last executing test programs: 14m11.745800465s ago: executing program 1 (id=621): syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="cf702e8cf671", @random="250481458598", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @ni={0x193}}}}}}, 0x0) 14m11.712549207s ago: executing program 1 (id=623): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000002bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140), 0x3200841, &(0x7f0000000380)={[{@nr_blocks={'nr_blocks', 0x3d, [0x37, 0x6b]}}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x40}}, 0x0) 14m11.416500124s ago: executing program 1 (id=631): syz_emit_ethernet(0x83, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xeb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) inotify_init() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7, 0xff, 0xb, 0x4, 0x0, 0x778a, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x5}, 0x1, 0x2, 0x1, 0x9, 0x50, 0x6, 0x401, 0x0, 0x7, 0x0, 0x4fac}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8, 0x0, 0x81}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) 14m11.079495974s ago: executing program 1 (id=641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x440, 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f0000000140)=ANY=[@ANYBLOB='=0x0000000000000001,nocompress,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',nojoliet,iocharset=cp1251,cruft,uid=', @ANYRESHEX, @ANYBLOB=',nocompress,sbsector=0x0000000000000001,map=off,map=normal,uid=', @ANYRESDEC=0x0, @ANYBLOB=',,'], 0x3, 0x9d5, &(0x7f00000023c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000052c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8a03c700000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095c8f004ef9a755f58cce7d092e3b021338e127215f0d7a04ab73ef3a65bd45095b30a6c1739f5e23aafb268a8303f3ade47595d23716167f1ad317297db47b0e3655dfbf86e779ca7bbfaf1368c0b54d5f406b87ebbec571fb292e53d35bb9c51455275143189009066d6a3960e10991550790b076fce922022949bafeef0498781a6665cd786049ee739ae9f2721b5969337"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000580)=ANY=[], 0xfe37, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000004140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004100)={&(0x7f0000005740)=ANY=[@ANYBLOB="14030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x314}, 0x1, 0x0, 0x0, 0x8001}, 0x400c050) unlink(&(0x7f0000000180)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x61) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5c00000010000104000000000000000000000000bb96c43cc126fd146a50f82599a02aee444ab2f5a738ebba74300482f5514f7a22873ef8aa197fcd6e774cf2c92a643345b01fcfc440edb19afaf1772ec057b886772f8cbb9f6afc366bb9c12983f75e36034aa1cf5acdfb2af8d68ef3d83b69ee9ce950f501d5a003f7f78ed8feecbbcf3134362b59c24cd5805f12ac40ee5d28f510be1de8fbcbdf29c805d257f8a05f7197c1f40b372700"/188, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090200000066726d00000000240002800800010000000000080002f7020000000800010001000000080001000100000008000300", @ANYRES32=r6, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000004c0)={@empty, @mcast1, @local, 0x8, 0x4, 0x81, 0x100, 0x2, 0x388, r6}) recvmmsg(r3, &(0x7f0000003e00)=[{{&(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000f40)=""/69, 0x45}, {&(0x7f0000000fc0)=""/185, 0xb9}, {&(0x7f0000000680)=""/52, 0x34}, {&(0x7f0000001080)=""/254, 0xfe}], 0x4, &(0x7f0000001180)=""/180, 0xb4}, 0x2}, {{&(0x7f0000001240)=@tipc=@name, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000d80)=""/1, 0x1}], 0x1, &(0x7f0000001300)=""/218, 0xda}, 0xfffffff7}, {{&(0x7f0000001400)=@qipcrtr, 0x80, &(0x7f0000001740)=[{&(0x7f0000001480)=""/131, 0x83}, {&(0x7f0000001600)=""/221, 0xdd}, {&(0x7f0000001540)=""/74, 0x4a}, {&(0x7f0000001700)=""/53, 0x35}], 0x4, &(0x7f0000001780)=""/191, 0xbf}, 0x5}, {{&(0x7f0000001840)=@un=@abs, 0x80, &(0x7f0000001b40)=[{&(0x7f00000018c0)=""/147, 0x93}, {&(0x7f0000001980)=""/164, 0xa4}, {&(0x7f0000001a40)=""/209, 0xd1}], 0x3, &(0x7f0000002dc0)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000001b80)=@x25, 0x80, &(0x7f0000002000)=[{&(0x7f0000001c00)}, {&(0x7f0000001c40)=""/25, 0x19}, {&(0x7f0000001c80)=""/217, 0xd9}, {&(0x7f0000001d80)=""/141, 0x8d}, {&(0x7f0000001e40)=""/219, 0xdb}, {&(0x7f0000001f40)=""/142, 0x8e}], 0x6, &(0x7f00000042c0)=""/4096, 0x1000}, 0x7f}, {{&(0x7f0000002080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000002100)=""/128, 0x80}, {&(0x7f0000002180)=""/134, 0x86}, {&(0x7f0000002240)=""/230, 0xe6}], 0x3, &(0x7f0000003dc0)=""/24, 0x18}, 0xffffffff}], 0x6, 0x41, &(0x7f0000003f80)={0x0, 0x989680}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000000040)='percpu_free_percpu\x00', r4, 0x0, 0x6}, 0x18) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000003fc0)="78000000180025e5a7fa49ff7d505d21d5f129509d07b9409b02ffff48000203be04020406050a08040c5b000900580004020a0000000d0085a168d0bf46d32345063600648d270016000a09000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004070b0015000a0000000000e000e218d1dd3b6ed538640f3250", 0x86, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004180)=ANY=[@ANYBLOB="e1f9ec2a4784710b350b4c75d40c4d14d12d9c5dcc7e26c8e073e6c9db388d56a7a8c1e8451c929a3d286e3b132a4dd7f3915b3226ade73dda43481d539a63f88d001e929dfbc9ba7343c5bcf5a2057e735e1cf977308e27b7ed65b4f0d1e335b5171396065e3530c3feb300e6c996992e9787a81dd79a353b0f47a7de45d8a290e394a88b9befc8484f83e888d5", @ANYRES8=r9, @ANYRESDEC=r2], 0x14}}, 0x0) 14m10.512434527s ago: executing program 1 (id=647): syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="cf702e8cf671", @random="250481458598", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @ni={0x193}}}}}}, 0x0) 14m10.368088935s ago: executing program 1 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYBLOB="0000b702000003000011850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x30}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="d009e590cbb3", 'bond0\x00'}}) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) process_mrelease(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) signalfd4(r0, &(0x7f0000000240)={[0x38]}, 0x8, 0x80800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad6706000002000000070300000ee60000bf250000000000002d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1003f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780055c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a823e28f359608ea326c77a1aa17318f392a0ec6c188916f4149c503027feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d604f45cfe88b30c170000000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYBLOB='\b', @ANYRES32=0x0, @ANYBLOB="640000001000030400"/20, @ANYRES8=r6], 0x64}}, 0x0) 14m10.337429388s ago: executing program 32 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYBLOB="0000b702000003000011850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x30}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="d009e590cbb3", 'bond0\x00'}}) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) process_mrelease(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) signalfd4(r0, &(0x7f0000000240)={[0x38]}, 0x8, 0x80800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYBLOB='\b', @ANYRES32=0x0, @ANYBLOB="640000001000030400"/20, @ANYRES8=r6], 0x64}}, 0x0) 6m21.595451583s ago: executing program 2 (id=11929): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000100003040000000000000000000000c8", @ANYRES32=0x0, @ANYBLOB="42420000000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 6m21.582258054s ago: executing program 2 (id=11930): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, 0x0, &(0x7f00000008c0)}, 0x20) 6m21.528410937s ago: executing program 2 (id=11931): r0 = syz_io_uring_setup(0x3cfb, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000200)) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 6m21.527831247s ago: executing program 2 (id=11932): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @random="424e1aa2e0d4", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1f, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7}, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, 0x0, 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000ab0000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000929fb328332ee3194272999300"/40], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6m21.387740756s ago: executing program 2 (id=11935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="7481d9810002ee60bb493c839adb180000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000f8ff0000000000000004", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0340000001"], 0x48) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffff9}, 0x1220, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r8}, 0x10) r9 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_access(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73"], 0x56) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) chroot(0x0) r12 = socket$rds(0x15, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1f00, 0x12) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4980800}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x7c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ppoll(&(0x7f00000006c0)=[{r11, 0x22a}, {r1, 0x40}], 0x2, &(0x7f0000000700), &(0x7f0000000740)={[0x8000000000000000]}, 0x8) sendmsg$rds(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/81, 0xfffffffffffffe8b}, {&(0x7f0000000900)=""/22, 0x16}, {&(0x7f0000000500)=""/93, 0x5d}, {&(0x7f0000000580)=""/214, 0xd6}], 0x4, 0x0, 0x0, 0x1008}, 0x841) 6m21.283684512s ago: executing program 2 (id=11939): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c200000000000000000086dd60ecff8000181100fc000000000000000000000000000000ff020000000000000000000000000001"], 0x0) (async) r4 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) (async) sendmmsg$inet(r1, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004000) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40c8, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xfb, 0x496, &(0x7f0000000f40)="$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") (async) lsetxattr$system_posix_acl(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in=@remote, 0x0, 0x0, 0x3, 0xfffd, 0x2, 0x0, 0x0, 0x2c}, 0x0, 0x1}, [@migrate={0x50, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x2}, @in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x33, 0x0, 0x0, 0x40, 0xa, 0xa}]}]}, 0xa0}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) creat(&(0x7f0000000080)='./bus\x00', 0x0) chown(0x0, 0xee00, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x4}, {0xfffffffe, 0x7}], 0xee01}, 0x18, 0x0) 6m6.192902888s ago: executing program 33 (id=11939): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c200000000000000000086dd60ecff8000181100fc000000000000000000000000000000ff020000000000000000000000000001"], 0x0) (async) r4 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) (async) sendmmsg$inet(r1, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004000) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40c8, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xfb, 0x496, &(0x7f0000000f40)="$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") (async) lsetxattr$system_posix_acl(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in=@remote, 0x0, 0x0, 0x3, 0xfffd, 0x2, 0x0, 0x0, 0x2c}, 0x0, 0x1}, [@migrate={0x50, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x2}, @in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x33, 0x0, 0x0, 0x40, 0xa, 0xa}]}]}, 0xa0}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) creat(&(0x7f0000000080)='./bus\x00', 0x0) chown(0x0, 0xee00, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x4}, {0xfffffffe, 0x7}], 0xee01}, 0x18, 0x0) 5m27.16942111s ago: executing program 5 (id=12718): r0 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x410, 0x13290, 0x82, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000ac0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0xffffffff, 0x5d9a, 0x1, 0x0, 0x0) 5m27.103531654s ago: executing program 5 (id=12719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) (fail_nth: 1) 5m26.810453661s ago: executing program 5 (id=12720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x101, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = gettid() rt_tgsigqueueinfo(0x0, r3, 0x11, &(0x7f0000000000)={0x23, 0x0, 0xa}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, 0x0, &(0x7f0000000140)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) 5m26.546865597s ago: executing program 5 (id=12724): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@nodioread_nolock}, {@bsdgroups}, {@minixdf}, {@barrier}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xa}, 0x100000, 0x5777025c, 0x3, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed7f000000000000f3ffffff18010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffbfffd}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x20000010) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000b40)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x8, 0xfffffffe, {{0x2c, 0x4, 0x1, 0x5, 0xb0, 0x64, 0x0, 0x40, 0x2f, 0x0, @remote, @local, {[@timestamp={0x44, 0x24, 0x8a, 0x0, 0x1, [0x3, 0x2, 0x4, 0x6a, 0x0, 0xa129, 0x7, 0x4]}, @end, @generic={0x83, 0xa, "06b2497bf1af6954"}, @timestamp_prespec={0x44, 0x24, 0xea, 0x3, 0x7, [{@local, 0x200}, {@loopback, 0x4}, {@rand_addr=0x64010100, 0x185b}, {@multicast1, 0xfff}]}, @timestamp_addr={0x44, 0x24, 0xa7, 0x1, 0x1, [{@remote, 0x7}, {@multicast1, 0x8}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @timestamp_addr={0x44, 0x24, 0xc5, 0x1, 0x7, [{@multicast2, 0x50000}, {@loopback, 0x6}, {@multicast2, 0x6}, {@broadcast, 0x1}]}, @noop]}}}}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x9) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000440)='0', 0x1}], 0x2) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100), &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r9, 0x11, &(0x7f0000000200)="ef7ece16", 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400f38, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x286c188, 0x0, 0xff, 0x0, 0x0) write$selinux_load(r2, &(0x7f0000001340)={0xf97cff8c, 0x8, 'SE Linux', "b096a45f4b8cb0229d198a977b1d1e68"}, 0x20) 5m26.055049396s ago: executing program 5 (id=12733): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000640)=@ax25={{0x3, @null, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)="b72c23939deb61aa85fb6ec8cbb5b5b68eb4925998e0cab6a4538f831df5affd52768e67741086d2ce27e957027f9432861df8f12d967d411208083d163f0d041cf6080de10a7dd26bc028dca0e9fb9b85e234c5713b4d616e37aeb9fb965dc541d76b1e0776101a2e782d6cf81ddd528e2ab573c1e05bd748e9438f2d042e4d", 0x80}, {&(0x7f0000000800)="28d35616432a46773a768340d43bf9bb881149ff318edadaa75900d39fe412717077094be72988e32db334ca35e532a6bae426932bebc2005e736136a9bdfc26f6f9c43864038f7c9d2aa0e3feb5bb1367a8affee58940ee41de601e9b89e84436ef03ae93debaaf2c920de95a62d11b311919b9368ad03093648fc2db41f5d004896450e4506e60a9bb397ddf10888a6144cc57c74c25e8f048f2242f4e134d6018ddcb18bfc1c41efeff627df0692e3b6c8a2b13008f3985b257b9b549d218f864d6b0f69def900178507e0fa8c7112d43bde296116ee947005603655ac787cb6158efa4de55993f", 0xe9}], 0x2}, 0x588cb169abc30ca4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000007c0)='kfree\x00', r1}, 0x18) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev, 0x20000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/152, 0x98}], 0x1, 0x0, 0x10000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000500)='tegra_dma_complete_cb\x00', r1, 0x0, 0xe}, 0x18) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000200)=0xb) 5m25.769605913s ago: executing program 5 (id=12749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="7481d9810002ee60bb493c839adb180000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000f8ff0000000000000004", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0340000001"], 0x48) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffff9}, 0x1220, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 5m25.769159502s ago: executing program 34 (id=12749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="7481d9810002ee60bb493c839adb180000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000f8ff0000000000000004", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0340000001"], 0x48) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffff9}, 0x1220, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 2m22.113816081s ago: executing program 0 (id=15736): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigsuspend(&(0x7f0000000000)={[0x2]}, 0x8) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 2m21.28425455s ago: executing program 0 (id=15751): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) getpgid(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) memfd_create(0x0, 0xc) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800080, &(0x7f0000000180)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x148a}}]}, 0x3, 0x45c, &(0x7f0000000f00)="$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") fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) 2m19.817186026s ago: executing program 0 (id=15764): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m19.781618258s ago: executing program 0 (id=15765): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m19.739356011s ago: executing program 0 (id=15766): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") lsetxattr$security_capability(&(0x7f0000000780)='./file0\x00', &(0x7f0000000540), &(0x7f0000000600)=@v1={0x1000000, [{0x4, 0x8000}]}, 0xc, 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000bc0)='skb_copy_datagram_iovec\x00', r4}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f00000000c0)='.\x00', 0xa4000061) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close(r8) pwritev(r5, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r9 = syz_open_dev$vcsu(&(0x7f0000000140), 0x80000001, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r4, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x3, 0x2b, &(0x7f0000002380)=ANY=[@ANYBLOB="180000000600000000000000fbffff", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085100000feffffff18490000feffffff0000000000000000d503c0fffbffffff185a000004000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000077b700007b8af8ff00000000bfa200000000000007020000000000000000000008000000a47d4d8c16da348a83bdfa01000000850000008200000075a30000040000001f090200fcffffffbf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000906edf8c02f838a237fb735b0138d95faf04e86f2175024b703f42c1357e3c5fc91789014511b219c7aa80d80d04790033049a59d02f38f6c4e796682063"], 0xfffffffffffffffd, 0x8001, 0x0, 0x0, 0x40f00, 0x50, '\x00', r10, @sched_cls=0x21fc7465b8018f95, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0xd, 0x1d, 0x1}, 0x10, r11, 0xffffffffffffffff, 0x6, &(0x7f0000000c00)=[r3, r0, r3, r0, r3], &(0x7f0000000c40)=[{0x1, 0x5, 0x3, 0x3}, {0x4, 0x3, 0xf, 0xb}, {0x2, 0x5, 0x2, 0x7}, {0x1, 0x1, 0xb, 0x9}, {0x5, 0x5, 0x6, 0xa}, {0x0, 0x3, 0x1, 0x2}], 0x10, 0x6, @void, @value}, 0x94) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b369293", 0x29, 0x0) 2m19.600529119s ago: executing program 0 (id=15767): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) rt_sigqueueinfo(0x0, 0x2a, &(0x7f0000000280)={0x2d, 0x5, 0x40000000}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=@ipv6_newroute={0x4c, 0x18, 0x1, 0x0, 0x8000, {}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x24, 0x3, r3}}, @RTA_UID={0x8, 0x19, 0xee01}, @RTA_PRIORITY={0x8, 0x6, 0x4ee9}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @local}}]}, 0x4c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x9135}, 0x18) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x80, 0x6}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x48, 0x0) prctl$PR_GET_FP_MODE(0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r10, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r11, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7f}, @val={0x8, 0x3, r12}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4c000) close_range(r9, 0xffffffffffffffff, 0x0) 2m5.232261483s ago: executing program 35 (id=15767): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) rt_sigqueueinfo(0x0, 0x2a, &(0x7f0000000280)={0x2d, 0x5, 0x40000000}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=@ipv6_newroute={0x4c, 0x18, 0x1, 0x0, 0x8000, {}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x24, 0x3, r3}}, @RTA_UID={0x8, 0x19, 0xee01}, @RTA_PRIORITY={0x8, 0x6, 0x4ee9}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @local}}]}, 0x4c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x9135}, 0x18) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x80, 0x6}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x48, 0x0) prctl$PR_GET_FP_MODE(0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r10, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r11, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7f}, @val={0x8, 0x3, r12}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4c000) close_range(r9, 0xffffffffffffffff, 0x0) 4.057529382s ago: executing program 4 (id=17917): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="140000000000000001000000010000", @ANYRES32=r2, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x400000, 0x100000000000000) 2.067329908s ago: executing program 7 (id=17939): syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x7, 0xcdf}, 0x8006, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syncfs(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0xfb, 0x11fd, &(0x7f0000002480)="$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") truncate(&(0x7f0000000380)='./file2/file0\x00', 0xfffffffffffffffc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000003d00fa00deff13090000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x3cfb, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000200)) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) futimesat(r1, &(0x7f0000000080)='./file2\x00', &(0x7f0000000300)={{0x77359400}, {0x77359400}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) inotify_init() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110f2f1c000100000001000016000000"], 0x64}}, 0x0) 1.903769358s ago: executing program 7 (id=17945): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 1.848203292s ago: executing program 7 (id=17947): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'wg2\x00'}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f000011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) 1.785007585s ago: executing program 7 (id=17948): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800009d7b99ee6c7649f8404729e82357000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f00000008c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000100)={0x8000, 0x7fff, 0x6, 0xc, 0xe, "aa91fdfd7b970cc9"}) r5 = fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) unlink(&(0x7f00000001c0)='./control/file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x315, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x3, 0xf}, {0xb}, {0xffe0, 0x1}}}, 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4, '\x00', r7, r6, 0x1, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) rmdir(&(0x7f0000000040)='./control\x00') getgid() syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22010006, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@test_dummy_encryption}, {@block_validity}, {@grpjquota, 0x2e}, {@barrier}, {@orlov}, {@jqfmt_vfsv1}, {@bsdgroups}], [], 0x2c}, 0x84, 0x4b9, &(0x7f0000000ac0)="$eJzs3M1rHOUfAPDvTF763qT99af2RRutYLCaNGm1PXiootCLIOihHmMaS23aShPBlmKjSD1K/wL1KAievHhSEFFPFa96F6FIQVo9SGR2Z5Ld7Es3m5fV7ucDm32emWf2eb4z8+w+O89OAuhaQ9mfJGJrRPwcEQPlbHWBofLTnVtXJv+8dWUyifn5l39PSuVu37oyWRQtttuSZ4bTiPT9JPbWqXfm0uWzE9PTUxfz/OjsuTdHZy5dfvLMuYnTU6enzo8fO3bk8NjRp8efWpU4s7hu73nnwr7dJ169/uLkfLz2/WdZe7fm6yvjKBtccZ1DMRTzucWl1/84+sqKX/pfZ1tFOuntYENYlp6IyA5XX6n/D0RPLB68gXjhvYXMNx1qILBmss+mHTVLe/LndOHzC7gXJfo4dKniEz/7/ls81nP80Wk3n83+TpXi769a0xtp9l12MKK/YkS01PEV1r81Ik7O/fVR9oi61yEAAFbXV9n454l647807qsotz2fQxmMiIMRsTMi/hcRuyLi/xGlsvdHxAPLrH9oSb52/PPjprYCa1E2/nsmn9sqHuU1aV4iWchtK8Xfl7x+ZnrqUL5PhqNvQ5Yfa1LH18//9GGjdUMV47/skdVfjAXzdvzWu6F6m1MTsxMrCLnKzXcj9vTWiz9ZmAnI9sDuiNjTxutn++zM45/uy9Lbt9Suv3v8TazCPNP8JxGPlY//XCyJv5CUa2o0Pzm6MaanDo0WZ0WtH25ce6ky31eabSmrin9jazFtbD/cGtnx31z3/M/jL7pBMV87s/w6rv3yQcPvNLXHP4mTc5Ul8vO/4l0gO//7k/IkavGd7e2J2dmLYxH9+YKq5eOL2xb5onwW//CB+v1/Z8TfH+fb7Y2I7CR+MCIeioj9edsfjohHIuJAk/i/e+7RN5rvodrzP22+warJ4j/V7PhHDCaV8/VtJHrOfvtlo/pbe/87UkoN50taef9rtYEr2XcAAADwX5GW5qCTdKRIL16ail2xOZ2+MDN7cCjeOn+qPFc9GH1pcaVroOJ66Fh+bbjIjy/JH46IHaVfGm0q5UcmL0xv62TgQOlenar+H2k6MlJe92ujH70A944Gc071J14r7w78/Iu1aRCwbtyvCd1L/4fupf9D96rs/zc62A5g/dX7/L8acacDTQHWmfE/dC/9H7qX/g/dS/+HrlR7S3zxq7927vRfTOw8saLN1zwxP7Amrzy3/K161ijSqPynHQ0TSUS0V0Wkzcv0t1B7xxLpXcscb3O3LCOxP09siIhWt7q6bnu1s+9LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAq+WfAAAA//9IqNo4") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) 1.502594051s ago: executing program 8 (id=17953): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000640)=@ax25={{0x3, @null, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)="b72c23939deb61aa85fb6ec8cbb5b5b68eb4925998e0cab6a4538f831df5affd52768e67741086d2ce27e957027f9432861df8f12d967d411208083d163f0d041cf6080de10a7dd26bc028dca0e9fb9b85e234c5713b4d616e37aeb9fb965dc541d76b1e0776101a2e782d6cf81ddd528e2ab573c1e05bd748e9438f2d042e4d", 0x80}, {&(0x7f0000000800)="28d35616432a46773a768340d43bf9bb881149ff318edadaa75900d39fe412717077094be72988e32db334ca35e532a6bae426932bebc2005e736136a9bdfc26f6f9c43864038f7c9d2aa0e3feb5bb1367a8affee58940ee41de601e9b89e84436ef03ae93debaaf2c920de95a62d11b311919b9368ad03093648fc2db41f5d004896450e4506e60a9bb397ddf10888a6144cc57c74c25e8f048f2242f4e134d6018ddcb18bfc1c41efeff627df0692e3b6c8a2b13008f3985b257b9b549d218f864d6b0f69def900178507e0fa8c7112d43bde296116ee947005603655ac787cb6158efa4de55993f", 0xe9}], 0x2}, 0x588cb169abc30ca4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000007c0)='kfree\x00', r1}, 0x18) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev, 0x20000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/152, 0x98}], 0x1, 0x0, 0x10000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000500)='tegra_dma_complete_cb\x00', r1, 0x0, 0xe}, 0x18) r5 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) close(r5) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000600), 0xfffffffffffffffc, 0x0) fremovexattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240), 0x0, 0xfffffffe, 0x3) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000200)=0xb) 1.480220403s ago: executing program 6 (id=17955): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000040, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, 0x625a, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$sndseq(0xffffff9c, &(0x7f0000008380), 0x20880) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000083c0)={0x81, 0x1, 'client1\x00', 0x1, "0e7cb065b6d6c369", "3df19099393fcb8b926920e653dcf30e8cb4e5e83da41d88aa401b6b18cc1e45", 0x9, 0x8}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x24e040, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x44542, 0xc2) ftruncate(r3, 0xee72) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x2000002389a) sendfile(r2, r3, 0x0, 0x8000fffffffe) r6 = dup3(r1, r2, 0x80000) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x4c, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYRES16=r10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES16=r3, @ANYRES8=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000000), &(0x7f00000005c0)=r12}, 0x20) 1.418815107s ago: executing program 8 (id=17956): syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x7, 0xcdf}, 0x8006, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syncfs(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0xfb, 0x11fd, &(0x7f0000002480)="$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") truncate(&(0x7f0000000380)='./file2/file0\x00', 0xfffffffffffffffc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000003d00fa00deff13090000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x3cfb, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000200)) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) futimesat(r1, &(0x7f0000000080)='./file2\x00', &(0x7f0000000300)={{0x77359400}, {0x77359400}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) inotify_init() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110f2f1c000100000001000016000000"], 0x64}}, 0x0) 1.291159524s ago: executing program 8 (id=17957): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.236247947s ago: executing program 8 (id=17958): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x0, 0x1000000, 0x25dfdbfd}, 0x14}}, 0x40040c5) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) fremovexattr(r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)={[{@nolazytime}]}, 0xfe, 0x507, &(0x7f0000000f40)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x0) writev(r0, 0x0, 0x0) pipe(&(0x7f00000001c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="120000000a000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000000000000002000000000000000000433f00f80c00ecddfe3300f4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.223153558s ago: executing program 6 (id=17959): syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x43, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x7, 0xcdf}, 0x8006, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syncfs(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0xfb, 0x11fd, &(0x7f0000002480)="$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") truncate(&(0x7f0000000380)='./file2/file0\x00', 0xfffffffffffffffc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000003d00fa00deff13090000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x3cfb, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000200)) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) futimesat(r1, &(0x7f0000000080)='./file2\x00', &(0x7f0000000300)={{0x77359400}, {0x77359400}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) inotify_init() r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 1.128290234s ago: executing program 4 (id=17961): socket$netlink(0x10, 0x3, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0004000000000000000000000000000001000000326f8be8f61e8456e9bc54b8d075b1b61a25d940000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r3, 0x0, 0x0) poll(&(0x7f0000000080)=[{r3}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000007a400000000000000000181100000f88025d24b0c0b1cb4c12f02f48d454c5a7e2", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x2, 0x6}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.068273337s ago: executing program 6 (id=17962): socket$netlink(0x10, 0x3, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0004000000000000000000000000000001000000326f8be8f61e8456e9bc54b8d075b1b61a25d940000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r3, 0x0, 0x0) poll(&(0x7f0000000080)=[{r3}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000007a400000000000000000181100000f88025d24b0c0b1cb4c12f02f48d454c5a7e2", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x2, 0x6}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 939.077005ms ago: executing program 7 (id=17963): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000200)={[{@init_itable}, {@abort}]}, 0x1, 0x410, &(0x7f0000000600)="$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") r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0\x00', r5}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xb00, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) fchdir(r5) 764.451875ms ago: executing program 4 (id=17964): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 761.568755ms ago: executing program 6 (id=17965): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r1, r2, &(0x7f00000001c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) fallocate(r2, 0x3, 0x604, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 759.338605ms ago: executing program 4 (id=17966): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff7fffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 743.861176ms ago: executing program 3 (id=17967): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x5c23, 0x0, &(0x7f0000000440), 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x3, 0x9) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x8010) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f0000000a80)={@dev={0xac, 0x14, 0x14, 0x24}, @remote, 0x0, "839c954a5c60ed3634f8ab336136e5624704d61bddf95858e70432e8edb48945", 0x9, 0x200, 0x9, 0x5}, 0x3c) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x7fffffe, 0x3f8, 0x210, 0x100, 0x100, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e22a239a6bb651a9837df08bc7f880efe7126f5d56b33dd54f5db150ee26"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x4a4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) syz_io_uring_setup(0x58e0, &(0x7f0000000940)={0x0, 0x431f, 0x10000, 0x3, 0x105}, &(0x7f0000000a00), &(0x7f0000000b40)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 734.272507ms ago: executing program 8 (id=17968): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) chdir(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1600000000000000040000000001000000", @ANYRES32=0x1, @ANYBLOB="00000000000000001900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)=r1}, 0x20) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x401, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x40000) mq_open(0x0, 0x40, 0x9, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 679.42269ms ago: executing program 4 (id=17969): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x6c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xc9931b86ac3b11ce}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r9, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000002c0)={0x2c, 0x4, r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 624.107953ms ago: executing program 8 (id=17970): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000380)="027c04", 0x3}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x0, 0x600}, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) 614.680564ms ago: executing program 4 (id=17971): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="140000000000000001000000010000", @ANYRES32=r2, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x400000, 0x100000000000000) 536.278869ms ago: executing program 6 (id=17972): syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x43, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x7, 0xcdf}, 0x8006, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syncfs(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0xfb, 0x11fd, &(0x7f0000002480)="$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") truncate(&(0x7f0000000380)='./file2/file0\x00', 0xfffffffffffffffc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000003d00fa00deff13090000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x3cfb, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000200)) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) futimesat(r1, &(0x7f0000000080)='./file2\x00', &(0x7f0000000300)={{0x77359400}, {0x77359400}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) inotify_init() r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 470.126032ms ago: executing program 6 (id=17973): timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f0000000100)={0x80, 0x0, 'client0\x00', 0xffffffff00000000, "00000000ffffffe3", "e4a18560d99f00000800", 0x80}) close(r3) syz_genetlink_get_family_id$devlink(0x0, r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8100, 0x0, 0x0, 0x2cf}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@nombcache}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x496, &(0x7f0000000f80)="$eJzs3Etv3NQeAPC/nWb6vs3tvTz6AAIFEfFImrRAF2xAIHWDhARIZRnStCpNG9QEiVYVTREqS9RPACyR+ASsYIOAFYgtSGyQEFKFuqGwMvKMnUweM8xMZjK0+f0kt+fYx3PO3/aZHPvECWDTGs7/SSJ2RcSPlYg9tezyAsO1/27dvDz1583LU0lk2Su/J9Vyf9y8PFUWLffbWWRG0oj0/SQOrFHv3MVLZydnZqYvFPmx+XNvjc1dvPTkmXOTp6dPT5+fOHbs6JHxZ56eeKorce7O27r/3dmD+46/fv2lqRPX3/jms3z9rmJ7fRw1Q80/8MpScnuDIsMxvPxY1nkk4pcsy1pu/7/d7rp0sqWPDaEtAxGRn67BvP/HnhiIpZO3J158r6+NA3oqy7Js66q1A2ViIQPuYEk03JRuaEOADVb+oM/vf8tlA4cffXfjudoNUB73rWKpbdkSaVFmcMX9bTcNR8SJhb8+ypdY8zkEAEB3fZGPf55Ya/yXxt115f4TtbmhoYj4b0TsjYj/RcT/I+KuiGrZeyLi3jbrH16RXz3++b7R9EpX5OO/Z4u5raXxX6Uaf2FooMjtrsY/mJw6MzN9uDgmIzG4Nc+PN6njyxd++HAxs235tvrxX77k9ZdjwZr0ty0rHtCdnJyf7ELoVTeuLga6YvybLM4EJBGxLyL2d/D5+TE789inBxtt/+f4m+jCPFP2ScSjtfO/ECviLyXN5yfHtsXM9OGx8qpY7dvvrr3cqP51xd8FN65G7Fh1/Ud9/ENJ/XztXPt1XPvpg4b3NJ1e/5Xk1Wq6Uqx7Z3J+/sJ4RCVZWL1+YmnfMl+Wz+MfObRW/Gn1Mz4u9jsQEflFfF9E3B8RDxRtfzAiHoqIQ03i//r5h9/sPP7eyuM/2db5bz8xcParzxvV39r5P1pNjRRrWvn+a7WB6zl2AAAAcLtIq78Dn6Sji+k0HR2NeK36bHdHOjM7N//4qdm3z5+s/a78UAym5ZOutO556HjxbLjMT6zIH6k+N86yLNtezY9Ozc70ak4daM3OBv0/9+tAv1sH9Fxb82iN3mgDbktt9f/VbwsBtzHva8Pm1Wr/H+xxO4CN17z/Gx3AnWytHn4l4lYfmgJsMD/hYfPS/2Hz0v9h89L/YVNaz3v9zRJ7j3e8e7au2su/r9Lh7j/35Gg0Swx0uvvWNv7MQQ8Ska65aTAiyjWVvjSslUTauyryi6+9vfIT2WrhK51e2G0nln1NVPrx3QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANANfwcAAP//FTHhMg==") r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x3092}, {r0, 0x80}], 0x2, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") 465.882003ms ago: executing program 7 (id=17974): prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) r4 = socket$igmp6(0xa, 0x3, 0x2) shutdown(r4, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) close(r5) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f00000029c0)={0x13c4, 0x14, 0x0, 0x70bd28, 0x25dfdbfb, {0x11, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "df60113f420d5640363d4aea347f3a4f7ed788a0ded77ff9171157981df1998efa27b3851f987bb328fdd3720e55f07d84b6765c5f47b85e7f7b03872809dc052a2a19e40c6ebfbb196c036904819477498a733e6e81a0c5c263c60d49b0937a67fce95370a4c2506b061af5e62f05ea68a37d7050d0532e89ebbb249b29970219ec08962076834acf06cbb6e36b33e3c2195fe04abd8dd1f59123ac3c3e63ccfa079cf88a6043ec99cee4b20fda2853f0b7d58800"}, @INET_DIAG_REQ_BYTECODE={0xbe, 0x1, "814a2196047895248553faad704c3225c6a4d9885c45336a769fa9c97151cb4a72977d3cd863ddc76a395a43d3c1ed4054dc70425638b1c0e7571d173591408b73d2f96d22e2c89b3981245172bb12f6c86e8038ad7f89851feb754f24939236f6824e78e79c5f4d31844575c9cd109cf04bcc44649fbb9aa86b232f80db40b5eec360f12e725c619921a4ae25a0160524b054b5c49c91b533648cb66d3008826f16b64eee681392056ea79e6aa7cc4698d84b3628c1d6add5f5"}, @INET_DIAG_REQ_BYTECODE={0x15, 0x1, "785e4f6cc6728d16db534b23bd8c6af996"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x44, 0x1, "6a6c3009faae075c78f2c64ed58203e658fa7afe62bb2c0c125d94f1d89c6a28981680c54b870bdc71fa184d613a4384c9e724f2a4d6cb57189ec43147b53772"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "4bc4a6cc51e4b025ba71049977846089667e58111699e52a0c5f1cc5f678ad567f9fc24e25207f41f32425ed93469c3649b66f0c59a24d2225bbc3621d5805c931383509c6628176e65b9c24a2211fa4fcf5bf5668e142ad0bdc5bb5a49b0c5e540f607103f93cfd2bbe7c4f056bb08647787a1cce752815fa8df51527d22228f65da57b2a9fe000e5ea705779b9eff8a4a1c4782fcec8"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "a21e944c47d534a086f6eef8dbe828c8a792989800a19706cf4bf3f1eda9a96ec3c0cf67fc4c20fd5a4799d6ae2f038b565a"}, @INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}]}, 0x13c4}, 0x1, 0x0, 0x0, 0x20008010}, 0xc000) 335.1887ms ago: executing program 3 (id=17975): ioperm(0x2, 0xb51, 0x5) signalfd4(0xffffffffffffffff, &(0x7f00000031c0)={[0x7]}, 0x8, 0x400) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00'}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x4, 0x1, 0x1088f109, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./mnt\x00', 0xffffffffffffffff, 0x0, 0x250) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r8, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xfff1, 0x6}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x0, [0xd, 0xa, 0xa, 0xa, 0x8, 0x7, 0xf, 0xc, 0x10, 0x10, 0xf, 0x3, 0xd, 0xb, 0x6, 0xd], 0x0, [0x4, 0x7, 0x8dee, 0x61, 0x9, 0xc, 0x7, 0xca, 0x9c, 0x1, 0x7fff, 0x6, 0x200, 0x100, 0x8, 0x2], [0x8000, 0x5, 0xa71e, 0x8001, 0x9, 0x0, 0x7, 0xed, 0x0, 0x100, 0xfcab, 0x0, 0x4, 0x4, 0x1, 0x873]}, [@TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}]}}}]}, 0x90}}, 0x4000000) 244.433325ms ago: executing program 3 (id=17976): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000001e8001280100001800b0001006c6f6f6b757000002800018007000100637400001c000280080001400000000f080002400000000a08000240000000063c000180090001006d657461000000002c0002800800024000000015080002400000000f080002400000001a0800024000000015080001400000001310000180090001006d617371000000004c000180090001006d617371000000003c0002800800024000000010080002400000001108000140000000020800014000000001080002400000000908000140000000480800034000000013140001800b0001006e756d67656e000004000280"], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) 243.988375ms ago: executing program 3 (id=17977): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$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") (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r2, &(0x7f00000002c0)={0x4, 0xe4, 0x1, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) r4 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) syz_clone(0x120000, &(0x7f0000000140)="39322f0c8f749fa9d0d1506822bead6e54bcb48154ee919bd6c44c19e6fc1e4e76071bff816ea1bf22a409decd4dbbde3ff72aa92f0d32bc977e70b847eaff8e3042b457a71c42ec10686046fde1bee05f82152c455020c9e2b31fd3035286d253f43905b2e8c0d706e84ff7bf44dbfea3102bd4049acb34f04f74ec49f8d61a40ebc3727554f45b0fd875b97e4143874450b5727ff5513074b65bda0e1c7155bdf4931fdd8705096fdfa6afdce8e79d40072729594e29a87c958b0ceea05e6313c3e169d0b07917f180", 0xca, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000280)="f59d9f7e11af256a9b6833427fea427708b38f64a231c5f8803c59aa9389e6bd9d927aa6fbfc2fe15471ef2cfa6ca92cd9940b6754001cf30b9c1feaf172f595d5fe000ded3c0d968d9e6dd46da39a3c589764fa635c0f324f38e26cdc63a9b1cfb4d159b86bc144f1f4b3dc54c6c704fbb1f7c025d5eafd33374d2aab81ecbf29fa1aa2002555410e8be3f115aa95bb4a06a1f34b41ba8b055afcfb175e4cb9712419cd30353fbd499d7b1798d991101d6fb68fc43e4b739962cf826dafb21c") r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) (async, rerun: 32) getitimer(0x2, &(0x7f0000000180)) (rerun: 32) socket(0x1a, 0x800, 0x9) (async) openat(r0, &(0x7f0000000080)='./file0\x00', 0x90000, 0x20) (async) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socket(0xa, 0x1, 0x0) fallocate(r0, 0x3, 0xe118, 0x8000c62) 243.522656ms ago: executing program 3 (id=17978): socket$netlink(0x10, 0x3, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0004000000000000000000000000000001000000326f8be8f61e8456e9bc54b8d075b1b61a25d940000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r4, 0x0, 0x0) poll(&(0x7f0000000080)=[{r4}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000007a400000000000000000181100000f88025d24b0c0b1cb4c12f02f48d454c5a7e2", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000000c0)={r8, 0x2, 0x6}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x141000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)={0x20000002}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r10 = socket(0x10, 0x3, 0x0) connect$netlink(r10, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x2, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 0s ago: executing program 3 (id=17979): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r3, &(0x7f0000000240)="2338dcfa67c78a50095e74401b6cc0914ab28f7554d2f66e4932ccbd9df4aa717439252e20a2196296f5328f0800000000d05807f47d5d5db836f81553dae5", 0xfffffd5f) ioctl$TCSETA(r3, 0x5406, &(0x7f00000005c0)={0xf048, 0x8, 0x2, 0x6, 0x18}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x3c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004100) pipe2$9p(&(0x7f0000000800)={0xffffffffffffffff}, 0x4000) fstat(r0, &(0x7f0000000900)) r5 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000ac0)=0xfeda) mount$9p_fd(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x8000, &(0x7f0000000b00)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@posixacl}, {@access_uid={'access', 0x3d, r5}}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@access_client}, {@directio}], [{@measure}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socketpair(0x2, 0x5, 0x6, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000700)={&(0x7f0000000000)=@pppol2tpv3in6, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/22, 0x16}, {&(0x7f0000000100)=""/178, 0xb2}, {&(0x7f0000000280)=""/213, 0xd5}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/26, 0x1a}, {&(0x7f0000000440)=""/219, 0xdb}], 0x9, &(0x7f0000000600)=""/213, 0xd5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): ck 16: comm syz.6.17398: path /389/file1: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 883.455174][T23925] loop7: detected capacity change from 0 to 8192 [ 883.471300][T23925] vfat: Unknown parameter '' [ 883.524828][T23925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17400'. [ 883.560028][T23925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17400'. [ 883.614014][T28935] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:29: bg 0: block 345: padding at end of block bitmap is not set [ 883.648323][T28935] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 883.660997][T28935] EXT4-fs (loop6): This should not happen!! Data will be lost [ 883.660997][T28935] [ 883.699304][T28935] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 883.712071][T28935] EXT4-fs (loop6): This should not happen!! Data will be lost [ 883.712071][T28935] [ 883.721811][T28935] EXT4-fs (loop6): Total free blocks count 0 [ 883.727798][T28935] EXT4-fs (loop6): Free/Dirty block details [ 883.733768][T28935] EXT4-fs (loop6): free_blocks=0 [ 883.738813][T28935] EXT4-fs (loop6): dirty_blocks=2048 [ 883.744117][T28935] EXT4-fs (loop6): Block reservation details [ 883.819939][T23944] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17409'. [ 883.829555][T23944] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23944 comm=syz.6.17409 [ 883.869266][T23947] loop7: detected capacity change from 0 to 1024 [ 883.881663][T23947] EXT4-fs: Ignoring removed mblk_io_submit option [ 883.890231][T23947] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 883.924344][T23947] EXT4-fs error (device loop7): ext4_ext_check_inode:524: inode #11: comm syz.7.17407: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 883.944798][T23947] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.17407: couldn't read orphan inode 11 (err -117) [ 883.957254][T23947] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 884.180389][T23958] loop6: detected capacity change from 0 to 8192 [ 884.187371][T23958] vfat: Unknown parameter '' [ 884.309931][T23958] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17414'. [ 884.328187][T23958] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17414'. [ 884.639318][T19876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.749711][T23978] loop6: detected capacity change from 0 to 1024 [ 884.778421][T23978] EXT4-fs: Ignoring removed mblk_io_submit option [ 884.813263][T23978] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 884.860952][T23978] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #11: comm syz.6.17423: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 884.896540][T23978] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.17423: couldn't read orphan inode 11 (err -117) [ 884.911299][T23978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 885.042797][T23981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17424'. [ 885.053755][T23981] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23981 comm=syz.4.17424 [ 885.174257][T23984] loop7: detected capacity change from 0 to 2048 [ 885.212124][T23984] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 885.247519][T23984] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 885.334211][T23987] EXT4-fs error (device loop7): ext4_readdir:261: inode #2: block 16: comm syz.7.17422: path /292/file1: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 885.497136][T18637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.557189][T28983] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:56: bg 0: block 345: padding at end of block bitmap is not set [ 885.573902][T28983] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 885.586584][T28983] EXT4-fs (loop7): This should not happen!! Data will be lost [ 885.586584][T28983] [ 885.613631][T28983] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 885.626406][T28983] EXT4-fs (loop7): This should not happen!! Data will be lost [ 885.626406][T28983] [ 885.626420][T28983] EXT4-fs (loop7): Total free blocks count 0 [ 885.626430][T28983] EXT4-fs (loop7): Free/Dirty block details [ 885.626440][T28983] EXT4-fs (loop7): free_blocks=0 [ 885.626449][T28983] EXT4-fs (loop7): dirty_blocks=2048 [ 885.658384][T28983] EXT4-fs (loop7): Block reservation details [ 885.710699][T24002] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17432'. [ 885.713165][T23998] loop8: detected capacity change from 0 to 8192 [ 885.730019][T24004] 9pnet_virtio: no channels available for device [ 885.750732][T23998] vfat: Unknown parameter '' [ 885.784260][T23997] loop6: detected capacity change from 0 to 8192 [ 885.802821][T23997] vfat: Unknown parameter '' [ 885.864212][T24009] netlink: 'syz.7.17427': attribute type 13 has an invalid length. [ 885.873874][T24009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 885.964931][T24017] loop8: detected capacity change from 0 to 512 [ 885.971532][T24017] EXT4-fs: test_dummy_encryption option not supported [ 886.331420][T24028] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24028 comm=syz.3.17442 [ 887.054398][T24035] __nla_validate_parse: 4 callbacks suppressed [ 887.054415][T24035] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17445'. [ 887.136424][T24040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17447'. [ 887.258573][T24044] FAULT_INJECTION: forcing a failure. [ 887.258573][T24044] name failslab, interval 1, probability 0, space 0, times 0 [ 887.271272][T24044] CPU: 1 UID: 0 PID: 24044 Comm: syz.3.17449 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 887.271293][T24044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 887.271303][T24044] Call Trace: [ 887.271322][T24044] [ 887.271329][T24044] dump_stack_lvl+0xf2/0x150 [ 887.271353][T24044] dump_stack+0x15/0x1a [ 887.271371][T24044] should_fail_ex+0x24a/0x260 [ 887.271398][T24044] should_failslab+0x8f/0xb0 [ 887.271425][T24044] __kmalloc_node_noprof+0xad/0x410 [ 887.271518][T24044] ? __kvmalloc_node_noprof+0x72/0x170 [ 887.271548][T24044] __kvmalloc_node_noprof+0x72/0x170 [ 887.271643][T24044] nf_hook_entries_grow+0x1bd/0x470 [ 887.271667][T24044] __nf_register_net_hook+0x16b/0x480 [ 887.271689][T24044] ? pcpu_chunk_relocate+0x183/0x280 [ 887.271708][T24044] nf_register_net_hook+0x88/0x130 [ 887.271815][T24044] nf_register_net_hooks+0x41/0x140 [ 887.271836][T24044] nf_defrag_ipv4_enable+0x6c/0xc0 [ 887.271861][T24044] tproxy_tg4_check+0x2d/0x100 [ 887.271887][T24044] xt_check_target+0x266/0x480 [ 887.271986][T24044] ? strnlen+0x28/0x50 [ 887.272012][T24044] ? strcmp+0x21/0x50 [ 887.272051][T24044] ? xt_find_target+0x1c8/0x200 [ 887.272094][T24044] translate_table+0xc3e/0xfb0 [ 887.272122][T24044] do_ipt_set_ctl+0x7bd/0x8b0 [ 887.272147][T24044] ? tcp_release_cb+0xfe/0x380 [ 887.272174][T24044] nf_setsockopt+0x195/0x1b0 [ 887.272263][T24044] ip_setsockopt+0xea/0x100 [ 887.272350][T24044] tcp_setsockopt+0x93/0xb0 [ 887.272399][T24044] sock_common_setsockopt+0x64/0x80 [ 887.272489][T24044] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 887.272516][T24044] __sys_setsockopt+0x187/0x200 [ 887.272544][T24044] __x64_sys_setsockopt+0x66/0x80 [ 887.272633][T24044] x64_sys_call+0x282e/0x2dc0 [ 887.272665][T24044] do_syscall_64+0xc9/0x1c0 [ 887.272736][T24044] ? clear_bhb_loop+0x55/0xb0 [ 887.272760][T24044] ? clear_bhb_loop+0x55/0xb0 [ 887.272783][T24044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.272861][T24044] RIP: 0033:0x7ff1af2ecde9 [ 887.272875][T24044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.272951][T24044] RSP: 002b:00007ff1ad957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 887.272966][T24044] RAX: ffffffffffffffda RBX: 00007ff1af505fa0 RCX: 00007ff1af2ecde9 [ 887.273045][T24044] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 887.273056][T24044] RBP: 00007ff1ad957090 R08: 0000000000000570 R09: 0000000000000000 [ 887.273068][T24044] R10: 0000400000000900 R11: 0000000000000246 R12: 0000000000000001 [ 887.273079][T24044] R13: 0000000000000000 R14: 00007ff1af505fa0 R15: 00007ffd54915638 [ 887.273105][T24044] [ 887.591796][T24043] netlink: 'syz.8.17448': attribute type 13 has an invalid length. [ 887.619025][T24043] xt_CT: You must specify a L4 protocol and not use inversions on it [ 887.633981][ T29] kauditd_printk_skb: 549 callbacks suppressed [ 887.633996][ T29] audit: type=1326 audit(1740004223.157:71652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24049 comm="syz.3.17452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 887.669552][ T29] audit: type=1326 audit(1740004223.157:71653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24049 comm="syz.3.17452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 887.693282][ T29] audit: type=1326 audit(1740004223.157:71654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24049 comm="syz.3.17452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 887.717106][ T29] audit: type=1326 audit(1740004223.157:71655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24049 comm="syz.3.17452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 887.740890][ T29] audit: type=1326 audit(1740004223.157:71656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24049 comm="syz.3.17452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 887.764610][ T29] audit: type=1326 audit(1740004223.157:71657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24049 comm="syz.3.17452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 887.788428][ T29] audit: type=1326 audit(1740004223.157:71658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24049 comm="syz.3.17452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 887.812135][ T29] audit: type=1326 audit(1740004223.157:71659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24049 comm="syz.3.17452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 887.835800][ T29] audit: type=1326 audit(1740004223.157:71660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24049 comm="syz.3.17452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 887.849823][T24058] netlink: 'syz.3.17454': attribute type 13 has an invalid length. [ 887.859479][ T29] audit: type=1326 audit(1740004223.157:71661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24049 comm="syz.3.17452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 887.906468][T24056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 888.057962][T24063] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17456'. [ 888.067605][T24063] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24063 comm=syz.4.17456 [ 889.023750][T24083] loop8: detected capacity change from 0 to 512 [ 889.038488][T24083] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 889.052709][T24083] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 889.102707][T20362] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.482191][T24103] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17470'. [ 889.615199][T24101] loop8: detected capacity change from 0 to 512 [ 889.621773][T24101] EXT4-fs: test_dummy_encryption option not supported [ 889.644250][T24103] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24103 comm=syz.4.17470 [ 889.817234][T24111] FAULT_INJECTION: forcing a failure. [ 889.817234][T24111] name failslab, interval 1, probability 0, space 0, times 0 [ 889.830018][T24111] CPU: 0 UID: 0 PID: 24111 Comm: syz.3.17473 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 889.830109][T24111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 889.830120][T24111] Call Trace: [ 889.830126][T24111] [ 889.830133][T24111] dump_stack_lvl+0xf2/0x150 [ 889.830159][T24111] dump_stack+0x15/0x1a [ 889.830180][T24111] should_fail_ex+0x24a/0x260 [ 889.830267][T24111] should_failslab+0x8f/0xb0 [ 889.830297][T24111] kmem_cache_alloc_noprof+0x52/0x320 [ 889.830318][T24111] ? alloc_empty_file+0xd0/0x200 [ 889.830334][T24111] ? _raw_spin_unlock+0x26/0x50 [ 889.830453][T24111] alloc_empty_file+0xd0/0x200 [ 889.830470][T24111] alloc_file_pseudo+0xc9/0x160 [ 889.830491][T24111] __shmem_file_setup+0x1bb/0x1f0 [ 889.830525][T24111] shmem_file_setup+0x3b/0x50 [ 889.830556][T24111] __se_sys_memfd_create+0x2e1/0x5a0 [ 889.830586][T24111] __x64_sys_memfd_create+0x31/0x40 [ 889.830605][T24111] x64_sys_call+0x2d4c/0x2dc0 [ 889.830631][T24111] do_syscall_64+0xc9/0x1c0 [ 889.830672][T24111] ? clear_bhb_loop+0x55/0xb0 [ 889.830693][T24111] ? clear_bhb_loop+0x55/0xb0 [ 889.830716][T24111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.830741][T24111] RIP: 0033:0x7ff1af2ecde9 [ 889.830794][T24111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.830855][T24111] RSP: 002b:00007ff1ad956e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 889.830875][T24111] RAX: ffffffffffffffda RBX: 00000000000004fd RCX: 00007ff1af2ecde9 [ 889.830887][T24111] RDX: 00007ff1ad956ef0 RSI: 0000000000000000 RDI: 00007ff1af36ec51 [ 889.830899][T24111] RBP: 0000400000000300 R08: 00007ff1ad956bb7 R09: 00007ff1ad956e40 [ 889.830912][T24111] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000000 [ 889.830923][T24111] R13: 00007ff1ad956ef0 R14: 00007ff1ad956eb0 R15: 00004000000002c0 [ 889.830938][T24111] [ 890.167711][T24115] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17475'. [ 890.231217][T24117] loop7: detected capacity change from 0 to 512 [ 890.333572][T24117] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 890.352680][T24117] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 890.409783][T19876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.820147][T24137] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17479'. [ 890.976661][T24139] loop8: detected capacity change from 0 to 8192 [ 890.983950][T24139] vfat: Unknown parameter '' [ 891.006236][T24132] program syz.3.17483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 891.041635][T24142] netlink: 'syz.7.17485': attribute type 13 has an invalid length. [ 891.070244][T24139] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17484'. [ 891.085833][T24142] xt_CT: You must specify a L4 protocol and not use inversions on it [ 891.334076][T24149] loop7: detected capacity change from 0 to 8192 [ 891.343366][T24149] vfat: Unknown parameter '' [ 891.364169][T24149] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17488'. [ 891.377127][T24149] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17488'. [ 891.454892][T24151] loop7: detected capacity change from 0 to 512 [ 891.475803][T24151] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.490227][T24151] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 891.521197][T19876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.876416][T24170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17496'. [ 891.903005][T24176] netlink: 'syz.4.17498': attribute type 13 has an invalid length. [ 891.912409][T24176] xt_CT: You must specify a L4 protocol and not use inversions on it [ 891.954823][T24182] netlink: 'syz.4.17501': attribute type 13 has an invalid length. [ 891.965035][T24182] xt_CT: You must specify a L4 protocol and not use inversions on it [ 892.172250][T24196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17506'. [ 892.239663][T24200] loop8: detected capacity change from 0 to 512 [ 892.246352][T24200] EXT4-fs: test_dummy_encryption option not supported [ 892.411376][T24208] 9pnet_fd: Insufficient options for proto=fd [ 892.470816][T24210] netlink: 'syz.4.17512': attribute type 13 has an invalid length. [ 892.481221][T24210] xt_CT: You must specify a L4 protocol and not use inversions on it [ 892.544798][T24212] FAULT_INJECTION: forcing a failure. [ 892.544798][T24212] name failslab, interval 1, probability 0, space 0, times 0 [ 892.557485][T24212] CPU: 0 UID: 0 PID: 24212 Comm: syz.4.17513 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 892.557505][T24212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 892.557517][T24212] Call Trace: [ 892.557525][T24212] [ 892.557533][T24212] dump_stack_lvl+0xf2/0x150 [ 892.557587][T24212] dump_stack+0x15/0x1a [ 892.557605][T24212] should_fail_ex+0x24a/0x260 [ 892.557630][T24212] should_failslab+0x8f/0xb0 [ 892.557660][T24212] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 892.557730][T24212] ? security_context_to_sid_core+0xc5/0x3b0 [ 892.557760][T24212] kstrdup+0x3d/0xd0 [ 892.557784][T24212] security_context_to_sid_core+0xc5/0x3b0 [ 892.557885][T24212] security_context_to_sid_force+0x30/0x40 [ 892.557914][T24212] selinux_inode_setxattr+0x513/0x700 [ 892.557986][T24212] security_inode_setxattr+0x169/0x1f0 [ 892.558009][T24212] __vfs_setxattr_locked+0x88/0x1d0 [ 892.558033][T24212] vfs_setxattr+0x140/0x290 [ 892.558057][T24212] file_setxattr+0x139/0x1b0 [ 892.558083][T24212] path_setxattrat+0x2c2/0x310 [ 892.558109][T24212] __x64_sys_fsetxattr+0x6d/0x80 [ 892.558222][T24212] x64_sys_call+0x29d2/0x2dc0 [ 892.558266][T24212] do_syscall_64+0xc9/0x1c0 [ 892.558292][T24212] ? clear_bhb_loop+0x55/0xb0 [ 892.558313][T24212] ? clear_bhb_loop+0x55/0xb0 [ 892.558378][T24212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.558399][T24212] RIP: 0033:0x7feec255cde9 [ 892.558412][T24212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.558429][T24212] RSP: 002b:00007feec0bc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 892.558447][T24212] RAX: ffffffffffffffda RBX: 00007feec2775fa0 RCX: 00007feec255cde9 [ 892.558459][T24212] RDX: 0000400000000080 RSI: 0000400000000000 RDI: 0000000000000006 [ 892.558469][T24212] RBP: 00007feec0bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 892.558534][T24212] R10: 000000000000ffdf R11: 0000000000000246 R12: 0000000000000001 [ 892.558546][T24212] R13: 0000000000000000 R14: 00007feec2775fa0 R15: 00007ffc82103908 [ 892.558575][T24212] [ 892.965657][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 892.965671][ T29] audit: type=1326 audit(1740004228.753:72112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24217 comm="syz.4.17516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec255cde9 code=0x7ffc0000 [ 892.995548][ T29] audit: type=1326 audit(1740004228.753:72113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24217 comm="syz.4.17516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec255cde9 code=0x7ffc0000 [ 893.019261][ T29] audit: type=1326 audit(1740004228.753:72114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24217 comm="syz.4.17516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feec255cde9 code=0x7ffc0000 [ 893.231720][T24220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17516'. [ 893.249521][T24226] loop7: detected capacity change from 0 to 8192 [ 893.259030][ T29] audit: type=1326 audit(1740004228.890:72115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24217 comm="syz.4.17516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec255cde9 code=0x7ffc0000 [ 893.284062][ T29] audit: type=1326 audit(1740004228.890:72116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24217 comm="syz.4.17516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec255cde9 code=0x7ffc0000 [ 893.307787][ T29] audit: type=1326 audit(1740004228.974:72117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24225 comm="syz.7.17519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8bf6cde9 code=0x7ffc0000 [ 893.331431][ T29] audit: type=1326 audit(1740004228.974:72118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24225 comm="syz.7.17519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e8bf6cde9 code=0x7ffc0000 [ 893.355085][ T29] audit: type=1326 audit(1740004228.974:72119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24225 comm="syz.7.17519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8bf6cde9 code=0x7ffc0000 [ 893.378851][ T29] audit: type=1326 audit(1740004228.974:72120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24225 comm="syz.7.17519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e8bf6cde9 code=0x7ffc0000 [ 893.402683][ T29] audit: type=1326 audit(1740004228.974:72121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24225 comm="syz.7.17519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8bf6cde9 code=0x7ffc0000 [ 893.430733][T24226] vfat: Unknown parameter '' [ 893.452548][T24226] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17519'. [ 893.477939][T24233] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17522'. [ 893.606536][T24239] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17525'. [ 893.726650][T24245] FAULT_INJECTION: forcing a failure. [ 893.726650][T24245] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 893.738372][T24246] loop6: detected capacity change from 0 to 512 [ 893.739901][T24245] CPU: 1 UID: 0 PID: 24245 Comm: syz.3.17527 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 893.739926][T24245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 893.740004][T24245] Call Trace: [ 893.740036][T24245] [ 893.740044][T24245] dump_stack_lvl+0xf2/0x150 [ 893.740069][T24245] dump_stack+0x15/0x1a [ 893.740088][T24245] should_fail_ex+0x24a/0x260 [ 893.740114][T24245] should_fail_alloc_page+0xfd/0x110 [ 893.740205][T24245] alloc_pages_bulk_noprof+0xfd/0x570 [ 893.740301][T24245] copy_splice_read+0xe5/0x5b0 [ 893.740324][T24245] ? __kmalloc_noprof+0x36c/0x3f0 [ 893.740403][T24245] ? alloc_pipe_info+0x1cb/0x360 [ 893.740430][T24245] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 893.740453][T24245] splice_direct_to_actor+0x28b/0x670 [ 893.740476][T24245] ? __pfx_direct_splice_actor+0x10/0x10 [ 893.740535][T24245] do_splice_direct+0xd7/0x150 [ 893.740556][T24245] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 893.740638][T24245] do_sendfile+0x398/0x660 [ 893.740657][T24245] __x64_sys_sendfile64+0x110/0x150 [ 893.740732][T24245] x64_sys_call+0xfbd/0x2dc0 [ 893.740807][T24245] do_syscall_64+0xc9/0x1c0 [ 893.740839][T24245] ? clear_bhb_loop+0x55/0xb0 [ 893.740972][T24245] ? clear_bhb_loop+0x55/0xb0 [ 893.740995][T24245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.741019][T24245] RIP: 0033:0x7ff1af2ecde9 [ 893.741033][T24245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.741049][T24245] RSP: 002b:00007ff1ad936038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 893.741126][T24245] RAX: ffffffffffffffda RBX: 00007ff1af506080 RCX: 00007ff1af2ecde9 [ 893.741137][T24245] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 893.741149][T24245] RBP: 00007ff1ad936090 R08: 0000000000000000 R09: 0000000000000000 [ 893.741160][T24245] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.741171][T24245] R13: 0000000000000000 R14: 00007ff1af506080 R15: 00007ffd54915638 [ 893.741187][T24245] [ 893.963890][T24246] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 893.972773][T24246] EXT4-fs (loop6): orphan cleanup on readonly fs [ 893.979815][T24246] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 893.994659][T24246] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 894.001967][T24246] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.17523: bg 0: block 40: padding at end of block bitmap is not set [ 894.016467][T24246] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 894.025484][T24246] EXT4-fs (loop6): 1 truncate cleaned up [ 894.031537][T24246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 894.082405][T24235] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #16: comm syz.6.17523: corrupted xattr block 31: invalid header [ 894.097644][T24235] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 894.127114][T24265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17534'. [ 894.168862][T18637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.193687][T24269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=24269 comm=syz.4.17536 [ 894.231667][T24271] pim6reg1: entered promiscuous mode [ 894.237074][T24271] pim6reg1: entered allmulticast mode [ 894.671665][T24285] hub 2-0:1.0: USB hub found [ 894.676627][T24285] hub 2-0:1.0: 8 ports detected [ 894.753613][T24289] xt_hashlimit: max too large, truncated to 1048576 [ 895.058608][T24291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17546'. [ 895.320586][T24300] netlink: 'syz.3.17550': attribute type 13 has an invalid length. [ 895.341722][T24300] xt_CT: You must specify a L4 protocol and not use inversions on it [ 895.814240][T24316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17557'. [ 895.864825][T24318] netlink: 'syz.3.17558': attribute type 13 has an invalid length. [ 895.876419][T24318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 895.987351][T24322] ip6gre1: entered allmulticast mode [ 896.023102][T24325] netlink: 'syz.3.17561': attribute type 13 has an invalid length. [ 896.032905][T24325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 896.825345][T24336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17565'. [ 896.931836][T24340] netlink: 20 bytes leftover after parsing attributes in process `syz.8.17567'. [ 897.203014][T24352] lo speed is unknown, defaulting to 1000 [ 897.220313][T24354] loop7: detected capacity change from 0 to 512 [ 897.234097][T24352] lo speed is unknown, defaulting to 1000 [ 897.590892][T24344] program syz.8.17569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 897.681952][T24354] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.700699][T24354] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 897.728575][T19876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.765576][T24369] loop7: detected capacity change from 0 to 1024 [ 897.773980][T24369] EXT4-fs: Ignoring removed mblk_io_submit option [ 897.781124][T24369] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 897.781220][T24365] FAULT_INJECTION: forcing a failure. [ 897.781220][T24365] name failslab, interval 1, probability 0, space 0, times 0 [ 897.804002][T24365] CPU: 1 UID: 0 PID: 24365 Comm: syz.3.17574 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 897.804028][T24365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 897.804038][T24365] Call Trace: [ 897.804043][T24365] [ 897.804050][T24365] dump_stack_lvl+0xf2/0x150 [ 897.804073][T24365] dump_stack+0x15/0x1a [ 897.804118][T24365] should_fail_ex+0x24a/0x260 [ 897.804159][T24365] should_failslab+0x8f/0xb0 [ 897.804184][T24365] __kmalloc_noprof+0xab/0x3f0 [ 897.804203][T24365] ? copy_splice_read+0xb5/0x5b0 [ 897.804228][T24365] copy_splice_read+0xb5/0x5b0 [ 897.804256][T24365] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 897.804322][T24365] splice_direct_to_actor+0x28b/0x670 [ 897.804343][T24365] ? __pfx_direct_splice_actor+0x10/0x10 [ 897.804367][T24365] do_splice_direct+0xd7/0x150 [ 897.804498][T24365] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 897.804527][T24365] do_sendfile+0x398/0x660 [ 897.804561][T24365] __x64_sys_sendfile64+0x110/0x150 [ 897.804588][T24365] x64_sys_call+0xfbd/0x2dc0 [ 897.804608][T24365] do_syscall_64+0xc9/0x1c0 [ 897.804749][T24365] ? clear_bhb_loop+0x55/0xb0 [ 897.804770][T24365] ? clear_bhb_loop+0x55/0xb0 [ 897.804790][T24365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.804813][T24365] RIP: 0033:0x7ff1af2ecde9 [ 897.804846][T24365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.804862][T24365] RSP: 002b:00007ff1ad957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 897.804917][T24365] RAX: ffffffffffffffda RBX: 00007ff1af505fa0 RCX: 00007ff1af2ecde9 [ 897.804928][T24365] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 897.804937][T24365] RBP: 00007ff1ad957090 R08: 0000000000000000 R09: 0000000000000000 [ 897.804961][T24365] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 897.804973][T24365] R13: 0000000000000000 R14: 00007ff1af505fa0 R15: 00007ffd54915638 [ 897.804986][T24365] [ 897.816308][T24369] EXT4-fs error (device loop7): ext4_ext_check_inode:524: inode #11: comm syz.7.17575: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 898.027803][T24369] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.17575: couldn't read orphan inode 11 (err -117) [ 898.040411][T24369] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.058870][T24375] FAULT_INJECTION: forcing a failure. [ 898.058870][T24375] name failslab, interval 1, probability 0, space 0, times 0 [ 898.066292][ T29] kauditd_printk_skb: 455 callbacks suppressed [ 898.066306][ T29] audit: type=1326 audit(1740004234.108:72576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24374 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 898.071529][T24375] CPU: 1 UID: 0 PID: 24375 Comm: syz.3.17577 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 898.071553][T24375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 898.071616][T24375] Call Trace: [ 898.071696][T24375] [ 898.071703][T24375] dump_stack_lvl+0xf2/0x150 [ 898.071729][T24375] dump_stack+0x15/0x1a [ 898.071747][T24375] should_fail_ex+0x24a/0x260 [ 898.071837][T24375] ? audit_log_d_path+0x8e/0x150 [ 898.071962][T24375] should_failslab+0x8f/0xb0 [ 898.071989][T24375] __kmalloc_cache_noprof+0x4e/0x320 [ 898.072011][T24375] audit_log_d_path+0x8e/0x150 [ 898.072039][T24375] audit_log_d_path_exe+0x42/0x70 [ 898.072133][T24375] audit_log_task+0x1ec/0x250 [ 898.072200][T24375] audit_seccomp+0x68/0x130 [ 898.072303][T24375] __seccomp_filter+0x6fa/0x1180 [ 898.072324][T24375] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 898.072350][T24375] ? vfs_write+0x644/0x920 [ 898.072412][T24375] __secure_computing+0x9f/0x1c0 [ 898.072432][T24375] syscall_trace_enter+0xd1/0x1f0 [ 898.072453][T24375] ? fpregs_assert_state_consistent+0x83/0xa0 [ 898.072474][T24375] do_syscall_64+0xaa/0x1c0 [ 898.072572][T24375] ? clear_bhb_loop+0x55/0xb0 [ 898.072597][T24375] ? clear_bhb_loop+0x55/0xb0 [ 898.072620][T24375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.072675][T24375] RIP: 0033:0x7ff1af2ecde9 [ 898.072689][T24375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.072705][T24375] RSP: 002b:00007ff1ad957038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 898.072723][T24375] RAX: ffffffffffffffda RBX: 00007ff1af505fa0 RCX: 00007ff1af2ecde9 [ 898.072734][T24375] RDX: 0000000000000fed RSI: 0000400000001180 RDI: ffffffffffffffff [ 898.072746][T24375] RBP: 00007ff1ad957090 R08: 0000000000000000 R09: 0000000000000000 [ 898.072757][T24375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.072768][T24375] R13: 0000000000000000 R14: 00007ff1af505fa0 R15: 00007ffd54915638 [ 898.072822][T24375] [ 898.302471][ T29] audit: type=1326 audit(1740004234.108:72577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24374 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 898.326202][ T29] audit: type=1326 audit(1740004234.108:72578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24374 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 898.349776][ T29] audit: type=1326 audit(1740004234.108:72579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24374 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 898.374136][ T29] audit: type=1326 audit(1740004234.108:72580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24374 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 898.397751][ T29] audit: type=1326 audit(1740004234.108:72581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24374 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 898.421572][ T29] audit: type=1326 audit(1740004234.108:72582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24374 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 898.445798][ T29] audit: type=1326 audit(1740004234.108:72583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24374 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 898.469482][ T29] audit: type=1326 audit(1740004234.108:72584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24374 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff1af2eb750 code=0x7ffc0000 [ 898.483925][T24379] loop8: detected capacity change from 0 to 8192 [ 898.493144][ T29] audit: type=1326 audit(1740004234.108:72585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24374 comm="syz.3.17577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff1af2eb89f code=0x7ffc0000 [ 898.526061][ T40] batadv0: left allmulticast mode [ 898.531316][ T40] batadv0: left promiscuous mode [ 898.536624][ T40] bridge0: port 4(batadv0) entered disabled state [ 898.565574][T19876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.575014][T24379] vfat: Unknown parameter '' [ 898.576578][ T40] bond1: left allmulticast mode [ 898.584699][ T40] bond1: left promiscuous mode [ 898.589615][ T40] bridge0: port 3(bond1) entered disabled state [ 898.603976][ T40] bridge_slave_1: left allmulticast mode [ 898.609743][ T40] bridge_slave_1: left promiscuous mode [ 898.615559][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.626284][T24381] netlink: 'syz.3.17579': attribute type 13 has an invalid length. [ 898.637107][T24377] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17578'. [ 898.662317][ T40] bridge_slave_0: left allmulticast mode [ 898.668026][ T40] bridge_slave_0: left promiscuous mode [ 898.673789][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.680937][T24385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 898.741892][T24387] loop7: detected capacity change from 0 to 256 [ 898.748416][T24387] vfat: Unknown parameter 'ÿÿ0x0000000000000003' [ 898.829341][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.839152][ T40] bond0 (unregistering): Released all slaves [ 898.847658][ T40] bond1 (unregistering): Released all slaves [ 898.856481][ T40] bond2 (unregistering): Released all slaves [ 898.943368][ T40] veth1_vlan: left promiscuous mode [ 898.948682][ T40] veth0_vlan: left promiscuous mode [ 898.981636][T24400] loop7: detected capacity change from 0 to 512 [ 898.988213][T24400] EXT4-fs: test_dummy_encryption option not supported [ 899.195637][T24401] loop6: detected capacity change from 0 to 8192 [ 899.246084][ T40] team0 (unregistering): Port device team_slave_1 removed [ 899.261338][T24401] vfat: Unknown parameter '' [ 899.296647][ T40] team0 (unregistering): Port device team_slave_0 removed [ 899.333597][T28983] smc: removing ib device syz! [ 899.368790][T24397] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17585'. [ 899.671186][T24417] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17592'. [ 899.754220][T24417] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17592'. [ 899.780015][T24419] loop8: detected capacity change from 0 to 512 [ 899.798747][T24419] EXT4-fs: Ignoring removed i_version option [ 899.812628][T24419] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 899.864190][T24419] EXT4-fs (loop8): 1 truncate cleaned up [ 899.887716][T24419] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 900.000810][T20362] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.077120][T24427] FAULT_INJECTION: forcing a failure. [ 900.077120][T24427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.090250][T24427] CPU: 0 UID: 0 PID: 24427 Comm: syz.8.17595 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 900.090274][T24427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 900.090285][T24427] Call Trace: [ 900.090292][T24427] [ 900.090300][T24427] dump_stack_lvl+0xf2/0x150 [ 900.090348][T24427] dump_stack+0x15/0x1a [ 900.090369][T24427] should_fail_ex+0x24a/0x260 [ 900.090392][T24427] should_fail+0xb/0x10 [ 900.090412][T24427] should_fail_usercopy+0x1a/0x20 [ 900.090474][T24427] strncpy_from_user+0x25/0x210 [ 900.090497][T24427] ? strncpy_from_user+0x1f4/0x210 [ 900.090517][T24427] strncpy_from_user_nofault+0x66/0xe0 [ 900.090568][T24427] bpf_probe_read_user_str+0x2a/0x70 [ 900.090597][T24427] bpf_prog_1f2a558f99cc9b3e+0x3e/0x40 [ 900.090611][T24427] bpf_trace_run2+0x104/0x1d0 [ 900.090693][T24427] ? security_compute_sid+0xda7/0xe10 [ 900.090748][T24427] ? __kernel_text_address+0xd/0x40 [ 900.090776][T24427] ? security_compute_sid+0xda7/0xe10 [ 900.090797][T24427] kfree+0x247/0x2f0 [ 900.090813][T24427] security_compute_sid+0xda7/0xe10 [ 900.090900][T24427] ? __sock_create+0x2e9/0x5a0 [ 900.090926][T24427] ? __sys_socketpair+0x17c/0x430 [ 900.090953][T24427] ? __x64_sys_socketpair+0x52/0x60 [ 900.090988][T24427] ? x64_sys_call+0x1cad/0x2dc0 [ 900.091051][T24427] security_transition_sid+0x58/0x70 [ 900.091079][T24427] selinux_socket_post_create+0x252/0x2a0 [ 900.091152][T24427] security_socket_post_create+0x5b/0xa0 [ 900.091179][T24427] __sock_create+0x35b/0x5a0 [ 900.091210][T24427] __sys_socketpair+0x17c/0x430 [ 900.091275][T24427] __x64_sys_socketpair+0x52/0x60 [ 900.091305][T24427] x64_sys_call+0x1cad/0x2dc0 [ 900.091338][T24427] do_syscall_64+0xc9/0x1c0 [ 900.091374][T24427] ? clear_bhb_loop+0x55/0xb0 [ 900.091395][T24427] ? clear_bhb_loop+0x55/0xb0 [ 900.091415][T24427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.091479][T24427] RIP: 0033:0x7f2ae6a8ed3a [ 900.091493][T24427] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.091511][T24427] RSP: 002b:00007f2ae50f0f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 900.091585][T24427] RAX: ffffffffffffffda RBX: 00007f2ae6ca5f01 RCX: 00007f2ae6a8ed3a [ 900.091597][T24427] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 900.091609][T24427] RBP: 00007f2ae50f1090 R08: 0000000000000000 R09: 0000000000000000 [ 900.091677][T24427] R10: 00007f2ae50f0f98 R11: 0000000000000246 R12: 0000000000000005 [ 900.091687][T24427] R13: 0000000000000000 R14: 00007f2ae6ca5fa0 R15: 00007ffc87776af8 [ 900.091703][T24427] [ 900.434643][T24429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17598'. [ 900.472914][T24427] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 900.479441][T24427] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 900.487258][T24427] vhci_hcd vhci_hcd.0: Device attached [ 900.500114][T24435] vhci_hcd: connection closed [ 900.504636][T23813] vhci_hcd: stop threads [ 900.513712][T23813] vhci_hcd: release socket [ 900.518355][T23813] vhci_hcd: disconnect device [ 900.597760][T24452] netlink: 'syz.6.17607': attribute type 13 has an invalid length. [ 900.613663][T24452] xt_CT: You must specify a L4 protocol and not use inversions on it [ 900.622342][T24454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17608'. [ 900.644305][T24446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17604'. [ 900.657191][T24446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17604'. [ 900.675620][T24455] syzkaller0: entered allmulticast mode [ 900.682408][T24455] syzkaller0 (unregistering): left allmulticast mode [ 900.808849][T24462] loop6: detected capacity change from 0 to 512 [ 900.815676][T24462] EXT4-fs: test_dummy_encryption option not supported [ 900.996384][T24470] netlink: 'syz.7.17613': attribute type 13 has an invalid length. [ 901.031950][T24472] netlink: 'syz.8.17614': attribute type 13 has an invalid length. [ 901.095359][T24472] xt_CT: You must specify a L4 protocol and not use inversions on it [ 901.674797][T24502] netlink: 'syz.3.17624': attribute type 7 has an invalid length. [ 901.682700][T24502] __nla_validate_parse: 3 callbacks suppressed [ 901.682712][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17624'. [ 901.710837][T24502] IPv6: NLM_F_CREATE should be specified when creating new route [ 901.740609][T24505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17626'. [ 901.864466][T24516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17630'. [ 901.877701][T24516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17630'. [ 902.179654][T24530] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17636'. [ 902.207733][T24532] loop6: detected capacity change from 0 to 2048 [ 902.232610][T24537] loop6: detected capacity change from 0 to 512 [ 902.240261][T24537] EXT4-fs: Ignoring removed i_version option [ 902.246555][T24537] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 902.259376][T24537] EXT4-fs (loop6): 1 truncate cleaned up [ 902.265378][T24537] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 902.291914][T18637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.310519][T24540] loop6: detected capacity change from 0 to 512 [ 902.317230][T24540] EXT4-fs: Ignoring removed i_version option [ 902.332713][T24540] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 902.362617][T24540] EXT4-fs (loop6): 1 truncate cleaned up [ 902.368591][T24540] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 902.399939][T18637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.463777][T24525] program syz.8.17634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 902.624824][T24553] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17643'. [ 902.862561][T24558] FAULT_INJECTION: forcing a failure. [ 902.862561][T24558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.875821][T24558] CPU: 0 UID: 0 PID: 24558 Comm: syz.3.17645 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 902.875846][T24558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 902.875857][T24558] Call Trace: [ 902.875863][T24558] [ 902.875869][T24558] dump_stack_lvl+0xf2/0x150 [ 902.875939][T24558] dump_stack+0x15/0x1a [ 902.875960][T24558] should_fail_ex+0x24a/0x260 [ 902.876037][T24558] should_fail+0xb/0x10 [ 902.876116][T24558] should_fail_usercopy+0x1a/0x20 [ 902.876146][T24558] _copy_from_user+0x1c/0xa0 [ 902.876178][T24558] get_user_ifreq+0x8c/0x160 [ 902.876317][T24558] sock_do_ioctl+0xc6/0x260 [ 902.876347][T24558] sock_ioctl+0x40f/0x600 [ 902.876374][T24558] ? __pfx_sock_ioctl+0x10/0x10 [ 902.876459][T24558] __se_sys_ioctl+0xc9/0x140 [ 902.876483][T24558] __x64_sys_ioctl+0x43/0x50 [ 902.876505][T24558] x64_sys_call+0x1690/0x2dc0 [ 902.876531][T24558] do_syscall_64+0xc9/0x1c0 [ 902.876574][T24558] ? clear_bhb_loop+0x55/0xb0 [ 902.876600][T24558] ? clear_bhb_loop+0x55/0xb0 [ 902.876621][T24558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.876671][T24558] RIP: 0033:0x7ff1af2ecde9 [ 902.876684][T24558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 902.876701][T24558] RSP: 002b:00007ff1ad957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 902.876721][T24558] RAX: ffffffffffffffda RBX: 00007ff1af505fa0 RCX: 00007ff1af2ecde9 [ 902.876734][T24558] RDX: 0000400000000040 RSI: 0000000000008914 RDI: 000000000000000a [ 902.876812][T24558] RBP: 00007ff1ad957090 R08: 0000000000000000 R09: 0000000000000000 [ 902.876823][T24558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.876833][T24558] R13: 0000000000000000 R14: 00007ff1af505fa0 R15: 00007ffd54915638 [ 902.876888][T24558] [ 902.878740][ T29] kauditd_printk_skb: 493 callbacks suppressed [ 902.878754][ T29] audit: type=1400 audit(1740004239.168:73079): avc: denied { unmount } for pid=24557 comm="syz.3.17645" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 903.117925][T24562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17647'. [ 903.204321][T18637] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 903.215342][T18637] CPU: 0 UID: 0 PID: 18637 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 903.215366][T18637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 903.215377][T18637] Call Trace: [ 903.215384][T18637] [ 903.215392][T18637] dump_stack_lvl+0xf2/0x150 [ 903.215477][T18637] dump_stack+0x15/0x1a [ 903.215495][T18637] dump_header+0x83/0x2d0 [ 903.215548][T18637] oom_kill_process+0x341/0x4c0 [ 903.215607][T18637] out_of_memory+0x9af/0xbe0 [ 903.215633][T18637] ? css_next_descendant_pre+0x11c/0x140 [ 903.215673][T18637] mem_cgroup_out_of_memory+0x13e/0x190 [ 903.215698][T18637] try_charge_memcg+0x508/0x7f0 [ 903.215719][T18637] charge_memcg+0x50/0xc0 [ 903.215741][T18637] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 903.215838][T18637] __read_swap_cache_async+0x236/0x480 [ 903.215942][T18637] swap_cluster_readahead+0x279/0x3f0 [ 903.215971][T18637] swapin_readahead+0xe4/0x6f0 [ 903.215998][T18637] ? swap_cache_get_folio+0x77/0x210 [ 903.216090][T18637] do_swap_page+0x31b/0x2550 [ 903.216117][T18637] ? hrtimer_try_to_cancel+0x1d3/0x1e0 [ 903.216136][T18637] ? __rcu_read_lock+0x36/0x50 [ 903.216163][T18637] ? __pfx_default_wake_function+0x10/0x10 [ 903.216195][T18637] handle_mm_fault+0x8e4/0x2ac0 [ 903.216308][T18637] exc_page_fault+0x3b9/0x650 [ 903.216333][T18637] asm_exc_page_fault+0x26/0x30 [ 903.216353][T18637] RIP: 0033:0x7fd279b8f665 [ 903.216366][T18637] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d de de 1b 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 903.216433][T18637] RSP: 002b:00007fffe542bd68 EFLAGS: 00010246 [ 903.216447][T18637] RAX: 0000000000000000 RBX: 0000000000000419 RCX: 00007fd279b8f663 [ 903.216460][T18637] RDX: 00007fffe542bd80 RSI: 0000000000000000 RDI: 0000000000000000 [ 903.216472][T18637] RBP: 00007fffe542bdec R08: 00000000079bbf8b R09: 0000000000000000 [ 903.216484][T18637] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 903.216597][T18637] R13: 00000000000927c0 R14: 00000000000e083f R15: 00007fffe542be40 [ 903.216612][T18637] [ 903.216617][T18637] memory: usage 307200kB, limit 307200kB, failcnt 480 [ 903.295601][T24570] netlink: 'syz.8.17651': attribute type 7 has an invalid length. [ 903.298338][T18637] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 903.303677][T24570] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17651'. [ 903.308429][T18637] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 903.334144][T24570] IPv6: NLM_F_CREATE should be specified when creating new route [ 903.334352][T18637] Memory cgroup stats for /syz6: [ 903.468503][T18637] cache 0 [ 903.476403][T18637] rss 0 [ 903.479182][T18637] shmem 0 [ 903.482110][T18637] mapped_file 0 [ 903.485627][T18637] dirty 0 [ 903.488585][T18637] writeback 0 [ 903.491862][T18637] workingset_refault_anon 151 [ 903.492405][ T29] audit: type=1326 audit(1740004239.809:73080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24573 comm="syz.7.17652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8bf6cde9 code=0x7ffc0000 [ 903.496558][T18637] workingset_refault_file 2425 [ 903.496567][T18637] swap 217088 [ 903.496573][T18637] swapcached 8192 [ 903.496579][T18637] pgpgin 705892 [ 903.496586][T18637] pgpgout 705888 [ 903.520189][ T29] audit: type=1326 audit(1740004239.809:73081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24573 comm="syz.7.17652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6e8bf6cde9 code=0x7ffc0000 [ 903.524956][T18637] pgfault 460723 [ 903.524964][T18637] pgmajfault 68 [ 903.528241][ T29] audit: type=1326 audit(1740004239.809:73082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24573 comm="syz.7.17652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8bf6cde9 code=0x7ffc0000 [ 903.531843][T18637] inactive_anon 8192 [ 903.535287][ T29] audit: type=1326 audit(1740004239.809:73083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24573 comm="syz.7.17652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e8bf6cde9 code=0x7ffc0000 [ 903.538842][T18637] active_anon 0 [ 903.538850][T18637] inactive_file 8192 [ 903.562461][ T29] audit: type=1326 audit(1740004239.809:73084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24573 comm="syz.7.17652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8bf6cde9 code=0x7ffc0000 [ 903.562509][ T29] audit: type=1326 audit(1740004239.809:73085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24573 comm="syz.7.17652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e8bf6cde9 code=0x7ffc0000 [ 903.566029][T18637] active_file 0 [ 903.569465][ T29] audit: type=1326 audit(1740004239.809:73086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24573 comm="syz.7.17652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8bf6cde9 code=0x7ffc0000 [ 903.593076][T18637] unevictable 0 [ 903.593084][T18637] hierarchical_memory_limit 314572800 [ 903.593092][T18637] hierarchical_memsw_limit 9223372036854771712 [ 903.593099][T18637] total_cache 0 [ 903.593105][T18637] total_rss 0 [ 903.593111][T18637] total_shmem 0 [ 903.593117][T18637] total_mapped_file 0 [ 903.597003][ T29] audit: type=1326 audit(1740004239.809:73087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24573 comm="syz.7.17652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6e8bf6cde9 code=0x7ffc0000 [ 903.620634][T18637] total_dirty 0 [ 903.624069][ T29] audit: type=1326 audit(1740004239.809:73088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24573 comm="syz.7.17652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8bf6cde9 code=0x7ffc0000 [ 903.627913][T18637] total_writeback 0 [ 903.627922][T18637] total_workingset_refault_anon 151 [ 903.791355][T18637] total_workingset_refault_file 2425 [ 903.796707][T18637] total_swap 217088 [ 903.796715][T18637] total_swapcached 8192 [ 903.796782][T18637] total_pgpgin 705892 [ 903.796787][T18637] total_pgpgout 705888 [ 903.796799][T18637] total_pgfault 460723 [ 903.796805][T18637] total_pgmajfault 68 [ 903.820924][T18637] total_inactive_anon 8192 [ 903.825465][T18637] total_active_anon 0 [ 903.829480][T18637] total_inactive_file 8192 [ 903.833947][T18637] total_active_file 0 [ 903.837945][T18637] total_unevictable 0 [ 903.841900][T18637] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.17643,pid=24549,uid=0 [ 903.856719][T18637] Memory cgroup out of memory: Killed process 24549 (syz.6.17643) total-vm:98080kB, anon-rss:916kB, file-rss:26668kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 903.874089][T24571] FAULT_INJECTION: forcing a failure. [ 903.874089][T24571] name failslab, interval 1, probability 0, space 0, times 0 [ 903.886735][T24571] CPU: 1 UID: 0 PID: 24571 Comm: syz.3.17650 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 903.886785][T24571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 903.886797][T24571] Call Trace: [ 903.886805][T24571] [ 903.886812][T24571] dump_stack_lvl+0xf2/0x150 [ 903.886835][T24571] dump_stack+0x15/0x1a [ 903.886899][T24571] should_fail_ex+0x24a/0x260 [ 903.886927][T24571] should_failslab+0x8f/0xb0 [ 903.886956][T24571] __kmalloc_node_noprof+0xad/0x410 [ 903.886980][T24571] ? __kvmalloc_node_noprof+0x72/0x170 [ 903.887004][T24571] __kvmalloc_node_noprof+0x72/0x170 [ 903.887034][T24571] bpf_test_run_xdp_live+0xf7/0x1040 [ 903.887074][T24571] ? __pfx_autoremove_wake_function+0x10/0x10 [ 903.887096][T24571] ? 0xffffffffa00038c0 [ 903.887109][T24571] ? synchronize_rcu+0x46/0x320 [ 903.887134][T24571] ? 0xffffffffa00038c0 [ 903.887211][T24571] ? bpf_dispatcher_change_prog+0x747/0x840 [ 903.887288][T24571] ? 0xffffffffa00038c0 [ 903.887298][T24571] ? 0xffffffffa0000794 [ 903.887319][T24571] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 903.887354][T24571] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 903.887392][T24571] ? __rcu_read_unlock+0x4e/0x70 [ 903.887415][T24571] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 903.887444][T24571] bpf_prog_test_run+0x20f/0x3a0 [ 903.887473][T24571] __sys_bpf+0x400/0x7a0 [ 903.887536][T24571] __x64_sys_bpf+0x43/0x50 [ 903.887561][T24571] x64_sys_call+0x2914/0x2dc0 [ 903.887584][T24571] do_syscall_64+0xc9/0x1c0 [ 903.887606][T24571] ? clear_bhb_loop+0x55/0xb0 [ 903.887671][T24571] ? clear_bhb_loop+0x55/0xb0 [ 903.887734][T24571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.887759][T24571] RIP: 0033:0x7ff1af2ecde9 [ 903.887834][T24571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 903.887850][T24571] RSP: 002b:00007ff1ad936038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 903.887865][T24571] RAX: ffffffffffffffda RBX: 00007ff1af506080 RCX: 00007ff1af2ecde9 [ 903.887893][T24571] RDX: 0000000000000048 RSI: 0000400000000600 RDI: 000000000000000a [ 903.887904][T24571] RBP: 00007ff1ad936090 R08: 0000000000000000 R09: 0000000000000000 [ 903.887916][T24571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.887928][T24571] R13: 0000000000000000 R14: 00007ff1af506080 R15: 00007ffd54915638 [ 903.887946][T24571] [ 904.298727][T24591] netlink: 'syz.7.17659': attribute type 13 has an invalid length. [ 904.308903][T24591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 904.463944][T24602] netlink: 'syz.6.17664': attribute type 13 has an invalid length. [ 904.482254][T24602] xt_CT: You must specify a L4 protocol and not use inversions on it [ 904.587363][T24608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17667'. [ 904.608681][T24608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17667'. [ 904.678121][T24595] program syz.8.17661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 904.894310][T24631] ieee802154 phy0 wpan0: encryption failed: -22 [ 904.902799][T24633] netlink: 'syz.3.17677': attribute type 13 has an invalid length. [ 904.916243][T24633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 905.111436][T24651] netlink: 'syz.3.17686': attribute type 13 has an invalid length. [ 905.121824][T24651] xt_CT: You must specify a L4 protocol and not use inversions on it [ 905.287402][T24661] netlink: 'syz.8.17690': attribute type 13 has an invalid length. [ 905.299277][T24661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 905.315293][T24664] SELinux: Context system_u:object_r:vmware_device_t:s0 is not valid (left unmapped). [ 905.326954][T24664] xt_hashlimit: max too large, truncated to 1048576 [ 905.535767][T24680] syzkaller0: entered allmulticast mode [ 905.542214][T24680] syzkaller0 (unregistering): left allmulticast mode [ 905.561449][T24682] FAULT_INJECTION: forcing a failure. [ 905.561449][T24682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.574665][T24682] CPU: 0 UID: 0 PID: 24682 Comm: syz.3.17699 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 905.574746][T24682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 905.574753][T24682] Call Trace: [ 905.574758][T24682] [ 905.574763][T24682] dump_stack_lvl+0xf2/0x150 [ 905.574779][T24682] dump_stack+0x15/0x1a [ 905.574790][T24682] should_fail_ex+0x24a/0x260 [ 905.574859][T24682] should_fail+0xb/0x10 [ 905.574871][T24682] should_fail_usercopy+0x1a/0x20 [ 905.574891][T24682] _copy_to_user+0x20/0xa0 [ 905.574951][T24682] __x64_sys_getrusage+0xb0/0x110 [ 905.574971][T24682] x64_sys_call+0x278e/0x2dc0 [ 905.574984][T24682] do_syscall_64+0xc9/0x1c0 [ 905.574999][T24682] ? clear_bhb_loop+0x55/0xb0 [ 905.575062][T24682] ? clear_bhb_loop+0x55/0xb0 [ 905.575092][T24682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.575116][T24682] RIP: 0033:0x7ff1af2ecde9 [ 905.575129][T24682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.575138][T24682] RSP: 002b:00007ff1ad957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000062 [ 905.575149][T24682] RAX: ffffffffffffffda RBX: 00007ff1af505fa0 RCX: 00007ff1af2ecde9 [ 905.575155][T24682] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000000 [ 905.575223][T24682] RBP: 00007ff1ad957090 R08: 0000000000000000 R09: 0000000000000000 [ 905.575230][T24682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.575236][T24682] R13: 0000000000000000 R14: 00007ff1af505fa0 R15: 00007ffd54915638 [ 905.575246][T24682] [ 905.824790][T24690] 9pnet_virtio: no channels available for device [ 906.065621][T24685] program syz.8.17700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 906.388552][T24710] syzkaller0: entered allmulticast mode [ 906.395245][T24710] syzkaller0 (unregistering): left allmulticast mode [ 906.593652][T24713] FAULT_INJECTION: forcing a failure. [ 906.593652][T24713] name failslab, interval 1, probability 0, space 0, times 0 [ 906.606309][T24713] CPU: 0 UID: 0 PID: 24713 Comm: syz.4.17711 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 906.606332][T24713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 906.606343][T24713] Call Trace: [ 906.606349][T24713] [ 906.606355][T24713] dump_stack_lvl+0xf2/0x150 [ 906.606452][T24713] dump_stack+0x15/0x1a [ 906.606510][T24713] should_fail_ex+0x24a/0x260 [ 906.606576][T24713] should_failslab+0x8f/0xb0 [ 906.606607][T24713] kmem_cache_alloc_noprof+0x52/0x320 [ 906.606624][T24713] ? security_file_alloc+0x32/0x100 [ 906.606671][T24713] security_file_alloc+0x32/0x100 [ 906.606695][T24713] init_file+0x5d/0x1b0 [ 906.606712][T24713] alloc_file_pseudo_noaccount+0xf8/0x1f0 [ 906.606736][T24713] bdev_file_open_by_dev+0x185/0x220 [ 906.606815][T24713] ? __pfx_resume_store+0x10/0x10 [ 906.606837][T24713] swsusp_check+0x3f/0x260 [ 906.606908][T24713] software_resume+0x43/0x2e0 [ 906.606929][T24713] resume_store+0x34e/0x3a0 [ 906.607010][T24713] kobj_attr_store+0x47/0x70 [ 906.607026][T24713] ? __pfx_kobj_attr_store+0x10/0x10 [ 906.607045][T24713] sysfs_kf_write+0xae/0xd0 [ 906.607141][T24713] ? __pfx_sysfs_kf_write+0x10/0x10 [ 906.607158][T24713] kernfs_fop_write_iter+0x1c8/0x2c0 [ 906.607187][T24713] vfs_write+0x77b/0x920 [ 906.607210][T24713] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 906.607285][T24713] ksys_write+0xe8/0x1b0 [ 906.607308][T24713] __x64_sys_write+0x42/0x50 [ 906.607328][T24713] x64_sys_call+0x287e/0x2dc0 [ 906.607445][T24713] do_syscall_64+0xc9/0x1c0 [ 906.607468][T24713] ? clear_bhb_loop+0x55/0xb0 [ 906.607489][T24713] ? clear_bhb_loop+0x55/0xb0 [ 906.607550][T24713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.607572][T24713] RIP: 0033:0x7feec255cde9 [ 906.607589][T24713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.607604][T24713] RSP: 002b:00007feec0bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 906.607670][T24713] RAX: ffffffffffffffda RBX: 00007feec2775fa0 RCX: 00007feec255cde9 [ 906.607681][T24713] RDX: 0000000000000012 RSI: 0000400000000040 RDI: 0000000000000003 [ 906.607691][T24713] RBP: 00007feec0bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 906.607700][T24713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.607710][T24713] R13: 0000000000000000 R14: 00007feec2775fa0 R15: 00007ffc82103908 [ 906.607726][T24713] [ 906.882954][T24717] __nla_validate_parse: 6 callbacks suppressed [ 906.882970][T24717] netlink: 16 bytes leftover after parsing attributes in process `syz.8.17713'. [ 906.920456][T24719] IPv6: NLM_F_CREATE should be specified when creating new route [ 906.970797][T24727] netlink: 20 bytes leftover after parsing attributes in process `syz.8.17718'. [ 906.997402][T24731] netlink: 'syz.8.17720': attribute type 13 has an invalid length. [ 907.008436][T24731] xt_CT: You must specify a L4 protocol and not use inversions on it [ 907.012789][T24733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17721'. [ 907.126794][T24738] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17723'. [ 907.138352][T24738] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 907.147697][T24738] bond_slave_1 (unregistering): left promiscuous mode [ 907.174363][T24741] netlink: 'syz.3.17724': attribute type 13 has an invalid length. [ 907.184039][T24741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 907.321878][T24758] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17732'. [ 907.363307][T24760] netlink: 'syz.7.17733': attribute type 13 has an invalid length. [ 907.377070][T24748] hsr_slave_0: left promiscuous mode [ 907.383048][T24748] hsr_slave_1: left promiscuous mode [ 907.388492][T24760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 907.540299][T24769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17737'. [ 907.610809][T24772] loop8: detected capacity change from 0 to 736 [ 907.670271][T24774] lo speed is unknown, defaulting to 1000 [ 907.671248][T24776] netlink: 'syz.8.17739': attribute type 13 has an invalid length. [ 907.699986][T24774] lo speed is unknown, defaulting to 1000 [ 907.712643][T24776] xt_CT: You must specify a L4 protocol and not use inversions on it [ 907.899896][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 907.899978][ T29] audit: type=1326 audit(1740004244.439:73362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.3.17743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 907.933152][ T29] audit: type=1326 audit(1740004244.449:73363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.3.17743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 907.956891][ T29] audit: type=1326 audit(1740004244.449:73364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.3.17743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 907.980577][ T29] audit: type=1326 audit(1740004244.449:73365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.3.17743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 908.004315][ T29] audit: type=1326 audit(1740004244.449:73366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.3.17743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 908.028154][ T29] audit: type=1326 audit(1740004244.449:73367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.3.17743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 908.032507][T24784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17743'. [ 908.051822][ T29] audit: type=1326 audit(1740004244.449:73368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.3.17743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 908.084435][ T29] audit: type=1326 audit(1740004244.449:73369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.3.17743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 908.108130][ T29] audit: type=1326 audit(1740004244.449:73370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.3.17743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff1af2ecde9 code=0x7ffc0000 [ 908.131784][ T29] audit: type=1326 audit(1740004244.449:73371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.3.17743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff1af2ece23 code=0x7ffc0000 [ 908.158460][T24791] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17745'. [ 908.204660][T24797] netlink: 'syz.3.17747': attribute type 13 has an invalid length. [ 908.214786][T24797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 908.236585][T24798] loop6: detected capacity change from 0 to 164 [ 908.393254][T24817] netlink: 'syz.3.17752': attribute type 13 has an invalid length. [ 908.403630][T24817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 908.414631][T24821] netlink: 24 bytes leftover after parsing attributes in process `syz.7.17753'. [ 908.682658][T24830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17757'. [ 908.699013][T24832] loop7: detected capacity change from 0 to 8192 [ 908.708206][T24832] vfat: Unknown parameter '' [ 908.754879][T24838] netlink: 'syz.8.17760': attribute type 13 has an invalid length. [ 908.765557][T24838] xt_CT: You must specify a L4 protocol and not use inversions on it [ 908.843640][T24846] loop8: detected capacity change from 0 to 128 [ 908.890611][T24855] netlink: 'syz.8.17765': attribute type 13 has an invalid length. [ 908.900650][T24855] xt_CT: You must specify a L4 protocol and not use inversions on it [ 908.910632][T24840] Invalid ELF header magic: != ELF [ 909.021725][T24873] loop8: detected capacity change from 0 to 128 [ 909.032660][T24873] FAULT_INJECTION: forcing a failure. [ 909.032660][T24873] name failslab, interval 1, probability 0, space 0, times 0 [ 909.045396][T24873] CPU: 1 UID: 0 PID: 24873 Comm: syz.8.17771 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 909.045440][T24873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 909.045450][T24873] Call Trace: [ 909.045455][T24873] [ 909.045461][T24873] dump_stack_lvl+0xf2/0x150 [ 909.045482][T24873] dump_stack+0x15/0x1a [ 909.045498][T24873] should_fail_ex+0x24a/0x260 [ 909.045520][T24873] should_failslab+0x8f/0xb0 [ 909.045563][T24873] __kmalloc_noprof+0xab/0x3f0 [ 909.045645][T24873] ? copy_splice_read+0xb5/0x5b0 [ 909.045664][T24873] copy_splice_read+0xb5/0x5b0 [ 909.045683][T24873] ? __kmalloc_noprof+0x284/0x3f0 [ 909.045698][T24873] ? alloc_pipe_info+0x1cb/0x360 [ 909.045783][T24873] ? __pfx_copy_splice_read+0x10/0x10 [ 909.045801][T24873] splice_direct_to_actor+0x269/0x670 [ 909.045820][T24873] ? __pfx_direct_splice_actor+0x10/0x10 [ 909.045886][T24873] do_splice_direct+0xd7/0x150 [ 909.045904][T24873] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 909.045926][T24873] do_sendfile+0x398/0x660 [ 909.045986][T24873] __x64_sys_sendfile64+0x110/0x150 [ 909.046011][T24873] x64_sys_call+0xfbd/0x2dc0 [ 909.046030][T24873] do_syscall_64+0xc9/0x1c0 [ 909.046108][T24873] ? clear_bhb_loop+0x55/0xb0 [ 909.046128][T24873] ? clear_bhb_loop+0x55/0xb0 [ 909.046148][T24873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.046167][T24873] RIP: 0033:0x7f2ae6a8cde9 [ 909.046202][T24873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 909.046216][T24873] RSP: 002b:00007f2ae50f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 909.046231][T24873] RAX: ffffffffffffffda RBX: 00007f2ae6ca5fa0 RCX: 00007f2ae6a8cde9 [ 909.046241][T24873] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 909.046250][T24873] RBP: 00007f2ae50f1090 R08: 0000000000000000 R09: 0000000000000000 [ 909.046259][T24873] R10: 0000000080000004 R11: 0000000000000246 R12: 0000000000000001 [ 909.046269][T24873] R13: 0000000000000000 R14: 00007f2ae6ca5fa0 R15: 00007ffc87776af8 [ 909.046351][T24873] [ 909.051577][T24869] loop6: detected capacity change from 0 to 8192 [ 909.102453][T24875] loop7: detected capacity change from 0 to 8192 [ 909.109038][T24869] vfat: Unknown parameter '' [ 909.123221][T24875] vfat: Unknown parameter '' [ 909.305072][T24881] netlink: 'syz.6.17774': attribute type 13 has an invalid length. [ 909.316281][T24881] xt_CT: You must specify a L4 protocol and not use inversions on it [ 909.348383][T24883] loop7: detected capacity change from 0 to 128 [ 909.491607][T24898] syzkaller0: entered allmulticast mode [ 909.500824][T24898] syzkaller0 (unregistering): left allmulticast mode [ 909.601633][T24904] loop7: detected capacity change from 0 to 512 [ 909.608352][T24904] EXT4-fs: test_dummy_encryption option not supported [ 909.757556][T24909] loop6: detected capacity change from 0 to 512 [ 909.802641][T24909] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 909.843035][T24909] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 909.892683][T18637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.173872][T24928] loop6: detected capacity change from 0 to 512 [ 912.174224][T24928] EXT4-fs: test_dummy_encryption option not supported [ 912.541840][T24934] loop7: detected capacity change from 0 to 1024 [ 912.544381][T24936] loop8: detected capacity change from 0 to 512 [ 912.544799][T24934] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 912.544819][T24934] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 912.544849][T24934] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 912.546025][T24934] EXT4-fs error (device loop7): ext4_get_journal_inode:5798: inode #5: comm syz.7.17794: unexpected bad inode w/o EXT4_IGET_BAD [ 912.546167][T24934] EXT4-fs (loop7): no journal found [ 912.546179][T24934] EXT4-fs (loop7): can't get journal size [ 912.563915][T24934] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 912.828139][T24936] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 912.828344][T24936] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 912.829133][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 912.829144][ T29] audit: type=1400 audit(1740004249.615:73934): avc: denied { write } for pid=24935 comm="syz.8.17795" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 912.829238][ T29] audit: type=1400 audit(1740004249.615:73935): avc: denied { add_name } for pid=24935 comm="syz.8.17795" name="blkio.bfq.idle_time" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 912.829327][ T29] audit: type=1400 audit(1740004249.615:73936): avc: denied { create } for pid=24935 comm="syz.8.17795" name="blkio.bfq.idle_time" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 913.069216][ T29] audit: type=1400 audit(1740004249.867:73937): avc: denied { read append open } for pid=24935 comm="syz.8.17795" path="/359/file1/blkio.bfq.idle_time" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 913.101542][T24946] __nla_validate_parse: 9 callbacks suppressed [ 913.101556][T24946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17798'. [ 913.117472][T19876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.157497][T20362] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.186273][ T29] audit: type=1400 audit(1740004249.940:73938): avc: denied { ioctl } for pid=24935 comm="syz.8.17795" path="/359/file1/cgroup.controllers" dev="loop8" ino=19 ioctlcmd=0x4b34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 913.321403][ T29] audit: type=1400 audit(1740004250.024:73939): avc: denied { read } for pid=24948 comm="syz.3.17800" dev="nsfs" ino=4026532459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 913.342970][ T29] audit: type=1400 audit(1740004250.024:73940): avc: denied { open } for pid=24948 comm="syz.3.17800" path="ipc:[4026532459]" dev="nsfs" ino=4026532459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 913.366482][ T29] audit: type=1400 audit(1740004250.024:73941): avc: denied { bind } for pid=24948 comm="syz.3.17800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 913.386127][ T29] audit: type=1400 audit(1740004250.024:73942): avc: denied { name_bind } for pid=24948 comm="syz.3.17800" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 913.407266][ T29] audit: type=1400 audit(1740004250.024:73943): avc: denied { node_bind } for pid=24948 comm="syz.3.17800" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 913.469988][T24959] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24959 comm=syz.6.17803 [ 913.721349][T24972] loop6: detected capacity change from 0 to 512 [ 913.747011][T24972] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.775213][T24972] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 913.825769][T18637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.876037][T24981] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17810'. [ 913.923087][T24978] loop7: detected capacity change from 0 to 8192 [ 913.930010][T24984] lo speed is unknown, defaulting to 1000 [ 913.936196][T24978] vfat: Unknown parameter '' [ 913.972282][T24978] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17797'. [ 913.995587][T24984] lo speed is unknown, defaulting to 1000 [ 914.008745][T24987] FAULT_INJECTION: forcing a failure. [ 914.008745][T24987] name failslab, interval 1, probability 0, space 0, times 0 [ 914.021459][T24987] CPU: 0 UID: 0 PID: 24987 Comm: syz.4.17812 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 914.021480][T24987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 914.021492][T24987] Call Trace: [ 914.021498][T24987] [ 914.021579][T24987] dump_stack_lvl+0xf2/0x150 [ 914.021601][T24987] dump_stack+0x15/0x1a [ 914.021617][T24987] should_fail_ex+0x24a/0x260 [ 914.021676][T24987] should_failslab+0x8f/0xb0 [ 914.021725][T24987] kmem_cache_alloc_noprof+0x52/0x320 [ 914.021746][T24987] ? audit_log_start+0x34c/0x6b0 [ 914.021777][T24987] audit_log_start+0x34c/0x6b0 [ 914.021810][T24987] audit_seccomp+0x4b/0x130 [ 914.021896][T24987] __seccomp_filter+0x6fa/0x1180 [ 914.021921][T24987] ? semctl_down+0x92/0x4a0 [ 914.022017][T24987] __secure_computing+0x9f/0x1c0 [ 914.022039][T24987] syscall_trace_enter+0xd1/0x1f0 [ 914.022064][T24987] do_syscall_64+0xaa/0x1c0 [ 914.022086][T24987] ? clear_bhb_loop+0x55/0xb0 [ 914.022146][T24987] ? clear_bhb_loop+0x55/0xb0 [ 914.022167][T24987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.022188][T24987] RIP: 0033:0x7feec255b7fc [ 914.022263][T24987] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 914.022278][T24987] RSP: 002b:00007feec0bc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 914.022293][T24987] RAX: ffffffffffffffda RBX: 00007feec2775fa0 RCX: 00007feec255b7fc [ 914.022396][T24987] RDX: 000000000000000f RSI: 00007feec0bc70a0 RDI: 0000000000000004 [ 914.022408][T24987] RBP: 00007feec0bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 914.022421][T24987] R10: 0000400000000240 R11: 0000000000000246 R12: 0000000000000001 [ 914.022433][T24987] R13: 0000000000000000 R14: 00007feec2775fa0 R15: 00007ffc82103908 [ 914.022447][T24987] [ 914.038684][T24988] ieee802154 phy0 wpan0: encryption failed: -22 [ 914.072392][T24992] netlink: 'syz.3.17814': attribute type 7 has an invalid length. [ 914.222670][T24992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17814'. [ 914.223185][T24995] netlink: 'syz.4.17813': attribute type 13 has an invalid length. [ 914.245419][T24994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 914.334064][T25009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17819'. [ 914.414830][T25019] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17821'. [ 914.495121][T25023] netpci0: tun_chr_ioctl cmd 1074025676 [ 914.500788][T25023] netpci0: owner set to 0 [ 914.604720][T25026] netlink: 36 bytes leftover after parsing attributes in process `syz.8.17824'. [ 914.636512][T25028] netlink: 'syz.4.17826': attribute type 7 has an invalid length. [ 914.644442][T25028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17826'. [ 914.699006][T25034] loop6: detected capacity change from 0 to 512 [ 914.741864][T25034] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 914.752243][T25034] EXT4-fs (loop6): orphan cleanup on readonly fs [ 914.760026][T25042] FAULT_INJECTION: forcing a failure. [ 914.760026][T25042] name failslab, interval 1, probability 0, space 0, times 0 [ 914.772674][T25042] CPU: 0 UID: 0 PID: 25042 Comm: syz.8.17832 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 914.772696][T25042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 914.772705][T25042] Call Trace: [ 914.772711][T25042] [ 914.772718][T25042] dump_stack_lvl+0xf2/0x150 [ 914.772759][T25042] dump_stack+0x15/0x1a [ 914.772776][T25042] should_fail_ex+0x24a/0x260 [ 914.772799][T25042] should_failslab+0x8f/0xb0 [ 914.772823][T25042] kmem_cache_alloc_node_noprof+0x59/0x320 [ 914.772882][T25042] ? __alloc_skb+0x10b/0x310 [ 914.772901][T25042] __alloc_skb+0x10b/0x310 [ 914.772963][T25042] ? audit_log_start+0x34c/0x6b0 [ 914.772994][T25042] audit_log_start+0x368/0x6b0 [ 914.773057][T25042] ? kmem_cache_free+0xdc/0x2d0 [ 914.773134][T25042] audit_seccomp+0x4b/0x130 [ 914.773172][T25042] __seccomp_filter+0x6fa/0x1180 [ 914.773190][T25042] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 914.773217][T25042] ? vfs_write+0x644/0x920 [ 914.773294][T25042] __secure_computing+0x9f/0x1c0 [ 914.773314][T25042] syscall_trace_enter+0xd1/0x1f0 [ 914.773374][T25042] ? fpregs_assert_state_consistent+0x83/0xa0 [ 914.773393][T25042] do_syscall_64+0xaa/0x1c0 [ 914.773450][T25042] ? clear_bhb_loop+0x55/0xb0 [ 914.773474][T25042] ? clear_bhb_loop+0x55/0xb0 [ 914.773496][T25042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.773523][T25042] RIP: 0033:0x7f2ae6a8b7fc [ 914.773536][T25042] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 914.773551][T25042] RSP: 002b:00007f2ae50f1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 914.773567][T25042] RAX: ffffffffffffffda RBX: 00007f2ae6ca5fa0 RCX: 00007f2ae6a8b7fc [ 914.773577][T25042] RDX: 000000000000000f RSI: 00007f2ae50f10a0 RDI: 0000000000000005 [ 914.773587][T25042] RBP: 00007f2ae50f1090 R08: 0000000000000000 R09: 0000000000000000 [ 914.773597][T25042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.773667][T25042] R13: 0000000000000000 R14: 00007f2ae6ca5fa0 R15: 00007ffc87776af8 [ 914.773683][T25042] [ 914.991515][T25046] netlink: 'syz.7.17831': attribute type 13 has an invalid length. [ 914.996268][T25034] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 915.015841][T25046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 915.028041][T25034] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 915.038430][T25034] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.17822: bg 0: block 40: padding at end of block bitmap is not set [ 915.054308][T25034] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 915.063451][T25034] EXT4-fs (loop6): 1 truncate cleaned up [ 915.076883][T25036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17828'. [ 915.097719][T25034] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 915.158514][T25062] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17837'. [ 915.179740][T25021] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #16: comm syz.6.17822: corrupted xattr block 31: invalid header [ 915.197925][T25064] netlink: 'syz.7.17839': attribute type 7 has an invalid length. [ 915.217480][T25062] team0 (unregistering): Port device team_slave_0 removed [ 915.230275][T25021] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 915.239543][T25062] team0 (unregistering): Port device team_slave_1 removed [ 915.262398][T25067] IPv6: NLM_F_CREATE should be specified when creating new route [ 915.337759][T18637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.375202][T25075] loop8: detected capacity change from 0 to 8192 [ 915.381940][T25075] vfat: Unknown parameter '' [ 915.420100][T25093] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 915.434633][T25095] loop7: detected capacity change from 0 to 512 [ 915.454796][T25095] EXT4-fs: Ignoring removed oldalloc option [ 915.466386][T25095] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.17847: Parent and EA inode have the same ino 15 [ 915.486665][T25095] EXT4-fs (loop7): Remounting filesystem read-only [ 915.493203][T25095] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 915.511512][T25090] loop6: detected capacity change from 0 to 8192 [ 915.518578][T25090] vfat: Unknown parameter '' [ 915.520777][T25098] x_tables: duplicate underflow at hook 3 [ 915.541560][T25095] EXT4-fs (loop7): 1 orphan inode deleted [ 915.548910][T25095] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 915.561196][T25095] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 915.568513][T25095] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.631503][T25107] netlink: 'syz.4.17857': attribute type 7 has an invalid length. [ 915.915383][T25121] loop6: detected capacity change from 0 to 8192 [ 915.922110][T25121] vfat: Unknown parameter '' [ 916.166140][T25127] lo speed is unknown, defaulting to 1000 [ 916.350334][T25123] program syz.4.17864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 916.351640][T25127] lo speed is unknown, defaulting to 1000 [ 916.583490][T25142] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25142 comm=syz.7.17869 [ 916.596190][T25142] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25142 comm=syz.7.17869 [ 916.801835][T25152] lo speed is unknown, defaulting to 1000 [ 916.834080][T25155] netlink: 'syz.8.17873': attribute type 13 has an invalid length. [ 916.852364][T25152] lo speed is unknown, defaulting to 1000 [ 916.890146][T25155] xt_CT: You must specify a L4 protocol and not use inversions on it [ 917.081458][T25165] loop6: detected capacity change from 0 to 512 [ 917.098169][T25165] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 917.110996][T25166] syzkaller0: entered allmulticast mode [ 917.119561][T25170] netlink: 'syz.4.17878': attribute type 13 has an invalid length. [ 917.130109][T25165] EXT4-fs (loop6): orphan cleanup on readonly fs [ 917.137030][T25165] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 917.156530][T25170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 917.191525][T25165] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 917.198860][T25165] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.17874: bg 0: block 40: padding at end of block bitmap is not set [ 917.215271][T25165] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 917.225183][T25166] syzkaller0 (unregistering): left allmulticast mode [ 917.234627][T25172] netlink: 'syz.4.17879': attribute type 13 has an invalid length. [ 917.244982][T25165] EXT4-fs (loop6): 1 truncate cleaned up [ 917.251258][T25165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 917.275284][T25172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 917.335260][T25158] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #16: comm syz.6.17874: corrupted xattr block 31: invalid header [ 917.390001][T25158] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 917.401644][T25175] loop7: detected capacity change from 0 to 8192 [ 917.408394][T25175] vfat: Unknown parameter '' [ 917.413104][T25179] loop8: detected capacity change from 0 to 2048 [ 917.440079][T25179] FAULT_INJECTION: forcing a failure. [ 917.440079][T25179] name failslab, interval 1, probability 0, space 0, times 0 [ 917.452726][T25179] CPU: 1 UID: 0 PID: 25179 Comm: syz.8.17882 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 917.452820][T25179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 917.452830][T25179] Call Trace: [ 917.452837][T25179] [ 917.452844][T25179] dump_stack_lvl+0xf2/0x150 [ 917.452870][T25179] dump_stack+0x15/0x1a [ 917.452890][T25179] should_fail_ex+0x24a/0x260 [ 917.452970][T25179] ? nf_tables_newtable+0x3a1/0xee0 [ 917.453031][T25179] should_failslab+0x8f/0xb0 [ 917.453054][T25179] __kmalloc_cache_noprof+0x4e/0x320 [ 917.453076][T25179] nf_tables_newtable+0x3a1/0xee0 [ 917.453124][T25179] nfnetlink_rcv+0xb3e/0x15d0 [ 917.453241][T25179] netlink_unicast+0x599/0x670 [ 917.453262][T25179] netlink_sendmsg+0x5cc/0x6e0 [ 917.453286][T25179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 917.453387][T25179] __sock_sendmsg+0x140/0x180 [ 917.453444][T25179] ____sys_sendmsg+0x326/0x4b0 [ 917.453538][T25179] __sys_sendmsg+0x19d/0x230 [ 917.453565][T25179] __x64_sys_sendmsg+0x46/0x50 [ 917.453582][T25179] x64_sys_call+0x2734/0x2dc0 [ 917.453658][T25179] do_syscall_64+0xc9/0x1c0 [ 917.453678][T25179] ? clear_bhb_loop+0x55/0xb0 [ 917.453752][T25179] ? clear_bhb_loop+0x55/0xb0 [ 917.453771][T25179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.453791][T25179] RIP: 0033:0x7f2ae6a8cde9 [ 917.453803][T25179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.453817][T25179] RSP: 002b:00007f2ae50f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 917.453883][T25179] RAX: ffffffffffffffda RBX: 00007f2ae6ca5fa0 RCX: 00007f2ae6a8cde9 [ 917.453893][T25179] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000007 [ 917.453902][T25179] RBP: 00007f2ae50f1090 R08: 0000000000000000 R09: 0000000000000000 [ 917.453911][T25179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.453920][T25179] R13: 0000000000000000 R14: 00007f2ae6ca5fa0 R15: 00007ffc87776af8 [ 917.453968][T25179] [ 917.470990][T25183] netlink: 'syz.4.17884': attribute type 7 has an invalid length. [ 917.670786][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 917.670799][ T29] audit: type=1326 audit(1740004254.697:74426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25174 comm="syz.7.17880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e8bf63da7 code=0x7ffc0000 [ 917.677495][T18637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.700560][ T29] audit: type=1326 audit(1740004254.697:74427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25174 comm="syz.7.17880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e8bf08fb9 code=0x7ffc0000 [ 917.700617][ T29] audit: type=1326 audit(1740004254.697:74428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25174 comm="syz.7.17880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e8bf63da7 code=0x7ffc0000 [ 917.700639][ T29] audit: type=1326 audit(1740004254.697:74429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25174 comm="syz.7.17880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e8bf08fb9 code=0x7ffc0000 [ 917.780689][ T29] audit: type=1326 audit(1740004254.697:74430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25174 comm="syz.7.17880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e8bf63da7 code=0x7ffc0000 [ 917.804298][ T29] audit: type=1326 audit(1740004254.697:74431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25174 comm="syz.7.17880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e8bf08fb9 code=0x7ffc0000 [ 917.828172][ T29] audit: type=1326 audit(1740004254.697:74432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25174 comm="syz.7.17880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e8bf63da7 code=0x7ffc0000 [ 917.851746][ T29] audit: type=1326 audit(1740004254.697:74433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25174 comm="syz.7.17880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e8bf08fb9 code=0x7ffc0000 [ 917.875572][ T29] audit: type=1326 audit(1740004254.697:74434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25174 comm="syz.7.17880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e8bf63da7 code=0x7ffc0000 [ 917.899179][ T29] audit: type=1326 audit(1740004254.697:74435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25174 comm="syz.7.17880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e8bf08fb9 code=0x7ffc0000 [ 917.958807][T25197] FAULT_INJECTION: forcing a failure. [ 917.958807][T25197] name failslab, interval 1, probability 0, space 0, times 0 [ 917.971516][T25197] CPU: 0 UID: 0 PID: 25197 Comm: syz.8.17889 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 917.971538][T25197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 917.971547][T25197] Call Trace: [ 917.971554][T25197] [ 917.971560][T25197] dump_stack_lvl+0xf2/0x150 [ 917.971656][T25197] dump_stack+0x15/0x1a [ 917.971674][T25197] should_fail_ex+0x24a/0x260 [ 917.971694][T25197] ? md_alloc+0x99/0xa00 [ 917.971710][T25197] should_failslab+0x8f/0xb0 [ 917.971796][T25197] __kmalloc_cache_noprof+0x4e/0x320 [ 917.971809][T25197] md_alloc+0x99/0xa00 [ 917.971842][T25197] ? __pfx_resume_store+0x10/0x10 [ 917.971854][T25197] md_alloc_and_put+0x18/0x150 [ 917.971870][T25197] md_probe+0x79/0x90 [ 917.971954][T25197] ? __pfx_md_probe+0x10/0x10 [ 917.971978][T25197] blk_request_module+0x1bb/0x1e0 [ 917.972014][T25197] blkdev_get_no_open+0x43/0xe0 [ 917.972036][T25197] bdev_file_open_by_dev+0x99/0x220 [ 917.972121][T25197] ? __pfx_resume_store+0x10/0x10 [ 917.972140][T25197] swsusp_check+0x3f/0x260 [ 917.972163][T25197] software_resume+0x43/0x2e0 [ 917.972261][T25197] resume_store+0x34e/0x3a0 [ 917.972279][T25197] kobj_attr_store+0x47/0x70 [ 917.972339][T25197] ? __pfx_kobj_attr_store+0x10/0x10 [ 917.972396][T25197] sysfs_kf_write+0xae/0xd0 [ 917.972438][T25197] ? __pfx_sysfs_kf_write+0x10/0x10 [ 917.972454][T25197] kernfs_fop_write_iter+0x1c8/0x2c0 [ 917.972480][T25197] vfs_write+0x77b/0x920 [ 917.972500][T25197] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 917.972582][T25197] ksys_write+0xe8/0x1b0 [ 917.972612][T25197] __x64_sys_write+0x42/0x50 [ 917.972701][T25197] x64_sys_call+0x287e/0x2dc0 [ 917.972755][T25197] do_syscall_64+0xc9/0x1c0 [ 917.972840][T25197] ? clear_bhb_loop+0x55/0xb0 [ 917.972924][T25197] ? clear_bhb_loop+0x55/0xb0 [ 917.973075][T25197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.973103][T25197] RIP: 0033:0x7f2ae6a8cde9 [ 917.973117][T25197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.973136][T25197] RSP: 002b:00007f2ae50f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 917.973152][T25197] RAX: ffffffffffffffda RBX: 00007f2ae6ca5fa0 RCX: 00007f2ae6a8cde9 [ 917.973165][T25197] RDX: 0000000000000012 RSI: 0000400000000000 RDI: 0000000000000003 [ 917.973177][T25197] RBP: 00007f2ae50f1090 R08: 0000000000000000 R09: 0000000000000000 [ 917.973188][T25197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.973199][T25197] R13: 0000000000000000 R14: 00007f2ae6ca5fa0 R15: 00007ffc87776af8 [ 917.973267][T25197] [ 918.254586][T25203] xt_CT: You must specify a L4 protocol and not use inversions on it [ 918.266776][T25189] xt_CT: You must specify a L4 protocol and not use inversions on it [ 918.292241][T25198] syzkaller0: entered allmulticast mode [ 918.307517][T25198] syzkaller0 (unregistering): left allmulticast mode [ 918.349059][T25205] FAULT_INJECTION: forcing a failure. [ 918.349059][T25205] name failslab, interval 1, probability 0, space 0, times 0 [ 918.362605][T25205] CPU: 1 UID: 0 PID: 25205 Comm: syz.4.17892 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 918.362698][T25205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 918.362709][T25205] Call Trace: [ 918.362716][T25205] [ 918.362722][T25205] dump_stack_lvl+0xf2/0x150 [ 918.362750][T25205] dump_stack+0x15/0x1a [ 918.362769][T25205] should_fail_ex+0x24a/0x260 [ 918.362819][T25205] should_failslab+0x8f/0xb0 [ 918.362844][T25205] __kmalloc_noprof+0xab/0x3f0 [ 918.362885][T25205] ? security_tun_dev_alloc_security+0x3e/0x130 [ 918.362914][T25205] security_tun_dev_alloc_security+0x3e/0x130 [ 918.362939][T25205] tun_net_init+0x52/0x290 [ 918.362971][T25205] register_netdevice+0x293/0xeb0 [ 918.363012][T25205] ? dev_addr_mod+0x1d9/0x200 [ 918.363038][T25205] tun_set_iff+0x609/0x8c0 [ 918.363110][T25205] __tun_chr_ioctl+0x66d/0x1800 [ 918.363132][T25205] tun_chr_ioctl+0x27/0x30 [ 918.363180][T25205] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 918.363200][T25205] __se_sys_ioctl+0xc9/0x140 [ 918.363224][T25205] __x64_sys_ioctl+0x43/0x50 [ 918.363245][T25205] x64_sys_call+0x1690/0x2dc0 [ 918.363265][T25205] do_syscall_64+0xc9/0x1c0 [ 918.363367][T25205] ? clear_bhb_loop+0x55/0xb0 [ 918.363389][T25205] ? clear_bhb_loop+0x55/0xb0 [ 918.363424][T25205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.363449][T25205] RIP: 0033:0x7feec255cde9 [ 918.363463][T25205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.363478][T25205] RSP: 002b:00007feec0bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 918.363552][T25205] RAX: ffffffffffffffda RBX: 00007feec2775fa0 RCX: 00007feec255cde9 [ 918.363602][T25205] RDX: 0000400000000200 RSI: 00000000400454ca RDI: 0000000000000007 [ 918.363617][T25205] RBP: 00007feec0bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 918.363630][T25205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 918.363642][T25205] R13: 0000000000000000 R14: 00007feec2775fa0 R15: 00007ffc82103908 [ 918.363660][T25205] [ 918.366172][T25212] __nla_validate_parse: 12 callbacks suppressed [ 918.366186][T25212] netlink: 108 bytes leftover after parsing attributes in process `syz.6.17885'. [ 918.585916][T25212] netlink: 108 bytes leftover after parsing attributes in process `syz.6.17885'. [ 918.595101][T25212] netlink: 84 bytes leftover after parsing attributes in process `syz.6.17885'. [ 918.721124][T25229] loop7: detected capacity change from 0 to 1024 [ 918.746104][T25229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.777517][T19876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.789492][T25247] SELinux: OOM in selnl_notify [ 918.794524][T25249] xt_CT: You must specify a L4 protocol and not use inversions on it [ 918.838415][T25255] FAULT_INJECTION: forcing a failure. [ 918.838415][T25255] name failslab, interval 1, probability 0, space 0, times 0 [ 918.848167][T25257] loop7: detected capacity change from 0 to 512 [ 918.851207][T25255] CPU: 0 UID: 0 PID: 25255 Comm: syz.4.17907 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 918.851309][T25255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 918.851320][T25255] Call Trace: [ 918.851326][T25255] [ 918.851333][T25255] dump_stack_lvl+0xf2/0x150 [ 918.851358][T25255] dump_stack+0x15/0x1a [ 918.851377][T25255] should_fail_ex+0x24a/0x260 [ 918.851419][T25255] should_failslab+0x8f/0xb0 [ 918.851445][T25255] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 918.851526][T25255] ? sidtab_sid2str_get+0xb8/0x140 [ 918.851580][T25255] kmemdup_noprof+0x2b/0x70 [ 918.851604][T25255] sidtab_sid2str_get+0xb8/0x140 [ 918.851630][T25255] security_sid_to_context_core+0x1eb/0x2f0 [ 918.851665][T25255] security_sid_to_context+0x27/0x30 [ 918.851728][T25255] avc_audit_post_callback+0x10d/0x530 [ 918.851759][T25255] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 918.851789][T25255] common_lsm_audit+0x90e/0x10c0 [ 918.851812][T25255] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 918.851848][T25255] slow_avc_audit+0xf9/0x140 [ 918.851879][T25255] avc_has_perm+0x129/0x160 [ 918.851910][T25255] selinux_socket_sendmsg+0x185/0x1c0 [ 918.851936][T25255] security_socket_sendmsg+0x47/0x80 [ 918.851956][T25255] __sock_sendmsg+0x2d/0x180 [ 918.852110][T25255] ____sys_sendmsg+0x326/0x4b0 [ 918.852178][T25255] __sys_sendmsg+0x19d/0x230 [ 918.852211][T25255] __x64_sys_sendmsg+0x46/0x50 [ 918.852232][T25255] x64_sys_call+0x2734/0x2dc0 [ 918.852255][T25255] do_syscall_64+0xc9/0x1c0 [ 918.852322][T25255] ? clear_bhb_loop+0x55/0xb0 [ 918.852346][T25255] ? clear_bhb_loop+0x55/0xb0 [ 918.852369][T25255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.852417][T25255] RIP: 0033:0x7feec255cde9 [ 918.852431][T25255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.852447][T25255] RSP: 002b:00007feec0bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.852465][T25255] RAX: ffffffffffffffda RBX: 00007feec2775fa0 RCX: 00007feec255cde9 [ 918.852476][T25255] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000005 [ 918.852487][T25255] RBP: 00007feec0bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 918.852521][T25255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.852568][T25255] R13: 0000000000000000 R14: 00007feec2775fa0 R15: 00007ffc82103908 [ 918.852584][T25255] [ 918.852754][T25253] validate_nla: 2 callbacks suppressed [ 918.852765][T25253] netlink: 'syz.6.17906': attribute type 13 has an invalid length. [ 918.859136][T25257] EXT4-fs: Ignoring removed i_version option [ 918.878287][T25253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 918.884083][T25257] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 919.098289][T25259] loop8: detected capacity change from 0 to 512 [ 919.115894][T25257] EXT4-fs (loop7): 1 truncate cleaned up [ 919.116530][T25257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 919.146505][T25259] ext4: Unknown parameter '·' [ 919.177365][T19876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.223093][T25271] loop8: detected capacity change from 0 to 512 [ 919.243167][T25268] FAULT_INJECTION: forcing a failure. [ 919.243167][T25268] name failslab, interval 1, probability 0, space 0, times 0 [ 919.255913][T25268] CPU: 1 UID: 0 PID: 25268 Comm: syz.6.17913 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 919.255935][T25268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 919.255946][T25268] Call Trace: [ 919.255951][T25268] [ 919.255973][T25268] dump_stack_lvl+0xf2/0x150 [ 919.255996][T25268] dump_stack+0x15/0x1a [ 919.256012][T25268] should_fail_ex+0x24a/0x260 [ 919.256035][T25268] should_failslab+0x8f/0xb0 [ 919.256135][T25268] __kmalloc_noprof+0xab/0x3f0 [ 919.256197][T25268] ? kobject_get_path+0x8f/0x1c0 [ 919.256229][T25268] kobject_get_path+0x8f/0x1c0 [ 919.256342][T25268] kobject_uevent_env+0x1b9/0x550 [ 919.256363][T25268] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 919.256395][T25268] ? device_pm_check_callbacks+0x632/0x650 [ 919.256418][T25268] kobject_uevent+0x1c/0x30 [ 919.256574][T25268] device_del+0x6fa/0x780 [ 919.256596][T25268] del_gendisk+0x4c8/0x5f0 [ 919.256619][T25268] loop_control_ioctl+0x3ae/0x440 [ 919.256640][T25268] ? __pfx_loop_control_ioctl+0x10/0x10 [ 919.256713][T25268] __se_sys_ioctl+0xc9/0x140 [ 919.256733][T25268] __x64_sys_ioctl+0x43/0x50 [ 919.256751][T25268] x64_sys_call+0x1690/0x2dc0 [ 919.256773][T25268] do_syscall_64+0xc9/0x1c0 [ 919.256794][T25268] ? clear_bhb_loop+0x55/0xb0 [ 919.256848][T25268] ? clear_bhb_loop+0x55/0xb0 [ 919.256871][T25268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.256894][T25268] RIP: 0033:0x7fd279b5cde9 [ 919.256908][T25268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.256987][T25268] RSP: 002b:00007fd2781c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 919.257005][T25268] RAX: ffffffffffffffda RBX: 00007fd279d75fa0 RCX: 00007fd279b5cde9 [ 919.257017][T25268] RDX: 0000000000000007 RSI: 0000000000004c81 RDI: 0000000000000003 [ 919.257029][T25268] RBP: 00007fd2781c1090 R08: 0000000000000000 R09: 0000000000000000 [ 919.257040][T25268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.257052][T25268] R13: 0000000000000000 R14: 00007fd279d75fa0 R15: 00007fffe542ba28 [ 919.257067][T25268] [ 919.511038][T25281] FAULT_INJECTION: forcing a failure. [ 919.511038][T25281] name failslab, interval 1, probability 0, space 0, times 0 [ 919.523702][T25281] CPU: 0 UID: 0 PID: 25281 Comm: syz.8.17918 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 919.523782][T25281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 919.523794][T25281] Call Trace: [ 919.523800][T25281] [ 919.523807][T25281] dump_stack_lvl+0xf2/0x150 [ 919.523833][T25281] dump_stack+0x15/0x1a [ 919.523895][T25281] should_fail_ex+0x24a/0x260 [ 919.523922][T25281] ? nft_trans_rule_add+0x3b/0x1b0 [ 919.523952][T25281] should_failslab+0x8f/0xb0 [ 919.523979][T25281] __kmalloc_cache_noprof+0x4e/0x320 [ 919.524004][T25281] nft_trans_rule_add+0x3b/0x1b0 [ 919.524035][T25281] nf_tables_newrule+0x11a7/0x1770 [ 919.524106][T25281] ? __nla_parse+0x40/0x60 [ 919.524136][T25281] nfnetlink_rcv+0xb3e/0x15d0 [ 919.524173][T25281] netlink_unicast+0x599/0x670 [ 919.524212][T25281] netlink_sendmsg+0x5cc/0x6e0 [ 919.524242][T25281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 919.524335][T25281] __sock_sendmsg+0x140/0x180 [ 919.524358][T25281] ____sys_sendmsg+0x326/0x4b0 [ 919.524403][T25281] __sys_sendmsg+0x19d/0x230 [ 919.524435][T25281] __x64_sys_sendmsg+0x46/0x50 [ 919.524453][T25281] x64_sys_call+0x2734/0x2dc0 [ 919.524526][T25281] do_syscall_64+0xc9/0x1c0 [ 919.524547][T25281] ? clear_bhb_loop+0x55/0xb0 [ 919.524622][T25281] ? clear_bhb_loop+0x55/0xb0 [ 919.524641][T25281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.524800][T25281] RIP: 0033:0x7f2ae6a8cde9 [ 919.524812][T25281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.524827][T25281] RSP: 002b:00007f2ae50f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 919.524841][T25281] RAX: ffffffffffffffda RBX: 00007f2ae6ca5fa0 RCX: 00007f2ae6a8cde9 [ 919.524851][T25281] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 000000000000000a [ 919.524860][T25281] RBP: 00007f2ae50f1090 R08: 0000000000000000 R09: 0000000000000000 [ 919.524870][T25281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.524879][T25281] R13: 0000000000000000 R14: 00007f2ae6ca5fa0 R15: 00007ffc87776af8 [ 919.524967][T25281] [ 919.738872][T25281] program syz.8.17918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 919.760268][T25286] block device autoloading is deprecated and will be removed. [ 919.776513][T25288] loop7: detected capacity change from 0 to 512 [ 919.784048][T25288] EXT4-fs: Ignoring removed i_version option [ 919.790497][T25288] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 919.790646][T25290] FAULT_INJECTION: forcing a failure. [ 919.790646][T25290] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 919.813588][T25290] CPU: 1 UID: 0 PID: 25290 Comm: syz.6.17922 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 919.813609][T25290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 919.813620][T25290] Call Trace: [ 919.813626][T25290] [ 919.813632][T25290] dump_stack_lvl+0xf2/0x150 [ 919.813659][T25290] dump_stack+0x15/0x1a [ 919.813677][T25290] should_fail_ex+0x24a/0x260 [ 919.813766][T25290] should_fail_alloc_page+0xfd/0x110 [ 919.813791][T25290] __alloc_frozen_pages_noprof+0x109/0x340 [ 919.813826][T25290] alloc_pages_mpol+0xb4/0x260 [ 919.813846][T25290] folio_alloc_mpol_noprof+0x36/0x80 [ 919.813929][T25290] shmem_get_folio_gfp+0x3d1/0xd90 [ 919.813966][T25290] shmem_write_begin+0xa2/0x180 [ 919.814035][T25290] generic_perform_write+0x1a8/0x4a0 [ 919.814061][T25290] shmem_file_write_iter+0xc2/0xe0 [ 919.814085][T25290] iter_file_splice_write+0x5f1/0x980 [ 919.814117][T25290] ? __pfx_iter_file_splice_write+0x10/0x10 [ 919.814212][T25290] direct_splice_actor+0x160/0x2c0 [ 919.814234][T25290] splice_direct_to_actor+0x302/0x670 [ 919.814258][T25290] ? __pfx_direct_splice_actor+0x10/0x10 [ 919.814330][T25290] do_splice_direct+0xd7/0x150 [ 919.814352][T25290] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 919.814376][T25290] do_sendfile+0x398/0x660 [ 919.814465][T25290] __x64_sys_sendfile64+0x110/0x150 [ 919.814538][T25290] x64_sys_call+0xfbd/0x2dc0 [ 919.814687][T25290] do_syscall_64+0xc9/0x1c0 [ 919.814721][T25290] ? clear_bhb_loop+0x55/0xb0 [ 919.814742][T25290] ? clear_bhb_loop+0x55/0xb0 [ 919.814765][T25290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.814787][T25290] RIP: 0033:0x7fd279b5cde9 [ 919.814867][T25290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.814883][T25290] RSP: 002b:00007fd2781c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 919.814901][T25290] RAX: ffffffffffffffda RBX: 00007fd279d75fa0 RCX: 00007fd279b5cde9 [ 919.814913][T25290] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 919.814924][T25290] RBP: 00007fd2781c1090 R08: 0000000000000000 R09: 0000000000000000 [ 919.814935][T25290] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.814947][T25290] R13: 0000000000000000 R14: 00007fd279d75fa0 R15: 00007fffe542ba28 [ 919.814964][T25290] [ 919.827457][T25288] EXT4-fs (loop7): 1 truncate cleaned up [ 920.055839][T25288] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.149836][T19876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.625904][T25310] FAULT_INJECTION: forcing a failure. [ 920.625904][T25310] name failslab, interval 1, probability 0, space 0, times 0 [ 920.638594][T25310] CPU: 1 UID: 0 PID: 25310 Comm: syz.3.17926 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 920.638620][T25310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 920.638676][T25310] Call Trace: [ 920.638683][T25310] [ 920.638690][T25310] dump_stack_lvl+0xf2/0x150 [ 920.638716][T25310] dump_stack+0x15/0x1a [ 920.638784][T25310] should_fail_ex+0x24a/0x260 [ 920.638809][T25310] should_failslab+0x8f/0xb0 [ 920.638909][T25310] __kmalloc_node_noprof+0xad/0x410 [ 920.638931][T25310] ? __kvmalloc_node_noprof+0x72/0x170 [ 920.638957][T25310] ? xas_load+0x3ae/0x3d0 [ 920.639010][T25310] __kvmalloc_node_noprof+0x72/0x170 [ 920.639102][T25310] nf_hook_entries_grow+0x1bd/0x470 [ 920.639171][T25310] __nf_register_net_hook+0x16b/0x480 [ 920.639275][T25310] ? pcpu_chunk_relocate+0x183/0x280 [ 920.639303][T25310] nf_register_net_hook+0x88/0x130 [ 920.639331][T25310] nf_register_net_hooks+0x41/0x140 [ 920.639399][T25310] nf_defrag_ipv4_enable+0x6c/0xc0 [ 920.639425][T25310] tproxy_tg4_check+0x2d/0x100 [ 920.639453][T25310] xt_check_target+0x266/0x480 [ 920.639478][T25310] ? strnlen+0x28/0x50 [ 920.639504][T25310] ? strcmp+0x21/0x50 [ 920.639530][T25310] ? xt_find_target+0x1c8/0x200 [ 920.639551][T25310] translate_table+0xc3e/0xfb0 [ 920.639577][T25310] do_ipt_set_ctl+0x7bd/0x8b0 [ 920.639665][T25310] ? tcp_release_cb+0xfe/0x380 [ 920.639692][T25310] nf_setsockopt+0x195/0x1b0 [ 920.639722][T25310] ip_setsockopt+0xea/0x100 [ 920.639745][T25310] tcp_setsockopt+0x93/0xb0 [ 920.639784][T25310] sock_common_setsockopt+0x64/0x80 [ 920.639829][T25310] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 920.639854][T25310] __sys_setsockopt+0x187/0x200 [ 920.639875][T25310] __x64_sys_setsockopt+0x66/0x80 [ 920.639969][T25310] x64_sys_call+0x282e/0x2dc0 [ 920.639994][T25310] do_syscall_64+0xc9/0x1c0 [ 920.640018][T25310] ? clear_bhb_loop+0x55/0xb0 [ 920.640041][T25310] ? clear_bhb_loop+0x55/0xb0 [ 920.640063][T25310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.640104][T25310] RIP: 0033:0x7ff1af2ecde9 [ 920.640117][T25310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.640133][T25310] RSP: 002b:00007ff1ad957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 920.640149][T25310] RAX: ffffffffffffffda RBX: 00007ff1af505fa0 RCX: 00007ff1af2ecde9 [ 920.640160][T25310] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 920.640170][T25310] RBP: 00007ff1ad957090 R08: 0000000000000570 R09: 0000000000000000 [ 920.640234][T25310] R10: 0000400000000900 R11: 0000000000000246 R12: 0000000000000001 [ 920.640247][T25310] R13: 0000000000000000 R14: 00007ff1af505fa0 R15: 00007ffd54915638 [ 920.640264][T25310] [ 920.926937][T25314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17928'. [ 920.984877][T25322] loop8: detected capacity change from 0 to 512 [ 921.021946][T25322] EXT4-fs: Ignoring removed oldalloc option [ 921.106515][T25322] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 921.114542][T25322] System zones: 1-12 [ 921.123618][T25331] FAULT_INJECTION: forcing a failure. [ 921.123618][T25331] name failslab, interval 1, probability 0, space 0, times 0 [ 921.136326][T25331] CPU: 0 UID: 0 PID: 25331 Comm: syz.7.17934 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 921.136350][T25331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 921.136362][T25331] Call Trace: [ 921.136369][T25331] [ 921.136377][T25331] dump_stack_lvl+0xf2/0x150 [ 921.136403][T25331] dump_stack+0x15/0x1a [ 921.136466][T25331] should_fail_ex+0x24a/0x260 [ 921.136492][T25331] ? alloc_netdev_mqs+0x832/0xab0 [ 921.136513][T25331] should_failslab+0x8f/0xb0 [ 921.136541][T25331] __kmalloc_cache_noprof+0x4e/0x320 [ 921.136601][T25331] alloc_netdev_mqs+0x832/0xab0 [ 921.136624][T25331] tun_set_iff+0x45f/0x8c0 [ 921.136647][T25331] __tun_chr_ioctl+0x66d/0x1800 [ 921.136674][T25331] tun_chr_ioctl+0x27/0x30 [ 921.136693][T25331] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 921.136787][T25331] __se_sys_ioctl+0xc9/0x140 [ 921.136842][T25331] __x64_sys_ioctl+0x43/0x50 [ 921.136864][T25331] x64_sys_call+0x1690/0x2dc0 [ 921.136957][T25331] do_syscall_64+0xc9/0x1c0 [ 921.137012][T25331] ? clear_bhb_loop+0x55/0xb0 [ 921.137038][T25331] ? clear_bhb_loop+0x55/0xb0 [ 921.137062][T25331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.137087][T25331] RIP: 0033:0x7f6e8bf6cde9 [ 921.137102][T25331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.137152][T25331] RSP: 002b:00007f6e8a5d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 921.137171][T25331] RAX: ffffffffffffffda RBX: 00007f6e8c185fa0 RCX: 00007f6e8bf6cde9 [ 921.137184][T25331] RDX: 0000400000000200 RSI: 00000000400454ca RDI: 0000000000000005 [ 921.137196][T25331] RBP: 00007f6e8a5d1090 R08: 0000000000000000 R09: 0000000000000000 [ 921.137208][T25331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.137218][T25331] R13: 0000000000000000 R14: 00007f6e8c185fa0 R15: 00007fffc15b9828 [ 921.137235][T25331] [ 921.333552][T25322] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.17931: Parent and EA inode have the same ino 15 [ 921.348128][T25322] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.17931: Parent and EA inode have the same ino 15 [ 921.360852][T25322] EXT4-fs (loop8): 1 orphan inode deleted [ 921.391218][T25322] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.436404][T25339] netlink: 'syz.3.17936': attribute type 13 has an invalid length. [ 921.445407][T20362] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.446119][T25339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 921.473636][T25343] netlink: 20 bytes leftover after parsing attributes in process `syz.8.17940'. [ 921.536177][T25341] loop7: detected capacity change from 0 to 8192 [ 921.545401][T25341] vfat: Unknown parameter '' [ 921.570783][T25341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17939'. [ 921.583149][T25341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17939'. [ 921.584980][T25345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17941'. [ 921.611195][T25345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17941'. [ 921.823683][T25378] loop7: detected capacity change from 0 to 512 [ 921.840141][T25378] EXT4-fs: test_dummy_encryption option not supported [ 921.880730][T25387] loop8: detected capacity change from 0 to 256 [ 921.887261][T25387] vfat: Unknown parameter '' [ 921.979093][T25390] loop8: detected capacity change from 0 to 8192 [ 921.985974][T25390] vfat: Unknown parameter '' [ 922.010261][T25390] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17952'. [ 922.154597][T25401] loop8: detected capacity change from 0 to 8192 [ 922.161549][T25401] vfat: Unknown parameter '' [ 922.372375][T25411] loop8: detected capacity change from 0 to 512 [ 922.392828][T25411] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 922.401017][T25411] EXT4-fs (loop8): orphan cleanup on readonly fs [ 922.408068][T25411] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 922.423010][T25411] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 922.424627][T25416] syzkaller0: entered allmulticast mode [ 922.430386][T25411] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.17958: bg 0: block 40: padding at end of block bitmap is not set [ 922.451398][T25411] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 922.460525][T25411] EXT4-fs (loop8): 1 truncate cleaned up [ 922.466594][T25411] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 922.470585][T25416] syzkaller0 (unregistering): left allmulticast mode [ 922.485836][ T29] kauditd_printk_skb: 626 callbacks suppressed [ 922.485850][ T29] audit: type=1400 audit(1740004259.747:75061): avc: denied { mount } for pid=25405 comm="syz.8.17958" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 922.516670][ T29] audit: type=1400 audit(1740004259.789:75062): avc: denied { read } for pid=25409 comm="syz.3.17960" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 922.525672][T25406] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #16: comm syz.8.17958: corrupted xattr block 31: invalid header [ 922.539880][ T29] audit: type=1400 audit(1740004259.789:75063): avc: denied { open } for pid=25409 comm="syz.3.17960" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 922.584066][T25406] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=16 [ 922.604024][ T29] audit: type=1400 audit(1740004259.831:75064): avc: denied { egress } for pid=29 comm="kauditd" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 922.627462][ T29] audit: type=1400 audit(1740004259.831:75065): avc: denied { sendto } for pid=29 comm="kauditd" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 922.652306][ T29] audit: type=1400 audit(1740004259.883:75066): avc: denied { create } for pid=25427 comm="syz.7.17963" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 922.674911][ T29] audit: type=1400 audit(1740004259.925:75067): avc: denied { read } for pid=25427 comm="syz.7.17963" name="file0" dev="tmpfs" ino=2151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 922.697614][ T29] audit: type=1400 audit(1740004259.925:75068): avc: denied { open } for pid=25427 comm="syz.7.17963" path="/389/file0" dev="tmpfs" ino=2151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 922.707066][T25429] loop7: detected capacity change from 0 to 512 [ 922.736127][ T29] audit: type=1400 audit(1740004260.009:75069): avc: denied { mounton } for pid=25427 comm="syz.7.17963" path="/389/file0" dev="tmpfs" ino=2151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 922.801690][ T29] audit: type=1400 audit(1740004260.093:75070): avc: denied { unmount } for pid=20362 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 922.832408][T25429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.846462][T20362] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.863546][T25438] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25438 comm=syz.3.17967 [ 922.888750][T25429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.148032][T25458] __nla_validate_parse: 9 callbacks suppressed [ 923.148048][T25458] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.17973'. [ 923.166155][T25454] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.17973'. [ 923.334766][T25470] syzkaller0: entered allmulticast mode [ 923.341305][T25470] syzkaller0 (unregistering): left allmulticast mode [ 923.389233][T25471] netlink: 108 bytes leftover after parsing attributes in process `syz.3.17978'. [ 923.398642][T25471] netlink: 108 bytes leftover after parsing attributes in process `syz.3.17978'. [ 923.407809][T25471] netlink: 84 bytes leftover after parsing attributes in process `syz.3.17978'. [ 923.594861][T25473] ================================================================== [ 923.602977][T25473] BUG: KCSAN: data-race in n_tty_write / tty_set_termios [ 923.610022][T25473] [ 923.612342][T25473] read-write to 0xffff88813b12f114 of 4 bytes by task 25474 on cpu 0: [ 923.620481][T25473] tty_set_termios+0x1a2/0x8b0 [ 923.625242][T25473] set_termios+0x365/0x4e0 [ 923.629643][T25473] tty_mode_ioctl+0x391/0x5d0 [ 923.634311][T25473] n_tty_ioctl_helper+0x8d/0x240 [ 923.639233][T25473] n_tty_ioctl+0xfd/0x200 [ 923.643547][T25473] tty_ioctl+0x87a/0xbe0 [ 923.647772][T25473] __se_sys_ioctl+0xc9/0x140 [ 923.652343][T25473] __x64_sys_ioctl+0x43/0x50 [ 923.656940][T25473] x64_sys_call+0x1690/0x2dc0 [ 923.661600][T25473] do_syscall_64+0xc9/0x1c0 [ 923.666087][T25473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.671991][T25473] [ 923.674299][T25473] read to 0xffff88813b12f114 of 4 bytes by task 25473 on cpu 1: [ 923.681907][T25473] n_tty_write+0xa0/0xb80 [ 923.686224][T25473] file_tty_write+0x37a/0x680 [ 923.690919][T25473] tty_write+0x28/0x30 [ 923.694971][T25473] vfs_write+0x77b/0x920 [ 923.699197][T25473] ksys_write+0xe8/0x1b0 [ 923.703435][T25473] __x64_sys_write+0x42/0x50 [ 923.708010][T25473] x64_sys_call+0x287e/0x2dc0 [ 923.712678][T25473] do_syscall_64+0xc9/0x1c0 [ 923.717191][T25473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.723077][T25473] [ 923.725383][T25473] value changed: 0x00008a3b -> 0x00000006 [ 923.731083][T25473] [ 923.733390][T25473] Reported by Kernel Concurrency Sanitizer on: [ 923.739521][T25473] CPU: 1 UID: 0 PID: 25473 Comm: syz.3.17979 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 923.750356][T25473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 923.760399][T25473] ==================================================================