ T4382] ? __check_object_size+0x364/0x520 [ 1166.492742][ T4382] skb_copy_datagram_from_iter+0xb3/0x460 [ 1166.498505][ T4382] ? skb_put+0xba/0x100 [ 1166.502688][ T4382] tun_get_user+0x1132/0x25c0 [ 1166.507411][ T4382] ? _parse_integer+0x27/0x30 [ 1166.512089][ T4382] ? ref_tracker_alloc+0x1f5/0x2f0 [ 1166.517344][ T4382] tun_chr_write_iter+0x188/0x240 [ 1166.522390][ T4382] vfs_write+0x77f/0x920 [ 1166.526692][ T4382] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1166.532324][ T4382] ksys_write+0xe8/0x1b0 [ 1166.536705][ T4382] __x64_sys_write+0x42/0x50 [ 1166.541313][ T4382] x64_sys_call+0x287e/0x2dc0 [ 1166.546019][ T4382] do_syscall_64+0xc9/0x1c0 [ 1166.550591][ T4382] ? clear_bhb_loop+0x55/0xb0 [ 1166.555270][ T4382] ? clear_bhb_loop+0x55/0xb0 [ 1166.559946][ T4382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.565981][ T4382] RIP: 0033:0x7f0c19825d29 [ 1166.570439][ T4382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1166.590059][ T4382] RSP: 002b:00007f0c17e91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1166.598488][ T4382] RAX: ffffffffffffffda RBX: 00007f0c19a15fa0 RCX: 00007f0c19825d29 [ 1166.606494][ T4382] RDX: 000000000000fdef RSI: 0000000020000580 RDI: 00000000000000c8 [ 1166.614462][ T4382] RBP: 00007f0c17e91090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.622473][ T4382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.630452][ T4382] R13: 0000000000000000 R14: 00007f0c19a15fa0 R15: 00007ffe1cc2b3d8 [ 1166.638585][ T4382] [ 1166.716280][ T4371] IPVS: Error joining to the multicast group [ 1166.750052][ T4385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24464'. [ 1166.817489][ T4389] FAULT_INJECTION: forcing a failure. [ 1166.817489][ T4389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.830615][ T4389] CPU: 1 UID: 0 PID: 4389 Comm: syz.1.24466 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1166.841422][ T4389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1166.851559][ T4389] Call Trace: [ 1166.854851][ T4389] [ 1166.857798][ T4389] dump_stack_lvl+0xf2/0x150 [ 1166.862505][ T4389] dump_stack+0x15/0x1a [ 1166.866859][ T4389] should_fail_ex+0x223/0x230 [ 1166.871558][ T4389] should_fail+0xb/0x10 [ 1166.875733][ T4389] should_fail_usercopy+0x1a/0x20 [ 1166.880823][ T4389] copy_page_from_iter_atomic+0x228/0xf80 [ 1166.886589][ T4389] ? shmem_write_begin+0xa2/0x180 [ 1166.891668][ T4389] ? shmem_write_begin+0xda/0x180 [ 1166.896774][ T4389] generic_perform_write+0x2f1/0x4a0 [ 1166.902098][ T4389] shmem_file_write_iter+0xc2/0xe0 [ 1166.907247][ T4389] do_iter_readv_writev+0x394/0x450 [ 1166.912527][ T4389] vfs_writev+0x2d4/0x880 [ 1166.916894][ T4389] ? proc_fail_nth_write+0x12a/0x150 [ 1166.922304][ T4389] ? mutex_lock+0xd/0x40 [ 1166.926598][ T4389] do_writev+0xf4/0x220 [ 1166.930769][ T4389] __x64_sys_writev+0x45/0x50 [ 1166.935681][ T4389] x64_sys_call+0x1fab/0x2dc0 [ 1166.940429][ T4389] do_syscall_64+0xc9/0x1c0 [ 1166.944946][ T4389] ? clear_bhb_loop+0x55/0xb0 [ 1166.949686][ T4389] ? clear_bhb_loop+0x55/0xb0 [ 1166.954378][ T4389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.960302][ T4389] RIP: 0033:0x7f54eec45d29 [ 1166.964726][ T4389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1166.984354][ T4389] RSP: 002b:00007f54ed2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1166.992772][ T4389] RAX: ffffffffffffffda RBX: 00007f54eee35fa0 RCX: 00007f54eec45d29 [ 1167.000801][ T4389] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000003 [ 1167.008840][ T4389] RBP: 00007f54ed2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.016855][ T4389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.024946][ T4389] R13: 0000000000000000 R14: 00007f54eee35fa0 R15: 00007ffff2e9d238 [ 1167.032951][ T4389] [ 1167.041791][ T4399] FAULT_INJECTION: forcing a failure. [ 1167.041791][ T4399] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1167.055082][ T4399] CPU: 1 UID: 0 PID: 4399 Comm: syz.5.24469 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1167.066032][ T4399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1167.076111][ T4399] Call Trace: [ 1167.079447][ T4399] [ 1167.082396][ T4399] dump_stack_lvl+0xf2/0x150 [ 1167.087033][ T4399] dump_stack+0x15/0x1a [ 1167.090999][ T4406] netlink: 28 bytes leftover after parsing attributes in process `syz.9.24472'. [ 1167.091273][ T4399] should_fail_ex+0x223/0x230 [ 1167.100364][ T4406] netlink: 28 bytes leftover after parsing attributes in process `syz.9.24472'. [ 1167.105010][ T4399] should_fail_alloc_page+0xfd/0x110 [ 1167.119367][ T4399] __alloc_pages_noprof+0x109/0x340 [ 1167.124676][ T4399] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 1167.130051][ T4399] folio_alloc_mpol_noprof+0x36/0x70 [ 1167.135405][ T4399] shmem_get_folio_gfp+0x3d1/0xd90 [ 1167.140976][ T4399] shmem_write_begin+0xa2/0x180 [ 1167.145831][ T4399] generic_perform_write+0x1a8/0x4a0 [ 1167.151156][ T4399] shmem_file_write_iter+0xc2/0xe0 [ 1167.156375][ T4399] vfs_write+0x77f/0x920 [ 1167.160635][ T4399] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1167.166534][ T4399] ksys_write+0xe8/0x1b0 [ 1167.170792][ T4399] __x64_sys_write+0x42/0x50 [ 1167.175479][ T4399] x64_sys_call+0x287e/0x2dc0 [ 1167.180659][ T4399] do_syscall_64+0xc9/0x1c0 [ 1167.185248][ T4399] ? clear_bhb_loop+0x55/0xb0 [ 1167.189936][ T4399] ? clear_bhb_loop+0x55/0xb0 [ 1167.194722][ T4399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.200638][ T4399] RIP: 0033:0x7f4d68565d29 [ 1167.205049][ T4399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1167.224700][ T4399] RSP: 002b:00007f4d66bd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1167.233567][ T4399] RAX: ffffffffffffffda RBX: 00007f4d68755fa0 RCX: 00007f4d68565d29 [ 1167.241579][ T4399] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000007 [ 1167.249644][ T4399] RBP: 00007f4d66bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.257632][ T4399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.265639][ T4399] R13: 0000000000000000 R14: 00007f4d68755fa0 R15: 00007ffe776ef308 [ 1167.272297][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x1 [ 1167.273625][ T4399] [ 1167.281035][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.291434][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.298958][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.306432][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.314115][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.350712][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.358226][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x2 [ 1167.365688][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.373129][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.380609][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.388123][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.395664][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x4 [ 1167.403086][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.410559][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.418187][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.425803][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.433460][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.433757][ T4416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24475'. [ 1167.440861][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.440888][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.464720][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.472212][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.479641][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.487076][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.494525][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.501924][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.509419][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.516835][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.524247][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.531673][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.539117][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.546513][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.553950][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.561409][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.568814][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.576248][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.583688][ T9] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1167.591977][ T9] hid-generic 0000:0000:0000.0112: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1167.639150][ T4421] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 1167.688549][ T4423] loop3: detected capacity change from 0 to 128 [ 1167.701664][ T4423] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1167.759558][ T4421] xt_hashlimit: max too large, truncated to 1048576 [ 1167.836807][ T1661] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1167.847345][ T4437] FAULT_INJECTION: forcing a failure. [ 1167.847345][ T4437] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.860119][ T4437] CPU: 1 UID: 0 PID: 4437 Comm: syz.5.24485 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1167.870918][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1167.880988][ T4437] Call Trace: [ 1167.884284][ T4437] [ 1167.887221][ T4437] dump_stack_lvl+0xf2/0x150 [ 1167.891834][ T4437] dump_stack+0x15/0x1a [ 1167.896101][ T4437] should_fail_ex+0x223/0x230 [ 1167.900829][ T4437] should_failslab+0x8f/0xb0 [ 1167.905503][ T4437] kmem_cache_alloc_noprof+0x52/0x320 [ 1167.910895][ T4437] ? vm_area_alloc+0x2c/0x130 [ 1167.915594][ T4437] vm_area_alloc+0x2c/0x130 [ 1167.920199][ T4437] __mmap_region+0x6b5/0x1400 [ 1167.924907][ T4437] mmap_region+0x164/0x1e0 [ 1167.929398][ T4437] do_mmap+0x718/0xb60 [ 1167.933507][ T4437] vm_mmap_pgoff+0x133/0x290 [ 1167.938147][ T4437] ksys_mmap_pgoff+0xd0/0x330 [ 1167.942852][ T4437] ? syscall_trace_enter+0x104/0x1f0 [ 1167.948169][ T4437] ? fpregs_assert_state_consistent+0x83/0xa0 [ 1167.954377][ T4437] x64_sys_call+0x1940/0x2dc0 [ 1167.959128][ T4437] do_syscall_64+0xc9/0x1c0 [ 1167.963761][ T4437] ? clear_bhb_loop+0x55/0xb0 [ 1167.968535][ T4437] ? clear_bhb_loop+0x55/0xb0 [ 1167.973223][ T4437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.979169][ T4437] RIP: 0033:0x7f4d68565d63 [ 1167.983614][ T4437] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 1168.003364][ T4437] RSP: 002b:00007f4d66bd6e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1168.011802][ T4437] RAX: ffffffffffffffda RBX: 00000000000005e9 RCX: 00007f4d68565d63 [ 1168.019812][ T4437] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 1168.027875][ T4437] RBP: 0000000020001742 R08: 00000000ffffffff R09: 0000000000000000 [ 1168.035857][ T4437] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 1168.043836][ T4437] R13: 00007f4d66bd6ef0 R14: 00007f4d66bd6eb0 R15: 00000000200006c0 [ 1168.051888][ T4437] [ 1168.128036][ T4447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24489'. [ 1168.177142][ T4456] FAULT_INJECTION: forcing a failure. [ 1168.177142][ T4456] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.189860][ T4456] CPU: 1 UID: 0 PID: 4456 Comm: syz.4.24493 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1168.200681][ T4456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1168.210753][ T4456] Call Trace: [ 1168.214040][ T4456] [ 1168.216978][ T4456] dump_stack_lvl+0xf2/0x150 [ 1168.221606][ T4456] dump_stack+0x15/0x1a [ 1168.225796][ T4456] should_fail_ex+0x223/0x230 [ 1168.230504][ T4456] should_failslab+0x8f/0xb0 [ 1168.235280][ T4456] __kmalloc_noprof+0xab/0x3f0 [ 1168.240066][ T4456] ? security_perf_event_alloc+0x45/0x120 [ 1168.245835][ T4456] ? perf_tp_event_init+0xad/0xd0 [ 1168.250920][ T4456] security_perf_event_alloc+0x45/0x120 [ 1168.256533][ T4456] perf_event_alloc+0x10eb/0x12e0 [ 1168.261881][ T4456] __se_sys_perf_event_open+0x7f2/0x2230 [ 1168.267548][ T4456] ? vfs_write+0x596/0x920 [ 1168.272013][ T4456] __x64_sys_perf_event_open+0x67/0x80 [ 1168.277586][ T4456] x64_sys_call+0x1deb/0x2dc0 [ 1168.282303][ T4456] do_syscall_64+0xc9/0x1c0 [ 1168.286818][ T4456] ? clear_bhb_loop+0x55/0xb0 [ 1168.291505][ T4456] ? clear_bhb_loop+0x55/0xb0 [ 1168.296189][ T4456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.302109][ T4456] RIP: 0033:0x7f2d694c5d29 [ 1168.306533][ T4456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.326153][ T4456] RSP: 002b:00007f2d67b37038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1168.334626][ T4456] RAX: ffffffffffffffda RBX: 00007f2d696b5fa0 RCX: 00007f2d694c5d29 [ 1168.342656][ T4456] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00000000200003c0 [ 1168.350711][ T4456] RBP: 00007f2d67b37090 R08: 0000000000000002 R09: 0000000000000000 [ 1168.358768][ T4456] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1168.366747][ T4456] R13: 0000000000000000 R14: 00007f2d696b5fa0 R15: 00007fff6054e798 [ 1168.374734][ T4456] [ 1168.432592][ T4466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.441331][ T4466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.450453][ T4463] xt_hashlimit: size too large, truncated to 1048576 [ 1168.503904][ T4467] team_slave_0: entered promiscuous mode [ 1168.509628][ T4467] team_slave_1: entered promiscuous mode [ 1168.516066][ T4467] macvtap1: entered promiscuous mode [ 1168.521442][ T4467] team0: entered promiscuous mode [ 1168.530296][ T4467] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1168.539263][ T4467] team0: Device macvtap1 is already an upper device of the team interface [ 1168.550583][ T4467] team0: left promiscuous mode [ 1168.555766][ T4467] team_slave_0: left promiscuous mode [ 1168.561198][ T4467] team_slave_1: left promiscuous mode [ 1168.562521][ T4472] FAULT_INJECTION: forcing a failure. [ 1168.562521][ T4472] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.579386][ T4472] CPU: 0 UID: 0 PID: 4472 Comm: syz.3.24496 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1168.590278][ T4472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1168.600361][ T4472] Call Trace: [ 1168.603737][ T4472] [ 1168.606674][ T4472] dump_stack_lvl+0xf2/0x150 [ 1168.611308][ T4472] dump_stack+0x15/0x1a [ 1168.615620][ T4472] should_fail_ex+0x223/0x230 [ 1168.620317][ T4472] should_failslab+0x8f/0xb0 [ 1168.624986][ T4472] kmem_cache_alloc_noprof+0x52/0x320 [ 1168.630394][ T4472] ? audit_log_start+0x34c/0x6b0 [ 1168.635360][ T4472] audit_log_start+0x34c/0x6b0 [ 1168.640155][ T4472] audit_seccomp+0x4b/0x130 [ 1168.644689][ T4472] __seccomp_filter+0x6fa/0x1180 [ 1168.649781][ T4472] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1168.655488][ T4472] ? vfs_write+0x596/0x920 [ 1168.659972][ T4472] ? __schedule+0x6fa/0x930 [ 1168.664581][ T4472] __secure_computing+0x9f/0x1c0 [ 1168.669736][ T4472] syscall_trace_enter+0xd1/0x1f0 [ 1168.674840][ T4472] do_syscall_64+0xaa/0x1c0 [ 1168.679365][ T4472] ? clear_bhb_loop+0x55/0xb0 [ 1168.684352][ T4472] ? clear_bhb_loop+0x55/0xb0 [ 1168.689088][ T4472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.695099][ T4472] RIP: 0033:0x7f0c19825d29 [ 1168.699521][ T4472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.719252][ T4472] RSP: 002b:00007f0c17e70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 1168.727685][ T4472] RAX: ffffffffffffffda RBX: 00007f0c19a16080 RCX: 00007f0c19825d29 [ 1168.735775][ T4472] RDX: 0000000000006000 RSI: 00000000200000c0 RDI: ffffffffffffffff [ 1168.743755][ T4472] RBP: 00007f0c17e70090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.751741][ T4472] R10: 0000000000000707 R11: 0000000000000246 R12: 0000000000000001 [ 1168.759721][ T4472] R13: 0000000000000000 R14: 00007f0c19a16080 R15: 00007ffe1cc2b3d8 [ 1168.767728][ T4472] [ 1168.792954][ T4471] netlink: 'syz.4.24500': attribute type 10 has an invalid length. [ 1168.813365][ T4471] team0: Device hsr_slave_0 failed to register rx_handler [ 1168.874808][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x1 [ 1168.882299][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1168.890004][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1168.897520][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1168.905116][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1168.908392][ T4484] syz.3.24503[4484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1168.912558][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1168.912705][ T4484] syz.3.24503[4484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1168.924286][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1168.935806][ T4484] syz.3.24503[4484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1168.943365][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x2 [ 1168.943395][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1168.943422][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1168.984623][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1168.992027][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1168.999485][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x4 [ 1169.007245][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.014809][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.022220][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.029657][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.037104][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.044601][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.052028][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.059534][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.067025][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.074633][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.082361][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.089968][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.097406][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.104794][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.112233][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.119726][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.127135][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.134611][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.142006][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.149421][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.156829][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.164249][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.171684][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.179213][ T9] hid-generic 0000:0000:0000.0113: unknown main item tag 0x0 [ 1169.189017][ T9] hid-generic 0000:0000:0000.0113: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1169.241701][ T4493] team_slave_0: entered promiscuous mode [ 1169.247420][ T4493] team_slave_1: entered promiscuous mode [ 1169.253722][ T4493] macvtap1: entered promiscuous mode [ 1169.259050][ T4493] team0: entered promiscuous mode [ 1169.265467][ T4493] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1169.273844][ T4493] team0: Device macvtap1 is already an upper device of the team interface [ 1169.284052][ T4493] team0: left promiscuous mode [ 1169.286648][ T4496] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1169.289071][ T4493] team_slave_0: left promiscuous mode [ 1169.301516][ T4493] team_slave_1: left promiscuous mode [ 1169.338405][ T4503] loop3: detected capacity change from 0 to 1024 [ 1169.370718][ T4503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1169.656256][ T4502] FAULT_INJECTION: forcing a failure. [ 1169.656256][ T4502] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1169.669597][ T4502] CPU: 1 UID: 0 PID: 4502 Comm: syz.4.24510 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1169.680430][ T4502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1169.690568][ T4502] Call Trace: [ 1169.693869][ T4502] [ 1169.696830][ T4502] dump_stack_lvl+0xf2/0x150 [ 1169.701445][ T4502] dump_stack+0x15/0x1a [ 1169.705611][ T4502] should_fail_ex+0x223/0x230 [ 1169.710349][ T4502] should_fail_alloc_page+0xfd/0x110 [ 1169.715755][ T4502] __alloc_pages_noprof+0x109/0x340 [ 1169.721098][ T4502] ___kmalloc_large_node+0x7a/0x120 [ 1169.726377][ T4502] __kmalloc_large_node_noprof+0x17/0xa0 [ 1169.732099][ T4502] __kmalloc_noprof+0x2b8/0x3f0 [ 1169.737037][ T4502] ? iovec_from_user+0x84/0x210 [ 1169.741915][ T4502] iovec_from_user+0x84/0x210 [ 1169.746639][ T4502] process_vm_rw+0x1c2/0x890 [ 1169.751343][ T4502] ? kstrtouint_from_user+0xb0/0xe0 [ 1169.756592][ T4502] ? __fget_files+0x17c/0x1c0 [ 1169.761376][ T4502] ? fput+0x1c4/0x200 [ 1169.765370][ T4502] ? ksys_write+0x176/0x1b0 [ 1169.769959][ T4502] __x64_sys_process_vm_readv+0x7a/0x90 [ 1169.775547][ T4502] x64_sys_call+0xb24/0x2dc0 [ 1169.780147][ T4502] do_syscall_64+0xc9/0x1c0 [ 1169.784660][ T4502] ? clear_bhb_loop+0x55/0xb0 [ 1169.789345][ T4502] ? clear_bhb_loop+0x55/0xb0 [ 1169.794031][ T4502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.799951][ T4502] RIP: 0033:0x7f2d694c5d29 [ 1169.804436][ T4502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1169.824053][ T4502] RSP: 002b:00007f2d67b37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 1169.832478][ T4502] RAX: ffffffffffffffda RBX: 00007f2d696b5fa0 RCX: 00007f2d694c5d29 [ 1169.840455][ T4502] RDX: 0000000000000002 RSI: 0000000020008400 RDI: 0000000000000207 [ 1169.848454][ T4502] RBP: 00007f2d67b37090 R08: 0000000000000286 R09: 0000000000000000 [ 1169.856515][ T4502] R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000001 [ 1169.864489][ T4502] R13: 0000000000000000 R14: 00007f2d696b5fa0 R15: 00007fff6054e798 [ 1169.872573][ T4502] [ 1170.156563][ T4514] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1170.184416][ T4518] syz.1.24515[4518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1170.184501][ T4518] syz.1.24515[4518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1170.196262][ T4518] syz.1.24515[4518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1170.294722][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x1 [ 1170.313635][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.321101][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.328551][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.335984][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.343411][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.353211][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.360669][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x2 [ 1170.368107][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.369240][ T4529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.375885][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.387622][ T4529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.391711][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.406951][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.414436][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x4 [ 1170.421904][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.429306][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.436796][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.444418][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.451900][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.459312][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.466691][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.474143][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.481535][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.488944][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.496338][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.503758][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.511184][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.518596][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.526040][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.533441][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.541072][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.548466][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.555862][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.563252][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.570681][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.578276][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.585697][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.593080][ T1029] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1170.601113][ T1029] hid-generic 0000:0000:0000.0114: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1170.654178][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x4 [ 1170.662114][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x2 [ 1170.669848][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.677512][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.685417][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.693266][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.700919][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.708799][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.716530][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.724272][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.731929][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.739646][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.747318][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.755107][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.762793][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.770482][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.778195][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.785913][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.793586][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.801260][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.808931][ T1029] hid-generic 0000:3000000:0000.0115: unknown main item tag 0x0 [ 1170.817323][ T1029] hid-generic 0000:3000000:0000.0115: hidraw0: HID v0.00 Device [sy] on syz0 [ 1170.830257][ T1661] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.933393][ T4551] syz.4.24529[4551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1170.933456][ T4551] syz.4.24529[4551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1170.945030][ T29] kauditd_printk_skb: 697 callbacks suppressed [ 1170.945044][ T29] audit: type=1326 audit(1175.319:107686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.9.24524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73d5e2cce7 code=0x7ffc0000 [ 1170.945284][ T4551] syz.4.24529[4551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1170.956683][ T29] audit: type=1326 audit(1175.319:107687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.9.24524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73d5dd1f29 code=0x7ffc0000 [ 1170.956719][ T29] audit: type=1326 audit(1175.319:107688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.9.24524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1170.957098][ T29] audit: type=1326 audit(1175.328:107689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.9.24524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73d5e2cce7 code=0x7ffc0000 [ 1171.081341][ T29] audit: type=1400 audit(1175.375:107690): avc: denied { execute_no_trans } for pid=4550 comm="syz.4.24529" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=6298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1171.110886][ T29] audit: type=1326 audit(1175.440:107691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.9.24524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73d5dd1f29 code=0x7ffc0000 [ 1171.133961][ T29] audit: type=1326 audit(1175.440:107692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.9.24524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73d5e2cce7 code=0x7ffc0000 [ 1171.157117][ T29] audit: type=1326 audit(1175.440:107693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.9.24524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73d5dd1f29 code=0x7ffc0000 [ 1171.181905][ T29] audit: type=1326 audit(1175.440:107694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.9.24524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f73d5e35d29 code=0x7ffc0000 [ 1171.205569][ T29] audit: type=1326 audit(1175.506:107695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.9.24524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73d5e2cce7 code=0x7ffc0000 [ 1171.262379][ T4564] syz.1.24536[4564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1171.287200][ T4565] loop3: detected capacity change from 0 to 256 [ 1171.311441][ T4565] FAT-fs (loop3): Directory bread(block 64) failed [ 1171.320169][ T4565] FAT-fs (loop3): Directory bread(block 65) failed [ 1171.328620][ T4565] FAT-fs (loop3): Directory bread(block 66) failed [ 1171.342921][ T4570] __nla_validate_parse: 9 callbacks suppressed [ 1171.342937][ T4570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24537'. [ 1171.348588][ T4565] FAT-fs (loop3): Directory bread(block 67) failed [ 1171.349148][ T4570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24537'. [ 1171.358592][ T4565] FAT-fs (loop3): Directory bread(block 68) failed [ 1171.381226][ T4565] FAT-fs (loop3): Directory bread(block 69) failed [ 1171.387966][ T4565] FAT-fs (loop3): Directory bread(block 70) failed [ 1171.394853][ T4565] FAT-fs (loop3): Directory bread(block 71) failed [ 1171.401696][ T4565] FAT-fs (loop3): Directory bread(block 72) failed [ 1171.408388][ T4565] FAT-fs (loop3): Directory bread(block 73) failed [ 1171.459167][ T4576] team_slave_0: entered promiscuous mode [ 1171.464939][ T4576] team_slave_1: entered promiscuous mode [ 1171.479012][ T4576] macvtap1: entered promiscuous mode [ 1171.484472][ T4576] team0: entered promiscuous mode [ 1171.493516][ T4576] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1171.502412][ T4576] team0: Device macvtap1 is already an upper device of the team interface [ 1171.514268][ T4576] team0: left promiscuous mode [ 1171.519448][ T4576] team_slave_0: left promiscuous mode [ 1171.524855][ T4576] team_slave_1: left promiscuous mode [ 1171.537364][ T4565] vxlan0: entered promiscuous mode [ 1171.542549][ T4565] vxlan0: entered allmulticast mode [ 1171.583232][ T4586] FAULT_INJECTION: forcing a failure. [ 1171.583232][ T4586] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1171.596585][ T4586] CPU: 1 UID: 0 PID: 4586 Comm: syz.4.24545 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1171.600376][ T4588] netlink: 3 bytes leftover after parsing attributes in process `syz.9.24546'. [ 1171.607418][ T4586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1171.607437][ T4586] Call Trace: [ 1171.607445][ T4586] [ 1171.632761][ T4586] dump_stack_lvl+0xf2/0x150 [ 1171.637392][ T4586] dump_stack+0x15/0x1a [ 1171.641572][ T4586] should_fail_ex+0x223/0x230 [ 1171.646273][ T4586] should_fail_alloc_page+0xfd/0x110 [ 1171.651592][ T4586] __alloc_pages_noprof+0x109/0x340 [ 1171.656898][ T4586] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 1171.662307][ T4586] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 1171.667696][ T4586] handle_mm_fault+0xdd7/0x2ac0 [ 1171.672584][ T4586] exc_page_fault+0x3b9/0x650 [ 1171.677329][ T4586] asm_exc_page_fault+0x26/0x30 [ 1171.682241][ T4586] RIP: 0033:0x7f2d69391b1b [ 1171.686722][ T4586] Code: 00 00 00 48 8d 3d fd 33 19 00 48 89 c1 31 c0 e8 6b 44 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 31 34 19 00 48 89 34 24 48 8b 14 24 48 8b [ 1171.706373][ T4586] RSP: 002b:00007f2d67b35fb0 EFLAGS: 00010202 [ 1171.712499][ T4586] RAX: 0000000000000000 RBX: 00007f2d696b5fa0 RCX: 0000000000000000 [ 1171.720551][ T4586] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000200 [ 1171.728553][ T4586] RBP: 00007f2d67b37090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.736586][ T4586] R10: 0000000020000200 R11: 0000000000000000 R12: 0000000000000001 [ 1171.744609][ T4586] R13: 0000000000000000 R14: 00007f2d696b5fa0 R15: 00007fff6054e798 [ 1171.752653][ T4586] [ 1171.756573][ T4586] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1171.860957][ T4592] netlink: 4 bytes leftover after parsing attributes in process `syz.9.24547'. [ 1171.958603][ T4603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24553'. [ 1171.967816][ T4603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24553'. [ 1172.069704][ T4611] tipc: Enabling of bearer rejected, failed to enable media [ 1172.152314][ T4617] bridge0: entered promiscuous mode [ 1172.162669][ T4617] macvtap1: entered promiscuous mode [ 1172.180578][ T4617] bridge0: port 3(macvtap1) entered blocking state [ 1172.187168][ T4617] bridge0: port 3(macvtap1) entered disabled state [ 1172.194680][ T4619] dccp_invalid_packet: P.Data Offset(4) too small [ 1172.201497][ T4618] dccp_invalid_packet: P.Data Offset(4) too small [ 1172.207865][ T4617] macvtap1: entered allmulticast mode [ 1172.213356][ T4617] bridge0: entered allmulticast mode [ 1172.225383][ T4617] macvtap1: left allmulticast mode [ 1172.230605][ T4617] bridge0: left allmulticast mode [ 1172.242000][ T4617] bridge0: left promiscuous mode [ 1172.563116][ T4628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24562'. [ 1172.711657][ T4636] batadv_slave_1: entered promiscuous mode [ 1172.801997][ T4639] ref_ctr_offset mismatch. inode: 0x4df offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 1172.900748][ T4631] batadv_slave_1: left promiscuous mode [ 1173.080372][ T4638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24566'. [ 1173.111008][ T4651] $Hÿ: renamed from bond0 (while UP) [ 1173.128397][ T4651] $Hÿ: entered promiscuous mode [ 1173.133510][ T4651] bond_slave_0: entered promiscuous mode [ 1173.140283][ T4651] bond_slave_1: entered promiscuous mode [ 1173.147598][ T4652] netlink: 4 bytes leftover after parsing attributes in process `syz.9.24572'. [ 1173.184315][ T4655] team_slave_0: entered promiscuous mode [ 1173.190071][ T4655] team_slave_1: entered promiscuous mode [ 1173.195900][ T4655] macvtap1: entered promiscuous mode [ 1173.201309][ T4655] team0: entered promiscuous mode [ 1173.209280][ T4655] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1173.220585][ T4655] team0: Device macvtap1 is already an upper device of the team interface [ 1173.229894][ T4655] team0: left promiscuous mode [ 1173.234899][ T4655] team_slave_0: left promiscuous mode [ 1173.240380][ T4655] team_slave_1: left promiscuous mode [ 1173.335958][ T4669] FAULT_INJECTION: forcing a failure. [ 1173.335958][ T4669] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.348671][ T4669] CPU: 0 UID: 0 PID: 4669 Comm: +}[@ Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1173.359026][ T4669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1173.369119][ T4669] Call Trace: [ 1173.372430][ T4669] [ 1173.375378][ T4669] dump_stack_lvl+0xf2/0x150 [ 1173.380087][ T4669] dump_stack+0x15/0x1a [ 1173.384351][ T4669] should_fail_ex+0x223/0x230 [ 1173.389128][ T4669] should_failslab+0x8f/0xb0 [ 1173.393749][ T4669] kmem_cache_alloc_node_noprof+0x59/0x320 [ 1173.399586][ T4669] ? __alloc_skb+0x10b/0x310 [ 1173.404263][ T4669] __alloc_skb+0x10b/0x310 [ 1173.408721][ T4669] ? audit_log_start+0x34c/0x6b0 [ 1173.413690][ T4669] audit_log_start+0x368/0x6b0 [ 1173.418519][ T4669] audit_seccomp+0x4b/0x130 [ 1173.423081][ T4669] __seccomp_filter+0x6fa/0x1180 [ 1173.428051][ T4669] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1173.430401][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.433809][ T4669] ? vfs_write+0x596/0x920 [ 1173.433851][ T4669] ? putname+0xcf/0xf0 [ 1173.441299][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.445618][ T4669] __secure_computing+0x9f/0x1c0 [ 1173.449680][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.457043][ T4669] syscall_trace_enter+0xd1/0x1f0 [ 1173.462087][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.469468][ T4669] ? fpregs_assert_state_consistent+0x83/0xa0 [ 1173.474519][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.481871][ T4669] do_syscall_64+0xaa/0x1c0 [ 1173.487981][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.495276][ T4669] ? clear_bhb_loop+0x55/0xb0 [ 1173.499785][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.507137][ T4669] ? clear_bhb_loop+0x55/0xb0 [ 1173.511820][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.511843][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.511874][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.519211][ T4669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.523910][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.531247][ T4669] RIP: 0033:0x7f2d694c5d29 [ 1173.531269][ T4669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.538677][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.545978][ T4669] RSP: 002b:00007f2d67b37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1173.551909][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.559261][ T4669] RAX: ffffffffffffffda RBX: 00007f2d696b5fa0 RCX: 00007f2d694c5d29 [ 1173.559280][ T4669] RDX: 0000000034e8c960 RSI: 0000000034e8c960 RDI: 0000000000000004 [ 1173.559297][ T4669] RBP: 00007f2d67b37090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.563708][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.583309][ T4669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.583328][ T4669] R13: 0000000000000000 R14: 00007f2d696b5fa0 R15: 00007fff6054e798 [ 1173.583356][ T4669] [ 1173.658092][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.665528][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.686882][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.694355][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x2 [ 1173.701794][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.709435][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.716916][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.724352][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.731798][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.739288][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.746749][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.754260][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.761452][ T4682] bridge0: entered promiscuous mode [ 1173.761683][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.767039][ T4682] macvtap1: entered promiscuous mode [ 1173.774270][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.774296][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.774323][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.783755][ T4682] bridge0: port 3(macvtap1) entered blocking state [ 1173.787004][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.794552][ T4682] bridge0: port 3(macvtap1) entered disabled state [ 1173.801892][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.812496][ T4682] macvtap1: entered allmulticast mode [ 1173.815889][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.822398][ T4682] bridge0: entered allmulticast mode [ 1173.829763][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.829791][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.839028][ T4682] macvtap1: left allmulticast mode [ 1173.842617][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.847982][ T4682] bridge0: left allmulticast mode [ 1173.855268][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.887958][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.895376][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.902831][ T3373] hid-generic 0000:0000:0000.0116: unknown main item tag 0x0 [ 1173.910793][ T3373] hid-generic 0000:0000:0000.0116: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1173.920704][ T4682] bridge0: left promiscuous mode [ 1173.961601][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24587'. [ 1174.050851][ T4698] team_slave_0: entered promiscuous mode [ 1174.056552][ T4698] team_slave_1: entered promiscuous mode [ 1174.063696][ T4698] macvtap1: entered promiscuous mode [ 1174.069030][ T4698] team0: entered promiscuous mode [ 1174.078863][ T4698] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1174.087536][ T4698] team0: Device macvtap1 is already an upper device of the team interface [ 1174.118836][ T4698] team0: left promiscuous mode [ 1174.124010][ T4698] team_slave_0: left promiscuous mode [ 1174.129430][ T4698] team_slave_1: left promiscuous mode [ 1174.330445][ T4717] ================================================================== [ 1174.338565][ T4717] BUG: KCSAN: data-race in __delete_from_swap_cache / folio_mapping [ 1174.346556][ T4717] [ 1174.348870][ T4717] write to 0xffffea000417caa8 of 8 bytes by task 4715 on cpu 1: [ 1174.356515][ T4717] __delete_from_swap_cache+0x1f0/0x290 [ 1174.362066][ T4717] delete_from_swap_cache+0x72/0xe0 [ 1174.367266][ T4717] folio_free_swap+0x1d8/0x1f0 [ 1174.372119][ T4717] do_swap_page+0x16a9/0x2550 [ 1174.376787][ T4717] handle_mm_fault+0x8e4/0x2ac0 [ 1174.381630][ T4717] __get_user_pages+0xf2c/0x2670 [ 1174.386565][ T4717] __mm_populate+0x25b/0x3b0 [ 1174.391150][ T4717] do_mlock+0x415/0x510 [ 1174.395302][ T4717] __x64_sys_mlock+0x36/0x40 [ 1174.399890][ T4717] x64_sys_call+0x26b2/0x2dc0 [ 1174.404560][ T4717] do_syscall_64+0xc9/0x1c0 [ 1174.409064][ T4717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.414975][ T4717] [ 1174.417292][ T4717] read to 0xffffea000417caa8 of 8 bytes by task 4717 on cpu 0: [ 1174.424853][ T4717] folio_mapping+0xdb/0x120 [ 1174.429364][ T4717] lru_add+0x89/0x440 [ 1174.433359][ T4717] folio_batch_move_lru+0x15f/0x230 [ 1174.438554][ T4717] lru_add_drain_cpu+0x7c/0x260 [ 1174.443400][ T4717] lru_add_drain+0x26/0x80 [ 1174.447838][ T4717] do_madvise+0x1cdc/0x2a70 [ 1174.452337][ T4717] __x64_sys_madvise+0x61/0x70 [ 1174.457114][ T4717] x64_sys_call+0x23ab/0x2dc0 [ 1174.461789][ T4717] do_syscall_64+0xc9/0x1c0 [ 1174.466283][ T4717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.472183][ T4717] [ 1174.474514][ T4717] value changed: 0x0000000000000402 -> 0x0000000000000000 [ 1174.481618][ T4717] [ 1174.483933][ T4717] Reported by Kernel Concurrency Sanitizer on: [ 1174.490086][ T4717] CPU: 0 UID: 0 PID: 4717 Comm: syz.1.24598 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1174.500852][ T4717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1174.511014][ T4717] ================================================================== [ 1174.710865][ T4717] FAULT_INJECTION: forcing a failure. [ 1174.710865][ T4717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.724028][ T4717] CPU: 1 UID: 0 PID: 4717 Comm: syz.1.24598 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 1174.734833][ T4717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1174.744956][ T4717] Call Trace: [ 1174.748234][ T4717] [ 1174.751283][ T4717] dump_stack_lvl+0xf2/0x150 [ 1174.755960][ T4717] dump_stack+0x15/0x1a [ 1174.760126][ T4717] should_fail_ex+0x223/0x230 [ 1174.764859][ T4717] should_fail+0xb/0x10 [ 1174.769078][ T4717] should_fail_usercopy+0x1a/0x20 [ 1174.774110][ T4717] _copy_from_user+0x1e/0xb0 [ 1174.778747][ T4717] do_pagemap_cmd+0x78/0x9a0 [ 1174.783346][ T4717] ? do_vfs_ioctl+0x1166/0x1530 [ 1174.788284][ T4717] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 1174.793571][ T4717] __se_sys_ioctl+0xc9/0x140 [ 1174.798217][ T4717] __x64_sys_ioctl+0x43/0x50 [ 1174.802813][ T4717] x64_sys_call+0x1690/0x2dc0 [ 1174.807585][ T4717] do_syscall_64+0xc9/0x1c0 [ 1174.812167][ T4717] ? clear_bhb_loop+0x55/0xb0 [ 1174.816954][ T4717] ? clear_bhb_loop+0x55/0xb0 [ 1174.821641][ T4717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.827621][ T4717] RIP: 0033:0x7f54eec45d29 [ 1174.832039][ T4717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.851805][ T4717] RSP: 002b:00007f54ed2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1174.860265][ T4717] RAX: ffffffffffffffda RBX: 00007f54eee35fa0 RCX: 00007f54eec45d29 [ 1174.868252][ T4717] RDX: 0000000020000140 RSI: 00000000c0606610 RDI: 0000000000000003 [ 1174.876289][ T4717] RBP: 00007f54ed2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.884257][ T4717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.892226][ T4717] R13: 0000000000000000 R14: 00007f54eee35fa0 R15: 00007ffff2e9d238 [ 1174.900278][ T4717]