last executing test programs: 50.59971115s ago: executing program 3 (id=1272): r0 = eventfd2(0x937, 0x80801) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="0c9a6dba36175023", 0x8}, {&(0x7f00000000c0)="e583f610377b8753f362cf10324ede5d391fdb887e90c41d9f9ad1b2afcb3f89a17130ce6d5edb742036b6a92cc9a143ff1d7cbf0d1a4b4217eec1d2650d2ee5a1b22ebb7ced01bf7e4f9f616b0ab7ac96a1281d9898e2a354d91b00c124f3", 0x5f}, {&(0x7f0000000140)="c40c44", 0x3}], 0x3) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$loop(&(0x7f00000005c0), 0x6, 0x12d600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x700, 0x0, 0x7, 0xfffffffb, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x2, 0x2f, 0x0, @broadcast, @loopback, {[@noop, @ra={0x94, 0x4}]}}}}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x4) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xd4, r8, 0xa5e0ebd8e26c4fea, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000090}, 0x40800) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) finit_module(r1, 0x0, 0x2) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) ioctl$TCXONC(r12, 0x540a, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r2], 0x24}}, 0x0) r13 = socket$inet6(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r7, &(0x7f0000000300)="fdba6190582b634c0ac9e32d65d282b2f8c63a01d6f5942bee177e03664a05a81375a76d2d6669f503768151185eafbcf4", &(0x7f0000000340)=@udp6=r13, 0x4}, 0x20) sendto$inet6(r13, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$TIOCPKT(r12, 0x5420, &(0x7f0000000000)=0x5) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 50.546133711s ago: executing program 3 (id=1273): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeafb8de608096042, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x7618, 0x5, 0x1000, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0xc, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b'], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8a, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r4, 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18) r5 = memfd_secret(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0900000000000000008dc2fa967089d32eed38e3404815b1b5de05650000994c4a7ebccac5bf88c7ded9db7b8270f00f808f", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7ecffffffffffff7a8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000a000000000000000", @ANYRESHEX=r5, @ANYRESHEX=r5, @ANYRESDEC=r5, @ANYRES32=r5, @ANYRESDEC=r3], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x17, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000640)='writeback_sb_inodes_requeue\x00', r1}, 0x18) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x60400, 0x0) close_range(r7, r8, 0x200000000000000) fcntl$setlease(r5, 0x400, 0x0) close(r6) openat$cgroup_procs(r5, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) io_uring_setup(0x6b7, &(0x7f0000000000)={0x0, 0x20072aa, 0x40, 0x800002}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffff7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0xffffffffffffffff}, 0x18) linkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1000) lsetxattr$trusted_overlay_redirect(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x8, 0x3) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x2048004}, 0x8080) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), 0xffffffffffffffff) r10 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000000380)='R\x10rust\xe3c*s\xa8rVid:\xc4e', r10) 50.411547542s ago: executing program 3 (id=1278): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) sendmsg$nl_route(r8, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/254) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 50.102189426s ago: executing program 3 (id=1282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xe29a}, {}, {0x1000001}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4}, {}, {}, {0x0, 0x7}, {0x0, 0x2, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2}, {0x1}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x400000, 0x800000, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0x4000000}, {}, {0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0xf7}, {}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x1ff}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0xc0ffb0a1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {0xfff}], [{0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x350d7ffc65fed658}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) move_mount(r2, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000380)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0xfffffffc, 0x0, 0xffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='sys_enter\x00', r6, 0x0, 0xfffffffffffff2f6}, 0x18) ioprio_get$uid(0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f00000015c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysinfo(&(0x7f00000002c0)=""/198) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a03000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001007465616d30"], 0xe4}}, 0x0) 50.079242767s ago: executing program 3 (id=1283): r0 = eventfd2(0x937, 0x80801) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="0c9a6dba36175023", 0x8}, {&(0x7f00000000c0)="e583f610377b8753f362cf10324ede5d391fdb887e90c41d9f9ad1b2afcb3f89a17130ce6d5edb742036b6a92cc9a143ff1d7cbf0d1a4b4217eec1d2650d2ee5a1b22ebb7ced01bf7e4f9f616b0ab7ac96a1281d9898e2a354d91b00c124f3", 0x5f}, {&(0x7f0000000140)="c40c44", 0x3}], 0x3) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$loop(&(0x7f00000005c0), 0x6, 0x12d600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x700, 0x0, 0x7, 0xfffffffb, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x2, 0x2f, 0x0, @broadcast, @loopback, {[@noop, @ra={0x94, 0x4}]}}}}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x4) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xd4, r8, 0xa5e0ebd8e26c4fea, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000090}, 0x40800) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) finit_module(r1, 0x0, 0x2) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) ioctl$TCXONC(r12, 0x540a, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r2], 0x24}}, 0x0) r13 = socket$inet6(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r7, &(0x7f0000000300)="fdba6190582b634c0ac9e32d65d282b2f8c63a01d6f5942bee177e03664a05a81375a76d2d6669f503768151185eafbcf4", &(0x7f0000000340)=@udp6=r13, 0x4}, 0x20) sendto$inet6(r13, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$TIOCPKT(r12, 0x5420, &(0x7f0000000000)=0x5) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 49.968125738s ago: executing program 3 (id=1287): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{&(0x7f00000000c0)=@ax25={{0x3, @netrom}, [@bcast, @null, @bcast, @rose, @remote, @remote, @rose, @rose]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/247, 0xf7}, {&(0x7f00000002c0)=""/111, 0x6f}, {&(0x7f0000000480)=""/77, 0x4d}], 0x3, &(0x7f0000000240)=""/61, 0x3d}, 0x6}, {{&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000000580)=""/38, 0x26}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/160, 0xa0}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000001780)=""/134, 0x86}, {&(0x7f0000001840)}, {&(0x7f0000001880)=""/171, 0xab}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/190, 0xbe}], 0x9, &(0x7f0000002ac0)=""/190, 0xbe}, 0x4e49b6dd}], 0x2, 0x22, 0x0) socket$inet_udp(0x2, 0x2, 0x0) accept4(r1, 0x0, 0x0, 0x800) sendto$inet6(0xffffffffffffffff, 0x0, 0xfe03, 0x240049f1, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) 49.84809034s ago: executing program 32 (id=1287): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{&(0x7f00000000c0)=@ax25={{0x3, @netrom}, [@bcast, @null, @bcast, @rose, @remote, @remote, @rose, @rose]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/247, 0xf7}, {&(0x7f00000002c0)=""/111, 0x6f}, {&(0x7f0000000480)=""/77, 0x4d}], 0x3, &(0x7f0000000240)=""/61, 0x3d}, 0x6}, {{&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000000580)=""/38, 0x26}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/160, 0xa0}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000001780)=""/134, 0x86}, {&(0x7f0000001840)}, {&(0x7f0000001880)=""/171, 0xab}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/190, 0xbe}], 0x9, &(0x7f0000002ac0)=""/190, 0xbe}, 0x4e49b6dd}], 0x2, 0x22, 0x0) socket$inet_udp(0x2, 0x2, 0x0) accept4(r1, 0x0, 0x0, 0x800) sendto$inet6(0xffffffffffffffff, 0x0, 0xfe03, 0x240049f1, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) 42.196084559s ago: executing program 2 (id=1369): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x1, 0xffffffffdffffffa}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f00000021c0), 0x100, 0x0) 42.090810101s ago: executing program 2 (id=1370): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018", @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r0 = syz_io_uring_setup(0xcf, 0x0, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc080}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4e, 0x2004, @fd_index=0x6, 0xfffffffffffffff9, 0x0, 0x0, 0x8, 0x0, {0x3}}) io_uring_enter(r0, 0x47ba, 0x0, 0x60, 0x0, 0x0) 42.090419711s ago: executing program 2 (id=1371): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000090000000000000000040000067547030400000018018000feffffff0000000000000000180000000100000000000000bd090000852000000300000085100000010000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000580)=[r0, r0], &(0x7f0000000780)=[{0x1, 0x1, 0x1, 0x6}, {0x5, 0x2, 0x9, 0x6}, {0x0, 0x5, 0xa, 0x7}, {0x0, 0x1, 0xd, 0x5}, {0x4, 0x5, 0xb, 0x2}, {0x3, 0x4, 0x9, 0x1}, {0x1, 0x3, 0x6, 0xc}, {0x0, 0x3, 0xd, 0x7}, {0x5, 0x4, 0x2, 0xa}], 0x10, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYRESHEX, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x8, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x40080, 0x0) connect$phonet_pipe(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) 41.916933203s ago: executing program 2 (id=1373): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x80) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='sys_enter\x00', r4}, 0x18) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x2001, 0x100) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='kfree\x00', r6, 0x0, 0xffffff7ffffffffc}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r7}, 0x10) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) write$cgroup_int(r8, 0x0, 0x2) gettid() prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000003c0)={0x5, &(0x7f0000000340)=[{0x1000, 0x0, 0x3, 0xf}, {0x6, 0xf3, 0xb, 0xffff5f2f}, {0x5, 0x7, 0x97, 0x7}, {0x1000, 0x3, 0x7, 0x80000001}, {0x5a3d, 0x4, 0x1, 0x2}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r9 = open(&(0x7f0000000400)='./bus\x00', 0x8000, 0x100) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) fchown(r5, 0x0, 0x0) 41.545235228s ago: executing program 2 (id=1377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000090000000000000000040000067547030400000018018000feffffff0000000000000000180000000100000000000000bd090000852000000300000085100000010000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000580)=[r0, r0], &(0x7f0000000780)=[{0x1, 0x1, 0x1, 0x6}, {0x5, 0x2, 0x9, 0x6}, {0x0, 0x5, 0xa, 0x7}, {0x0, 0x1, 0xd, 0x5}, {0x4, 0x5, 0xb, 0x2}, {0x3, 0x4, 0x9, 0x1}, {0x1, 0x3, 0x6, 0xc}, {0x0, 0x3, 0xd, 0x7}, {0x5, 0x4, 0x2, 0xa}], 0x10, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYRESHEX, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x8, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x30}, 0x40010) 40.903121056s ago: executing program 2 (id=1388): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f00000021c0), 0x100, 0x0) (fail_nth: 6) 40.902937756s ago: executing program 33 (id=1388): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f00000021c0), 0x100, 0x0) (fail_nth: 6) 33.252371446s ago: executing program 1 (id=1469): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="c2a1c8a71372f3b1d929915a2924c3dc123328b883e797ff7719ce7165d09f5c1f192c5d55869caadb50e9470d0665be4b864c3ee2068889b7bf1d24c64b15ad395ff9abf46d92ee4436a4cd7a99f858c9ef799612bda96294b26bb0ec447db56aa63362a7c5152bfb14a3a1dcabd12aa922caa3413e68e738b921c2df023e"}], 0x4, 0x0, 0x0, 0x408c4}}], 0x1, 0x6001010) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000000e1f862436f0def67759c1b0", @ANYRES32=0x0, @ANYBLOB="2b0300009e0603001c00128009000100626f6e64000000000c0002800500110001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 33.024316919s ago: executing program 1 (id=1471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140035006d6163766c616e3000000000000000001800348014"], 0x4c}}, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000003000000080000000400000006000000ffa919c6f4957a321ca337ee1fdfd297ea751a823a43978899f259bd9a11c4c2054a1980e6c445c26832aeb0e54e90ec2b34e46c0a99ee564f777d2f59297623f9c3d155ed3585790f3faf178fe59632b0c3c73bfc685675d19989f3e777dc99cd72be2daed28d17b12bd85818aa8ad903d690ac3c085ae9280000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x14a4f26e}}, './file0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x5}, 0x18) syz_io_uring_setup(0xaa5, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) rt_sigpending(0x0, 0xa84e7df75718b5b5) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_INPUT(r5, &(0x7f0000001b80)={0x8, {"e41c0ee8b362946e45e34fc5eca6fded1c6577b5c59d232a58c18258e51463ddf45d67f9be8a171b2ee043548a1a114c3f3c3125a32d2dc09f67e2e8d6513fff1987ecba06a08f0703a3119cf0bc8cfa6a4721ce48a97d7cf4ae5c80c2993fef366fa1b0881dd7237288b8a71ef54728b03947cdda80e98040a58e4491db908924f881c1370e409c81bf4c18c784bdda809b503d0fc750dfe4215675072931c4cbfb500c99769ae90dc6589dc384d60fdd89a0f2877089740e4ed63d9c939750fd0f6d42ac9dffdd4d2bf36ca207ccfa803ec8b8467c832d25ce894f39fde9fe8f382c90de5736aab03f2588b3f98218567747f925a7dd3e79cc5fc3c1496027c02c6417dd8bbb98820a1021526fa0f358f38a5fa6325b0c962a99c470cd0827eef5ab7751f6c321c7fc4bc414a815580c3c723d013dec01b278ec5eb88a1003bf54b1f52735c21b7a98eb7bde71dfdba898aae615f76206bd80a259a925ba9d6ec120ae728dd2803e12cd96ddd69fa5b128ddd8a4b1e3dc34c3694ffa13e18bf0b08495aabfd763bdf1013e9726c6f0dcc5b09823f5188b8f6f8b0ecaca7b10a5ccce4ec603a089f094d369926eda87ff933e08266f142948a1aeac827f6590789316ed987581e56e3b9a8c38904e0515fc4e8238e55f084ebc9c2bce20cb9d57ebd6ecde62d76c9b2841141b7a0f9e9d240b5f99844f1ef97b361c6c0c93508669f72029bbca99a9ed93b296b58d40f50e02ea07f99d38d991ea99083a528d1493349a6b9d7d98cfff9bb8843ba52b90c9534ed6403a435d46603b05d2fab97a07187cfbbe42ec58edaabaf8e9892d1217d89bc11b8e372455085d9bbd32c3f8b6805d48aa66a7ea0d468fffa713d602e676e54c95b82b42c06bb2ab40b4940219229c63bccc12bd7817f3690c5f21c821d627c3d88077cba0d9d78fd626df77c97fb738b2fd1c2ea00b7ccb57c5e558c69a17f8438094384c159602d25d10f6a043c725fd9286b20149cda2caa815cabf60f16d81f5c18bfd7f2b68c91973fd96be86907982e1c79ad564af8cfb4c39a828e6b42f42bc8ef19d493d4d3fda9aee30a5d5346e5ce55218f9a1431b71da265b7f90b330d8e87f2a2f452e068a4f6251ae8806d6ea64cdfd8da1d434d2cbdc4c7b16efcaa266594ed5b56e3a3564bc5a32a60deaea8383cf143587ea5130c2003d23d9fcbcb8b7b16c0359104a5a762eb6277db3104235775acd3cb18bb682162690a4b6fcd284d1b75c08ce02ccae5dc8db0fb77f278e84805bc099c0d1755623d94fbd7e8aaad6d07d7a101e757a17fd5d86f3fa0fb61bb7486eb2ce7721af95ae9ab9ba9dd1fab5a285f433a678750da5cac4bea605e3f26ca2770f39d479e77808dac74a1b5044e0845698c64e550bb145e5b3b38c3b16522eb9f539ae2ee17ba904115053a9a02f2a9da01808f7eee954b83250615b30b718d43f6ed9f65614ea5db7fe93ff9b7906d39405f113f3f411999e13820c63c094331b869ee48994e70f25a701f8ccae6d728cbda2c92adeee5b66caa86d6a50c50dd859701bf3b7f52ce465b9a03c20c9d770ba28e22af9ee73a6a94c6a4721909905595c6136afc4b68da22dce7f951fc9c51feb1c81c30e3c86fc6d3c56f302335ecc20fc3408155315c688c98952567913c8e9f152e21c3c166c3564ceb907a822354e15d918ebbd18501714b7757b31aa85f87ff83f1542a3c8e360f95cb55cf61a1d5ec1a25df6067f12b78f3321367a295b70dca3441a983f610eba503fa51eb99c7619e431bcb0538d64caed780e30bfb865679478c533b25ccf75f7f40ff567b21fef326ae9f07f65f75d031528cadfb1a01b54a7700fb84761a165211c9d5466e28175ead3249c93ad752cd90730b24524750216c8d7c07c65a758a9b9ab34e6887d5920aae95868f1aab790a0a7c68915f127255111367eb3417f3c3ab29715a773dd29c65b26d47cb075281ae967aa0be93d86af1a5a9fba6f54c9f295a26b6733718eb0a3df4a43f2c52d37981b2652a241f300d698969cff103ca7aad5c826152bdfd8f5ce1da16728ca52029964043d56ccfc004dc872e1f32606e82d9b1f109cf51215279a9abd022bb829a577e53ad15adc1e940392134fcce207ef807e4a2c61c3a54216328c34615e1a99d09ad39fd82bcb676f45ad399f4686526e4d14024d336204ad1171faeb28b66ddcbfc4baf6298ff6625764ff7b24619f589919242e6fbb2b098c4225bbbae3ecaa7193c75b9d87b1d7aaffa3e6cf40dfe0269f1e0728182a691c94d2f549d1b42cd472d21253fb4ab398a8c38bcf0e81bcdf2adb85dd4fa535192c4852d140a4ab099c8576c8dade33373c44a943a1874c349fd04cab561b526c68ddc656b0376b954622ccf47a4c4cb593b7d2059108371909986ed7658f39d2bdc8e8ad62d2b8f320039f8682413865c3f8c1cfac5efb9bb3020c599e2d1b480701bdeb25d44a1de31ed97c0e8364f18ec0368a8449a1abee50246fa3a75e8de569c9dfaaf0e1d2616668782fdaa6e5eb94dc849369aeaab2bf5df07ce37b26ba296a4acb7ed2668c2945f1fc4665a76e2757e242d3cb9e6221b1fda8a2aef18b8635f54ebd10353c5e3fc7af1c39c3dd81cbda737f62c355c4840cf01416a29777b1168ef94448ba18e43adb74f9de1489e1ebb184d41b07dcbb03d26042109cbdeb56aebf22d833d24c95969706d77f4e65f025a6872d7f86589b646e8ba864164cdaf5e6abc237b699246bd280fac51296728b96bfe8ef67cdb54ce33df76c23577acb1a1d28412fe97f0ee4427a51f9039b44787a2bd149cafaac56bde9daeb12ab37576ae4d839b127b33ee78b9cd1f3528d903b7e8e71cf7c5b59c656b6bbf8cea5ab9b44ede250fa0839435d9e211174b57317f7fe403f5d464d7b0e0db6e6df1df86eec007ebb5d3d45555d1ae0305278669de303823c5b1896e123a999df8088bab9056fbdfecf92ac34c14157693ce5ce3b5a619e21e409c54fc6f83edfe673441a36632ef050736059c4db37be3869fd47584a084c463f88866bd900b198588d4499d5fe054bf935b8a70f17e24df507593bfd624107c09f2348fd3b0848dccf181af4da23df4d3c188b4c4be68db9d60d4be13edeb24ed4ef14cdbb5c6826b76b31ba02bac800007ce6baf7f266fc88fa4704c70d392544fe6fc3a3ca433fef8117b04811a4d8e08efa2e842eb433848b09b525e5074206ab50686227a389f92681a05a664ac9a80e590e89c189d6ddc5a5dc5bbab68a410b002687cf73476d6737fa9dc6c29f7fb23e06cf85923d199322ee0dd75a8a598d5c5ed7cc5626c2838001dcfe4adf7d876fe3df2464ca2965a855932ca176f039192b0b36132cc6a09dc1ca1651bfafab3b5ad5c2734f22eeccf5c01e6d33ef8713ed46828ab63b64d48290f9488ca42ff59231e3f46b242ca7bb86fbaeeda827432e440c300a053c969a3c29f024fa6301cac8157cc83e936edf79e614f363dfaf03fe617486fd1ec864c578ba2747b3039eafa60dedfbd2720e76058d29431018a4a64ea1251e602d19515ca3d12b1b7dbe2894f0eac61c019d08e376126489f3107a5e249bdf46c2c04f4950dac3007062ffd4b23a49e215e96d10b32d06a07b7d66048da3f40606d5c6dbc99acdbc5cfa292213ebc2983880c59873195d688d2a197bbde9a8fd6c5c9f358b9872e5292d512a5ae6624011f2d1595aa4a5d33d2bdbadc90f666e538aa68e35dbba4ed83b3c80eb8743bd9fdd01285d9e3abeb8f140b4e06cbd0eef4bb01e5cb2884ca1f41d98faf0531e6757bfeb12de6dc7d88e71b26bae252a9b64b9568e5a226a699a9781f1ff46609e34bc2133b673c05c3faaae89c1e275f69cd0c95a744c27bbe7c236cb72ce5669d0b00bb742adb28d034f47ff9b3194a77014c1ffc3e2eb1f2f86f444a87e5a5d905b581c43f57418b8c77070c002e111dcc1e830b32bf0d53ef60717faa82a27009f019725cad8cd2cbf68fb69a57b9c18a33611b3a9ed5b726fcc00159d3c0acee200000d983c7f00c56d62036dd9488192697154a757971158ceae4175b2b39141a7779144c34e8b55f5b3530de4e16c581b2203b3ffe2c7ec6584a6d50b4aae455c1876e7bb745f0bb0c759ef7ab83ca4c3c7dd5179c58876d3f2f900dffdfd230ba8b63fe5aa79c173bfbd74d42043560aca8f66ddabb8b2d67c9514cd802f915bcc7e943c9574d1aaaeb89fe422684b0de0e261ae1a31011efeacb0af6ab7ba3efd49fc601501694cec07d6a2d9facaf8985c72a245bee744b323c7d84f2e6cc2aea7ea2519643bb7ff49e515f49aba4b7d16a7f63fe1ce4338af5470c18ac3d5dc9492daf4d4a06b8e1519708eec795928dfd8cd767cd2cc55f63b1889121d316054c3c19101c110f21e76cb555b2a86d12c2915fba794b55729206e775165087cd6dd9b67116f7d698d88377202da91823a92b4254d60072ffd3523cd4f7c0c4929a32e7c48cb790878acdce111890ef6e53343b59e821e9b89f128fb7dd418dc2445dea4de0334bd9af76c3b9d32aea41b9b6913fba31b5a22fe86c6f29db0ae7063a30886667ce6e203675826bec63787cd6c77d1f4bd32f2763fc12390a9ac1ba11a9f5be5e28abbba9ffa1bd517f085959e54339a643d40263df998e5ddd706234b31b77152f2d84e633d0984fa1cd01153c0b0e62db646aa8449b0bced02f1d60335ea8f57051a244a0c92541d4a29bc4dc2b60a6bdd5c6c83403ff8319cd69266d1c6c4d267868be3889dd41df4423fe3f118f505b97179d45cb1b446c9c7a041cec2180575590b314a383a96bba7c6b3da5d19867811b7af38110372b64c135fe1e5b55b70d478d23b71858ebff316fea1ec14cb8fa6b4b7aac311891b8f22b2447a0be52209623aa98de7466c847bddeffcadb176324caafd7c45aa40e8dee9f468f0576f6806dff31f0ebfb46170456bf5ebea23bbee4e169e83d73d1e4242cc8381bc16216c2f7b66e75886fd9566a2162fd7db8a9bb89d1e267ecd306b3f1715a65a22b11547814fa2b06d3de3ce03e48dede707a6ce93ce655179b10da6c8925b94e6562accec95be9dd063a0f13437088d03b5c98e02c7d051664689d14f2c02f773b3ff457d0b37918d0e79d725b90a77f62f5fda12f56082c4de6859482dcff44f9f866d6e17fd325c70bde0239d0650b5c9c9ccbc0e0e172a4e82ba877ac9a89b9281469cb26a2c518f1a89dcb4b10a52acec02e559a2e5e283b5a70062fd06ea05710a13d44ae3b544a51e5ad92f630f4277d98c0e96641c4a20e3ee5e7a163efe6abeacd80ec7e5d29d0437556f2054a58bd42f702b57e9588fed8e366ff462cf97cf5f9fac7abd7062f7e14fa11d46084a68ac507ec47cccdb3945a54aec72d2f7d755cfcdca9968997e3bbb31017c2138dc391f005121d0e1ec55696174cfea6efff551959cd8471e8578bd4f8e865c95ebf07d3e6ab8727d3f4c1a1a9349be55c4a9d8dec1d7fce4de04ea913f3899f1f9de63e80f97b159ab8e960bfc4f44929de496ef7d53d63228092e5b863af923cf1e2a05ff233374f3cab2f50b6bd914d65e102b5840e69c447192e6a6050715c28595e30602e4f5ec4fa0861991dd9075a0ba7697282267a6bff667b67763d9cebbc81b13aa568673e072dea5bc1a73c212c6a4520ce3fefa4108e4f327f6aea3cfaf4ac413f8327ee9ecb1e0f5cd78c746b5feeb4bff5630d9a201fe9a168742927129c809e023a672ed35c326a9", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x5, 0x6}]}, 0x10) 32.858081671s ago: executing program 1 (id=1474): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a0000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000ed1f1b4d0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet(0x2, 0x2, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = semget(0x2, 0x4, 0x60) semctl$IPC_RMID(r1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x8, &(0x7f00000002c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811243078e4a7d14d9f5a8f8a4c5b019c3d00073a31fd6485e324197e00", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x10000}, 0x18) 32.319128928s ago: executing program 1 (id=1477): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xe29a}, {}, {0x1000001}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4}, {}, {}, {0x0, 0x7}, {0x0, 0x2, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2}, {0x1}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x400000, 0x800000, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0x4000000}, {}, {0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0xf7}, {}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x1ff}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0xc0ffb0a1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {0xfff}], [{0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x350d7ffc65fed658}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000380)='./file0\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='sys_enter\x00', r4, 0x0, 0xfffffffffffff2f6}, 0x18) sysinfo(&(0x7f00000002c0)=""/198) 32.22863761s ago: executing program 1 (id=1479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r2 = memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 32.032694232s ago: executing program 1 (id=1486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) sysinfo(&(0x7f00000002c0)=""/198) 31.923406784s ago: executing program 34 (id=1486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) sysinfo(&(0x7f00000002c0)=""/198) 4.894788085s ago: executing program 0 (id=1829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) 4.789726217s ago: executing program 0 (id=1831): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000280)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c400, &(0x7f0000000080), 0xff, 0x26d, &(0x7f0000000d80)="$eJzs3UtoHHUcB/Df7MMYEyTqRRAfICIaCPEgCF70ohAQCSKCChERT5IIMcFb1pMXD3pWyclLkN6a9lh6Cb0Uek3bHNJLDw09NPTQHrbMzm7ZbDZ0k31Mmvl8YHdm8n8u7Pc/k8BkAiisqYj4KCLKETEdEdWISNorvJG9ppqH6+NbCxH1+hd3k0a97DjTajcREbWI+CCi0ipb3fxm9/72p2//sZK89d/m1+Oj+nzt9nZ3Ptv/9/Pfz8+9t1pq/myyuW3/HINRa7wnXUoqScSLgx3sVEkqec+AXsz/eu56mvuXIuLNRv6rUWpG9s/lZy5X491/jmr7151rr4xyrsDg1evV9BxYqwOFU2pcAyelmYjI9kulmZnsGv5GOYmflpZ/mf5xaWXxh7xXKmAAklr2e+/OJxfHLkx05P92Oct/T94f8kyBoUjz/+X8xs10f798zMbd/qgFnH6vZps0/9Pfrb0TJ8k/8FTrNf9jI5wTMBrO/1Bc8g9nwAmzK/9QXPIPxSX/cIZVWzu1rsXyD8Ul/1BcHfnP5X5cIB/t+QcAiqU+lvcdyEBe8l5/AAAAAAAAAAAAAAAAAACAw9bHtxZar1GNeeXviL2PI6JycPzsmWPlxvOII55tvD93L0mrPZZkzfry7et9dtCn/3O++/r5W/mOf/W14fT728HDI/+33dpiRC2tPFupHP7+J83v38m98ITy6vd9DnBMnY/t/fCr0Y7f6eHGEDqt9l51bjviUrr+zHZb/0rxcmPbff2ZPN5QXf38oM8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGJlHAQAA//8BFWtR") setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) 3.931326758s ago: executing program 0 (id=1851): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000e8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x6, 0x0, 0x5, 0x0}) 3.898181989s ago: executing program 0 (id=1853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140035006d6163766c616e3000000000000000001800348014"], 0x4c}}, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000003000000080000000400000006000000ffa919c6f4957a321ca337ee1fdfd297ea751a823a43978899f259bd9a11c4c2054a1980e6c445c26832aeb0e54e90ec2b34e46c0a99ee564f777d2f59297623f9c3d155ed3585790f3faf178fe59632b0c3c73bfc685675d19989f3e777dc99cd72be2daed28d17b12bd85818aa8ad903d690ac3c085ae9280000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x14a4f26e}}, './file0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x5}, 0x18) syz_io_uring_setup(0xaa5, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) rt_sigpending(0x0, 0xa84e7df75718b5b5) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_INPUT(r6, &(0x7f0000001b80)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x28, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800003d0900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x5, 0x6}]}, 0x10) 3.575835762s ago: executing program 0 (id=1858): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="fd00000000000000b7020000140000ffff030000000000008500000083000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b3000000000000009587da1efa0000000000000cf386c759da12644271779f0627a17c826bbd9b6d8eadedd9faad174e6e02767255f0941544be0c0beaaa7f972fa28ffce15c77f76faf726b98"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x20000000}}, './file0\x00'}) r4 = io_uring_setup(0x10001d1a, &(0x7f0000000180)={0x0, 0x761, 0x2000, 0x0, 0x11cb, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) newfstatat(0xffffffffffffff9c, &(0x7f0000001580)='.\x00', &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r8) 3.351510196s ago: executing program 0 (id=1866): r0 = socket(0x40000000015, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, 0x0, &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r3, 0x0, 0x6}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f000000050030000000000005002f00a005000008000300", @ANYRES32=r7], 0x2c}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11, 0x0, 0x2}, 0x18) 2.747838183s ago: executing program 7 (id=1878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x10) 2.615244995s ago: executing program 7 (id=1879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00fd000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2, 0xa, 0x9, 0xe, 0x2, 0x0, 0x70bd2c, 0x25dfdbfe}, 0x10}}, 0x24000000) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70800000045265d07cc4caec4157225a6be77950000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.743342466s ago: executing program 4 (id=1887): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x3}, [{0x2, 0x2}, {0x2, 0x2}, {}], {0x4, 0x3}, [{0x8, 0x6}, {0x8, 0x6}, {0x8, 0x3}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x4}}, 0x5c, 0x1) 1.721405407s ago: executing program 4 (id=1888): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0xa, &(0x7f0000000080)=[{0x800, 0x77, 0xd9, 0x6}, {0x5, 0x4}, {0x0, 0x9, 0x5, 0x9754}, {0x2, 0x7, 0x7, 0x2}, {0x7, 0xf, 0x5, 0xacf6}, {0xa, 0x4, 0x3, 0x4}, {0xfff8, 0x8, 0xf, 0x5}, {0x0, 0x3, 0x9, 0x6}, {0x3, 0xa, 0x1, 0x80}, {0x9, 0x1, 0x0, 0x4aa}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}]}, 0x3, 0x546, &(0x7f0000000180)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000500)) connect$802154_dgram(r6, &(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) lstat(&(0x7f0000000740)='./file2\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000380), &(0x7f00000003c0)=r8}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 1.622726828s ago: executing program 7 (id=1890): set_mempolicy(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x8, 0x0, 0x3, 0x1000}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000a0a010100000000000000000500000a0900010073797a3000000000be7718c42b1bcd3910638ba14133e721ff1b10b1c8dfa4cb4e62c99f170478ae45c633d081bc489b4e44f631b5915a7613647ee5c8c0154aa17bea5ccb9d335dcf1ae5516407d7ca2a4052dd5353ed7ba171f8232cd004e3713a4a60cf5bdb54e7bc6dee5e42dad85a0c260d47023cd05ff4ce8322e7678e39934fa42a08f3b3fa242898899ecf5494"], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x24000810) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r3, 0x0, 0x80001}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@newtaction={0x23c, 0x13, 0x53b, 0x0, 0x0, {}, [{0x228, 0x1, [@m_sample={0x94, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9d, 0x0, 0x8, 0x6, 0x1}}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x48, 0x6, "be335023112cff7311b7ea2dd42cccb17d7e4da5b2de9f5e27936125ecd2feaaba0279ea6b9ee3e294f3cc80ff7b17e884809c028a8e268629081f000000000000000000"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ife={0x34, 0x2, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x15c, 0x1a, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7f}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0xe1e4, 0x2, 0x8, 0x23ea}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x6}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x5, 0x3, 0x8000, 0x40}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3a}]}, {0xcf, 0x6, "a2651612ad7559f52fb05abdded27a36936dec9bca0a8db5ad04d007de7f0d1ea1def713e0f5a04818608b6686edb81a3f66cd4708963f36ec5bc8b60f23cefc6b972eecc6318a7cfd67d8fa719bd0a0b016f0aa65b3947ab92bccac6e4ff8ef1ffeb900eaf02ccd4f926bc2c6f23a97b39283fff0cc6c585b4ba096f7a1c0fbdc3a3a8f44a3a764c1880754a34bcea8eaf2b5a3ca7b89e29c57c1a7fe8e85ad36e5943df3c21cd9b0e46766b73bd2ba129bbf245c4d28b3e424842845c4f3dd287f350a0a791d727558f8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x44000}, 0x800) 1.541857479s ago: executing program 5 (id=1891): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x8080, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) stat(&(0x7f00000001c0)='./file0\x00', 0x0) 1.47273567s ago: executing program 6 (id=1892): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) 1.47143878s ago: executing program 5 (id=1893): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000020000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) setxattr$system_posix_acl(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x3}, [{0x2, 0x2}, {0x2, 0x2}, {}], {0x4, 0x3}, [{0x8, 0x6}, {0x8, 0x6}, {0x8, 0x3}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x4}}, 0x5c, 0x1) 1.322930412s ago: executing program 4 (id=1894): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) 1.313096882s ago: executing program 7 (id=1904): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000280)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c400, &(0x7f0000000080), 0xff, 0x26d, &(0x7f0000000d80)="$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") setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) 1.311456842s ago: executing program 5 (id=1895): process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) 1.267810943s ago: executing program 5 (id=1896): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.264445663s ago: executing program 6 (id=1897): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000e8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x6, 0x0, 0x5, 0x0}) 1.243694353s ago: executing program 5 (id=1898): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x3}, [{0x2, 0x2}, {0x2, 0x2}, {}], {0x4, 0x3}, [{0x8, 0x6}, {0x8, 0x6}, {0x8, 0x3}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x4}}, 0x5c, 0x1) 1.235996553s ago: executing program 4 (id=1899): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000280)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c400, &(0x7f0000000080), 0xff, 0x26d, &(0x7f0000000d80)="$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") setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) 1.212022543s ago: executing program 7 (id=1900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00fd000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2, 0xa, 0x9, 0xe, 0x2, 0x0, 0x70bd2c, 0x25dfdbfe}, 0x10}}, 0x24000000) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70800000045265d07cc4caec4157225a6be77950000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.179720824s ago: executing program 4 (id=1901): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = creat(0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) utimes(&(0x7f0000000440)='./file0\x00', &(0x7f0000000900)) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x208, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4001}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x1, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.170070804s ago: executing program 6 (id=1902): set_mempolicy(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x8, 0x0, 0x3, 0x1000}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000a0a010100000000000000000500000a0900010073797a3000000000be7718c42b1bcd3910638ba14133e721ff1b10b1c8dfa4cb4e62c99f170478ae45c633d081bc489b4e44f631b5915a7613647ee5c8c0154aa17bea5ccb9d335dcf1ae5516407d7ca2a4052dd5353ed7ba171f8232cd004e3713a4a60cf5bdb54e7bc6dee5e42dad85a0c260d47023cd05ff4ce8322e7678e39934fa42a08f3b3fa242898899ecf5494"], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x24000810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@newtaction={0x23c, 0x13, 0x53b, 0x0, 0x0, {}, [{0x228, 0x1, [@m_sample={0x94, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9d, 0x0, 0x8, 0x6, 0x1}}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x48, 0x6, "be335023112cff7311b7ea2dd42cccb17d7e4da5b2de9f5e27936125ecd2feaaba0279ea6b9ee3e294f3cc80ff7b17e884809c028a8e268629081f000000000000000000"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ife={0x34, 0x2, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x15c, 0x1a, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7f}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0xe1e4, 0x2, 0x8, 0x23ea}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x6}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x5, 0x3, 0x8000, 0x40}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3a}]}, {0xcf, 0x6, "a2651612ad7559f52fb05abdded27a36936dec9bca0a8db5ad04d007de7f0d1ea1def713e0f5a04818608b6686edb81a3f66cd4708963f36ec5bc8b60f23cefc6b972eecc6318a7cfd67d8fa719bd0a0b016f0aa65b3947ab92bccac6e4ff8ef1ffeb900eaf02ccd4f926bc2c6f23a97b39283fff0cc6c585b4ba096f7a1c0fbdc3a3a8f44a3a764c1880754a34bcea8eaf2b5a3ca7b89e29c57c1a7fe8e85ad36e5943df3c21cd9b0e46766b73bd2ba129bbf245c4d28b3e424842845c4f3dd287f350a0a791d727558f8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x44000}, 0x800) 1.143349524s ago: executing program 5 (id=1903): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = creat(0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) utimes(&(0x7f0000000440)='./file0\x00', &(0x7f0000000900)) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x208, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4001}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x1, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 769.514269ms ago: executing program 6 (id=1905): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x8080, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) stat(&(0x7f00000001c0)='./file0\x00', 0x0) 581.093692ms ago: executing program 6 (id=1906): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x5944, 0x7abb, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 278.900416ms ago: executing program 6 (id=1907): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0xa, &(0x7f0000000080)=[{0x800, 0x77, 0xd9, 0x6}, {0x5, 0x4}, {0x0, 0x9, 0x5, 0x9754}, {0x2, 0x7, 0x7, 0x2}, {0x7, 0xf, 0x5, 0xacf6}, {0xa, 0x4, 0x3, 0x4}, {0xfff8, 0x8, 0xf, 0x5}, {0x0, 0x3, 0x9, 0x6}, {0x3, 0xa, 0x1, 0x80}, {0x9, 0x1, 0x0, 0x4aa}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}]}, 0x3, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrKpupOkcdvgQ1UQfSqoFZ+ENSaTEDLJLMmk3YTFpvgqCCJa8EWffBH8AwTpi+8iFOq7qChSs/qg0PbKnbnTTWZnkhRncpfk94Oz9557Zu73ncnOybkzN/cGcGE9GRHTETEWEc9ExFSxPS1K7HdK/rh7B3eX8pJElr30dhJJsa27r8vF8lrxtImI+MZXI76bPBh3e3dvfbHRqG8V9ZnWRvJOlu3dWNtYXK2v1jfn5+eeW3h+4ebC7FD6WY2IF77815/88JdfeeG3n33lT7f+Pv29PK3/Ztmr0dOPYep0vdJ+LbrGI2JrFMFKMt7uYcfNknMBAOB4+Xz/wxHxyfb8fyrG2rM5AAAA4DzJvjAZ7yQRGQAAAHBupRExGUlaK873nSzOWL0WER+Nq2mjud36zEpzZ3M5b4uoRiVdWWvUZ2Oife5ANSpJXp8rzrHt1p/tqc9HxKMR8eOpK+16banZWC77ww8AAAC4IK71HP//eypNa7Wicb/k5AAAAIDhqZadAAAAADByjv8BAADg/Ktmfe7Q9aB09JkAAAAAI/C1F1/MS9a9//Xyy7s7682XbyzXt9drGztLtaXm1u3aarO52r5m38ZJ+2s0m7c/F5s7d2Za9e3WzPbu3q2N5s5m69bakVtgAwAAAGfo0U+88cckIvY/f6VdcpeKtkpENnb4weNlZAiMygc6p+cvo8sDOHuHf79fKTEP4OyZ0sPFVSk7AaB0J/0B0MCTd34//FwAAIDRuP6xwd//v71SamrAiBXf/yenugAIcK6MlZ0AUJrO93/vZR1lZwOcpcpxMwAHBXDupcP5/v+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSVbWGvXZiPhQRLw1Vbmc1+faz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3s8HLiX/mWovI+KVn7300zuLrdbWXL79n+9vb71ebH+2jE8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNO9g7tL97Isyw7uLp1l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjh56XRMTYEOLvvxYRj/WLn+RpRbXI4kj8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK0+/uavZwbGfy3i8fH+4083fpLvr0/8p07Zx+98c29vUFv2i4jr/ca/5GismdbG7Znt3b0baxuLq/XV+ub8/NxzC88v3FyYnVlZa9SLf/vG+NHHf/Pe/dq7D/T/6jHjb7v/A17/p0/Z/3ffvHPwkc5qz08mKvHzLJt+qv/P/7F88en+8fP/E58qfg/k7flrmL7+rb7xn/jVH54YlFve/+UB/Z/o6f/lnv5Pn7L/z3z9+38+5UMBgDOwvbu3vtho1LesHF6J6kORxsO7ks87S08jiSTylbeONC2Wn1hn5dXiPbbY6L7bhrTn3xUHR6NMvqTxCAAAGJ37k/7elqSchAAAAAAAAAAAAAAAAAAAAOACOvEyYIOa0oi4v+XbPzjmamS9MffL6SoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLH+FwAA//8tudaU") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000500)) connect$802154_dgram(r6, &(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) lstat(&(0x7f0000000740)='./file2\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000380), &(0x7f00000003c0)=r8}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 10.713019ms ago: executing program 7 (id=1908): process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1909): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x204, 0x65, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x28}}, @filter_kind_options=@f_flower={{0xb}, {0x188, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_ACT={0x150, 0x3, [@m_skbmod={0x14c, 0x1, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x18, 0xc, 0x8, 0xffff7f57, 0x80000000}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff9}]}, {0xe9, 0x6, "3bae8a77539cba3d519b8f53a0dd986b5e1c4f3ce300a7d7339580d4acb35069dbca70f25e3006684866b17805bdb7585832176befb2a2bda88f6587c6757f7c6ef66f9e9c75ba48f9257ae0d75d3754647fef2e162bfaec8823d868abccae15dce74220f3bb11eed90cdcd2db47c712f2469cc6e29ee56f2d1b175fd092c2d123d2805db079cfea0f23b87fa54a8f009e19194a673aab02771c4e2409fb457b0f8bc121219dd8518b5ea0e1f07dc1f0bdd0bf9368932411638aae0d3d269fca52c0a0ee527c353fcdde945c9f1459032051a39fad6543c7cd4f9bc5abc52f838cbff6bc7c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0xfff1}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) (async) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000400)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x1000000, 0x0, 0x5cad}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840), 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) (async) syz_open_pts(r6, 0x141601) kernel console output (not intermixed with test programs): p1: detected capacity change from 0 to 2048 [ 137.192231][ T7410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.232283][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.242366][ T7397] loop4: detected capacity change from 0 to 512 [ 137.283016][ T7397] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 137.301578][ T7397] EXT4-fs (loop4): mount failed [ 137.451585][ T7429] loop4: detected capacity change from 0 to 164 [ 137.482478][ T7429] FAULT_INJECTION: forcing a failure. [ 137.482478][ T7429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.495653][ T7429] CPU: 0 UID: 0 PID: 7429 Comm: syz.4.1198 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 137.495682][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.495697][ T7429] Call Trace: [ 137.495707][ T7429] [ 137.495715][ T7429] __dump_stack+0x1d/0x30 [ 137.495738][ T7429] dump_stack_lvl+0xe8/0x140 [ 137.495826][ T7429] dump_stack+0x15/0x1b [ 137.495850][ T7429] should_fail_ex+0x265/0x280 [ 137.495887][ T7429] should_fail+0xb/0x20 [ 137.495913][ T7429] should_fail_usercopy+0x1a/0x20 [ 137.495949][ T7429] _copy_from_user+0x1c/0xb0 [ 137.495973][ T7429] perf_copy_attr+0x145/0x610 [ 137.496056][ T7429] __se_sys_perf_event_open+0x67/0x11c0 [ 137.496093][ T7429] ? __rcu_read_unlock+0x4f/0x70 [ 137.496123][ T7429] ? bpf_trace_run2+0x124/0x1c0 [ 137.496158][ T7429] __x64_sys_perf_event_open+0x67/0x80 [ 137.496184][ T7429] x64_sys_call+0x27ec/0x2fb0 [ 137.496263][ T7429] do_syscall_64+0xd2/0x200 [ 137.496335][ T7429] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 137.496367][ T7429] ? clear_bhb_loop+0x40/0x90 [ 137.496396][ T7429] ? clear_bhb_loop+0x40/0x90 [ 137.496423][ T7429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.496445][ T7429] RIP: 0033:0x7f1af73be969 [ 137.496472][ T7429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.496493][ T7429] RSP: 002b:00007f1af5a27038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 137.496529][ T7429] RAX: ffffffffffffffda RBX: 00007f1af75e5fa0 RCX: 00007f1af73be969 [ 137.496555][ T7429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 137.496572][ T7429] RBP: 00007f1af5a27090 R08: 0000000000000000 R09: 0000000000000000 [ 137.496589][ T7429] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 137.496606][ T7429] R13: 0000000000000000 R14: 00007f1af75e5fa0 R15: 00007fffa7f94b08 [ 137.496634][ T7429] [ 137.696757][ T7433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1199'. [ 137.815680][ T7438] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 138.137580][ T7456] sctp: [Deprecated]: syz.0.1206 (pid 7456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.137580][ T7456] Use struct sctp_sack_info instead [ 138.369546][ T7471] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 138.382725][ T7473] lo speed is unknown, defaulting to 1000 [ 138.803795][ T7487] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 139.110621][ T7502] netlink: 'syz.1.1222': attribute type 10 has an invalid length. [ 139.121028][ T7502] team0: Device hsr_slave_0 failed to register rx_handler [ 139.306131][ T7507] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 139.834829][ T7520] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.854474][ T7532] lo speed is unknown, defaulting to 1000 [ 139.890311][ T7520] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.981707][ T7520] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.024779][ T7544] FAULT_INJECTION: forcing a failure. [ 140.024779][ T7544] name failslab, interval 1, probability 0, space 0, times 0 [ 140.038605][ T7544] CPU: 1 UID: 0 PID: 7544 Comm: syz.1.1237 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 140.038642][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.038715][ T7544] Call Trace: [ 140.038720][ T7544] [ 140.038727][ T7544] __dump_stack+0x1d/0x30 [ 140.038803][ T7544] dump_stack_lvl+0xe8/0x140 [ 140.038831][ T7544] dump_stack+0x15/0x1b [ 140.038873][ T7544] should_fail_ex+0x265/0x280 [ 140.038904][ T7544] should_failslab+0x8c/0xb0 [ 140.038930][ T7544] __kmalloc_noprof+0xa5/0x3e0 [ 140.038959][ T7544] ? cgroup_mkdir+0x173/0xc90 [ 140.039018][ T7544] ? cgroup_kn_lock_live+0x130/0x1e0 [ 140.039054][ T7544] cgroup_mkdir+0x173/0xc90 [ 140.039072][ T7544] ? may_create+0x26e/0x2b0 [ 140.039179][ T7544] ? __pfx_cgroup_mkdir+0x10/0x10 [ 140.039206][ T7544] kernfs_iop_mkdir+0x11b/0x1c0 [ 140.039313][ T7544] vfs_mkdir+0x213/0x340 [ 140.039345][ T7544] do_mkdirat+0x132/0x3f0 [ 140.039463][ T7544] __x64_sys_mkdir+0x42/0x50 [ 140.039491][ T7544] x64_sys_call+0x2289/0x2fb0 [ 140.039518][ T7544] do_syscall_64+0xd2/0x200 [ 140.039557][ T7544] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 140.039651][ T7544] ? clear_bhb_loop+0x40/0x90 [ 140.039680][ T7544] ? clear_bhb_loop+0x40/0x90 [ 140.039705][ T7544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.039750][ T7544] RIP: 0033:0x7f6d911ee969 [ 140.039768][ T7544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.039793][ T7544] RSP: 002b:00007f6d8f857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 140.039817][ T7544] RAX: ffffffffffffffda RBX: 00007f6d91415fa0 RCX: 00007f6d911ee969 [ 140.039833][ T7544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 140.039855][ T7544] RBP: 00007f6d8f857090 R08: 0000000000000000 R09: 0000000000000000 [ 140.039871][ T7544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.039883][ T7544] R13: 0000000000000000 R14: 00007f6d91415fa0 R15: 00007ffeee9693a8 [ 140.039902][ T7544] [ 140.305859][ T7520] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.324426][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 140.324441][ T29] audit: type=1400 audit(1748483070.967:8054): avc: denied { append } for pid=7545 comm="syz.0.1238" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 140.364945][ T7546] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 140.476110][ T7520] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.537212][ T7520] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.557419][ T7520] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.612366][ T7520] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.700410][ T29] audit: type=1400 audit(1748483071.339:8055): avc: denied { read } for pid=7556 comm="syz.3.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.775310][ T29] audit: type=1400 audit(1748483071.379:8056): avc: denied { create } for pid=7556 comm="syz.3.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.852494][ T29] audit: type=1326 audit(1748483071.449:8057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.4.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af73be969 code=0x7ffc0000 [ 140.875997][ T29] audit: type=1326 audit(1748483071.449:8058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.4.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f1af73be969 code=0x7ffc0000 [ 140.899775][ T29] audit: type=1326 audit(1748483071.449:8059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.4.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af73be969 code=0x7ffc0000 [ 141.076405][ T7579] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 141.088842][ T7576] smc: net device bond0 erased user defined pnetid SYZ2 [ 141.146507][ T29] audit: type=1400 audit(1748483071.731:8060): avc: denied { ioctl } for pid=7575 comm="syz.4.1249" path="socket:[19281]" dev="sockfs" ino=19281 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.172377][ T29] audit: type=1400 audit(1748483071.781:8061): avc: denied { create } for pid=7566 comm="syz.3.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.191815][ T29] audit: type=1400 audit(1748483071.781:8062): avc: denied { write } for pid=7566 comm="syz.3.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.565466][ T29] audit: type=1400 audit(1748483071.902:8063): avc: denied { write } for pid=7578 comm="syz.2.1251" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.599390][ T7592] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.637981][ T7598] lo speed is unknown, defaulting to 1000 [ 141.645978][ T7592] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.722171][ T7607] Invalid ELF header magic: != ELF [ 141.794857][ T7592] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.849697][ T7592] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.919964][ T7621] Invalid ELF header magic: != ELF [ 141.935092][ T7592] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.935306][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1265'. [ 141.947827][ T7592] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.965325][ T7592] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.977090][ T7592] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.051176][ T7630] mmap: syz.1.1267 (7630) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.069117][ T7632] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 142.113632][ T7634] loop4: detected capacity change from 0 to 2048 [ 142.126510][ T7634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.160689][ T7640] Invalid ELF header magic: != ELF [ 142.196651][ T7634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.214694][ T7634] SELinux: Context @ is not valid (left unmapped). [ 142.226083][ T7634] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1268: bg 0: block 2: invalid block bitmap [ 142.247208][ T7634] EXT4-fs (loop4): Remounting filesystem read-only [ 142.253897][ T7634] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1597: inode #19: comm syz.4.1268: cleanup dec ref error -28 [ 142.357337][ T7659] netlink: 'syz.3.1278': attribute type 1 has an invalid length. [ 142.392498][ T7659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.410058][ T7659] bond1: (slave gretap1): making interface the new active one [ 142.418402][ T7659] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 142.433741][ T7659] syz.3.1278 uses obsolete (PF_INET,SOCK_PACKET) [ 142.451870][ T7656] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.516403][ T7656] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.595706][ T7656] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.616486][ T7670] xt_hashlimit: max too large, truncated to 1048576 [ 142.636136][ T7656] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.699705][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.743978][ T7681] loop4: detected capacity change from 0 to 128 [ 142.773196][ T7681] random: crng reseeded on system resumption [ 142.936231][ T7691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1291'. [ 142.977682][ T7696] FAULT_INJECTION: forcing a failure. [ 142.977682][ T7696] name failslab, interval 1, probability 0, space 0, times 0 [ 142.977722][ T7696] CPU: 0 UID: 0 PID: 7696 Comm: syz.1.1293 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 142.977757][ T7696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.977771][ T7696] Call Trace: [ 142.977780][ T7696] [ 142.977790][ T7696] __dump_stack+0x1d/0x30 [ 142.977820][ T7696] dump_stack_lvl+0xe8/0x140 [ 142.977909][ T7696] dump_stack+0x15/0x1b [ 142.977935][ T7696] should_fail_ex+0x265/0x280 [ 142.977978][ T7696] should_failslab+0x8c/0xb0 [ 142.978003][ T7696] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 142.978041][ T7696] ? v9fs_session_init+0x4b/0xde0 [ 142.978089][ T7696] kstrdup+0x3e/0xd0 [ 142.978113][ T7696] v9fs_session_init+0x4b/0xde0 [ 142.978139][ T7696] ? __rcu_read_unlock+0x4f/0x70 [ 142.978168][ T7696] ? __rcu_read_unlock+0x4f/0x70 [ 142.978219][ T7696] ? should_fail_ex+0xdb/0x280 [ 142.978252][ T7696] ? v9fs_mount+0x51/0x590 [ 142.978283][ T7696] ? should_failslab+0x8c/0xb0 [ 142.978340][ T7696] ? __kmalloc_cache_noprof+0x189/0x320 [ 142.978373][ T7696] v9fs_mount+0x67/0x590 [ 142.978535][ T7696] ? __pfx_v9fs_mount+0x10/0x10 [ 142.978567][ T7696] legacy_get_tree+0x78/0xd0 [ 142.978620][ T7696] vfs_get_tree+0x54/0x1d0 [ 142.978662][ T7696] do_new_mount+0x207/0x680 [ 142.978763][ T7696] path_mount+0x4a4/0xb20 [ 142.978799][ T7696] ? user_path_at+0x109/0x130 [ 142.978849][ T7696] __se_sys_mount+0x28f/0x2e0 [ 142.978942][ T7696] ? fput+0x8f/0xc0 [ 142.978969][ T7696] __x64_sys_mount+0x67/0x80 [ 142.979008][ T7696] x64_sys_call+0xd36/0x2fb0 [ 142.979037][ T7696] do_syscall_64+0xd2/0x200 [ 142.979122][ T7696] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 142.979159][ T7696] ? clear_bhb_loop+0x40/0x90 [ 142.979185][ T7696] ? clear_bhb_loop+0x40/0x90 [ 142.979231][ T7696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.979257][ T7696] RIP: 0033:0x7f6d911ee969 [ 142.979277][ T7696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.979376][ T7696] RSP: 002b:00007f6d8f857038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 142.979396][ T7696] RAX: ffffffffffffffda RBX: 00007f6d91415fa0 RCX: 00007f6d911ee969 [ 142.979410][ T7696] RDX: 0000200000000200 RSI: 0000200000000180 RDI: 0000000000000000 [ 142.979423][ T7696] RBP: 00007f6d8f857090 R08: 0000200000000300 R09: 0000000000000000 [ 142.979436][ T7696] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 142.979501][ T7696] R13: 0000000000000000 R14: 00007f6d91415fa0 R15: 00007ffeee9693a8 [ 142.979529][ T7696] [ 143.083380][ T5348] bridge_slave_1: left allmulticast mode [ 143.083403][ T5348] bridge_slave_1: left promiscuous mode [ 143.083578][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.084239][ T5348] bridge_slave_0: left allmulticast mode [ 143.084257][ T5348] bridge_slave_0: left promiscuous mode [ 143.084468][ T5348] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.131108][ T5348] bond1 (unregistering): (slave gretap1): Releasing active interface [ 143.167840][ T7711] Invalid ELF header magic: != ELF [ 143.255322][ T7715] loop1: detected capacity change from 0 to 1764 [ 143.258171][ T5348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.265322][ T7715] iso9660: Bad value for 'sbsector' [ 143.452344][ T5348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.475947][ T5348] bond0 (unregistering): Released all slaves [ 143.491446][ T5348] bond1 (unregistering): Released all slaves [ 143.500501][ T7718] x_tables: duplicate underflow at hook 1 [ 143.581117][ T5348] tipc: Left network mode [ 143.691287][ T7749] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 143.758478][ T5348] team0 (unregistering): Port device team_slave_1 removed [ 143.792634][ T5348] team0 (unregistering): Port device team_slave_0 removed [ 143.845184][ T7698] lo speed is unknown, defaulting to 1000 [ 143.869096][ T7761] loop1: detected capacity change from 0 to 2048 [ 143.943241][ T3996] loop1: p1 < > p4 [ 143.954361][ T7770] Invalid ELF header magic: != ELF [ 143.961190][ T3996] loop1: p4 size 8388608 extends beyond EOD, truncated [ 144.014975][ T7698] chnl_net:caif_netlink_parms(): no params data found [ 144.229432][ T5348] IPVS: stop unused estimator thread 0... [ 144.341964][ T7698] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.349156][ T7698] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.437472][ T7698] bridge_slave_0: entered allmulticast mode [ 144.444407][ T7698] bridge_slave_0: entered promiscuous mode [ 144.450914][ T7761] loop1: p1 < > p4 [ 144.451598][ T7698] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.461870][ T7698] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.478207][ T7761] loop1: p4 size 8388608 extends beyond EOD, truncated [ 144.485662][ T7698] bridge_slave_1: entered allmulticast mode [ 144.495267][ T7698] bridge_slave_1: entered promiscuous mode [ 144.520478][ T3007] loop1: p1 < > p4 [ 144.526046][ T3007] loop1: p4 size 8388608 extends beyond EOD, truncated [ 144.541864][ T7698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.562698][ T7698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.676356][ T7698] team0: Port device team_slave_0 added [ 144.683030][ T7698] team0: Port device team_slave_1 added [ 144.772479][ T7698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.779567][ T7698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.805587][ T7698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.812213][ T7805] loop4: detected capacity change from 0 to 512 [ 144.839658][ T7812] FAULT_INJECTION: forcing a failure. [ 144.839658][ T7812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.852948][ T7812] CPU: 1 UID: 0 PID: 7812 Comm: syz.2.1315 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 144.852984][ T7812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.853006][ T7812] Call Trace: [ 144.853013][ T7812] [ 144.853020][ T7812] __dump_stack+0x1d/0x30 [ 144.853042][ T7812] dump_stack_lvl+0xe8/0x140 [ 144.853067][ T7812] dump_stack+0x15/0x1b [ 144.853157][ T7812] should_fail_ex+0x265/0x280 [ 144.853274][ T7812] should_fail+0xb/0x20 [ 144.853314][ T7812] should_fail_usercopy+0x1a/0x20 [ 144.853418][ T7812] _copy_from_user+0x1c/0xb0 [ 144.853442][ T7812] kstrtouint_from_user+0x69/0xf0 [ 144.853488][ T7812] ? 0xffffffff81000000 [ 144.853503][ T7812] ? selinux_file_permission+0x1e4/0x320 [ 144.853530][ T7812] proc_fail_nth_write+0x50/0x160 [ 144.853596][ T7812] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 144.853639][ T7812] vfs_write+0x269/0x8e0 [ 144.853677][ T7812] ? vfs_read+0x47f/0x6f0 [ 144.853714][ T7812] ? __rcu_read_unlock+0x4f/0x70 [ 144.853783][ T7812] ? __fget_files+0x184/0x1c0 [ 144.853829][ T7812] ksys_write+0xda/0x1a0 [ 144.853923][ T7812] __x64_sys_write+0x40/0x50 [ 144.853963][ T7812] x64_sys_call+0x2cdd/0x2fb0 [ 144.854027][ T7812] do_syscall_64+0xd2/0x200 [ 144.854063][ T7812] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 144.854144][ T7812] ? clear_bhb_loop+0x40/0x90 [ 144.854167][ T7812] ? clear_bhb_loop+0x40/0x90 [ 144.854194][ T7812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.854281][ T7812] RIP: 0033:0x7f6f6611d41f [ 144.854296][ T7812] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 144.854377][ T7812] RSP: 002b:00007f6f64787030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 144.854473][ T7812] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6f6611d41f [ 144.854489][ T7812] RDX: 0000000000000001 RSI: 00007f6f647870a0 RDI: 0000000000000007 [ 144.854506][ T7812] RBP: 00007f6f64787090 R08: 0000000000000000 R09: 0000000000000000 [ 144.854522][ T7812] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 144.854610][ T7812] R13: 0000000000000000 R14: 00007f6f66345fa0 R15: 00007ffefcc28ca8 [ 144.854633][ T7812] [ 145.083487][ T7698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.090506][ T7698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.094321][ T7805] journal_path: Non-blockdev passed as './bus' [ 145.116632][ T7698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.136262][ T7805] EXT4-fs: error: could not find journal device path [ 145.168439][ T7815] veth1_to_bond: entered allmulticast mode [ 145.183591][ T7698] hsr_slave_0: entered promiscuous mode [ 145.190043][ T7698] hsr_slave_1: entered promiscuous mode [ 145.211799][ T7698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.249926][ T7698] Cannot create hsr debugfs directory [ 145.266020][ T7816] 9pnet: Could not find request transport: r [ 145.274181][ T7814] veth1_to_bond: left allmulticast mode [ 145.557603][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 145.557622][ T29] audit: type=1326 audit(1748483076.222:8367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d911ee969 code=0x7ffc0000 [ 145.572257][ T7698] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.597591][ T7698] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.599592][ T7832] Invalid ELF header magic: != ELF [ 145.628728][ T7698] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.646013][ T7698] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.666543][ T29] audit: type=1326 audit(1748483076.262:8368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d911ee969 code=0x7ffc0000 [ 145.690081][ T29] audit: type=1326 audit(1748483076.262:8369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f6d911ee969 code=0x7ffc0000 [ 145.714005][ T29] audit: type=1326 audit(1748483076.262:8370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d911ee969 code=0x7ffc0000 [ 145.737427][ T29] audit: type=1326 audit(1748483076.262:8371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d911ee969 code=0x7ffc0000 [ 145.761036][ T29] audit: type=1326 audit(1748483076.262:8372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6d911ee969 code=0x7ffc0000 [ 145.784608][ T29] audit: type=1326 audit(1748483076.262:8373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d911ee969 code=0x7ffc0000 [ 145.808132][ T29] audit: type=1326 audit(1748483076.262:8374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6d911ee969 code=0x7ffc0000 [ 145.831425][ T29] audit: type=1326 audit(1748483076.262:8375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d911ee969 code=0x7ffc0000 [ 145.855019][ T29] audit: type=1326 audit(1748483076.262:8376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6d911ee969 code=0x7ffc0000 [ 145.957254][ T7850] loop1: detected capacity change from 0 to 2048 [ 145.966529][ T7698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.983789][ T7698] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.003439][ T5360] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.010600][ T5360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.027935][ T5360] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.035201][ T5360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.038585][ T3007] loop1: p1 < > p4 [ 146.059400][ T7698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.070045][ T7698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.188183][ T7698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.463196][ T3007] loop1: p4 size 8388608 extends beyond EOD, truncated [ 146.497359][ T3007] loop1: p1 < > p4 [ 146.504113][ T3007] loop1: p4 size 8388608 extends beyond EOD, truncated [ 146.521531][ T7850] loop1: p1 < > p4 [ 146.535231][ T7850] loop1: p4 size 8388608 extends beyond EOD, truncated [ 146.670864][ T7698] veth0_vlan: entered promiscuous mode [ 146.687272][ T7698] veth1_vlan: entered promiscuous mode [ 146.746354][ T7698] veth0_macvtap: entered promiscuous mode [ 146.757996][ T7698] veth1_macvtap: entered promiscuous mode [ 146.780183][ T7890] FAULT_INJECTION: forcing a failure. [ 146.780183][ T7890] name failslab, interval 1, probability 0, space 0, times 0 [ 146.793059][ T7890] CPU: 1 UID: 0 PID: 7890 Comm: syz.2.1326 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 146.793095][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.793111][ T7890] Call Trace: [ 146.793118][ T7890] [ 146.793127][ T7890] __dump_stack+0x1d/0x30 [ 146.793149][ T7890] dump_stack_lvl+0xe8/0x140 [ 146.793209][ T7890] dump_stack+0x15/0x1b [ 146.793227][ T7890] should_fail_ex+0x265/0x280 [ 146.793257][ T7890] ? sctp_association_new+0x71/0x1200 [ 146.793299][ T7890] should_failslab+0x8c/0xb0 [ 146.793324][ T7890] __kmalloc_cache_noprof+0x4c/0x320 [ 146.793372][ T7890] sctp_association_new+0x71/0x1200 [ 146.793396][ T7890] ? sctp_v4_to_sk_saddr+0x29/0x40 [ 146.793419][ T7890] ? sctp_do_bind+0x497/0x4b0 [ 146.793454][ T7890] ? sctp_v4_scope+0x140/0x150 [ 146.793552][ T7890] sctp_connect_new_asoc+0x1a8/0x3a0 [ 146.793587][ T7890] __sctp_connect+0x424/0x7a0 [ 146.793609][ T7890] ? selinux_sctp_bind_connect+0x20d/0x250 [ 146.793797][ T7890] sctp_getsockopt_connectx3+0x220/0x300 [ 146.793845][ T7890] sctp_getsockopt+0x910/0xaa0 [ 146.793876][ T7890] sock_common_getsockopt+0x60/0x70 [ 146.793959][ T7890] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 146.793983][ T7890] do_sock_getsockopt+0x200/0x240 [ 146.794016][ T7890] __x64_sys_getsockopt+0x11e/0x1a0 [ 146.794045][ T7890] x64_sys_call+0x12aa/0x2fb0 [ 146.794145][ T7890] do_syscall_64+0xd2/0x200 [ 146.794214][ T7890] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 146.794250][ T7890] ? clear_bhb_loop+0x40/0x90 [ 146.794295][ T7890] ? clear_bhb_loop+0x40/0x90 [ 146.794317][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.794414][ T7890] RIP: 0033:0x7f6f6611e969 [ 146.794432][ T7890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.794449][ T7890] RSP: 002b:00007f6f64787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 146.794468][ T7890] RAX: ffffffffffffffda RBX: 00007f6f66345fa0 RCX: 00007f6f6611e969 [ 146.794480][ T7890] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000006 [ 146.794492][ T7890] RBP: 00007f6f64787090 R08: 0000200000000180 R09: 0000000000000000 [ 146.794504][ T7890] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.794535][ T7890] R13: 0000000000000000 R14: 00007f6f66345fa0 R15: 00007ffefcc28ca8 [ 146.794560][ T7890] [ 147.029771][ T7698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.042232][ T7698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.106867][ T7698] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.115807][ T7698] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.124674][ T7698] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.132624][ T7895] loop2: detected capacity change from 0 to 1024 [ 147.133462][ T7698] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.168060][ T7895] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 147.178493][ T7895] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 147.189467][ T7895] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: inode #32: comm syz.2.1327: iget: special inode unallocated [ 147.233144][ T7895] EXT4-fs (loop2): no journal found [ 147.238488][ T7895] EXT4-fs (loop2): can't get journal size [ 147.247909][ T7895] EXT4-fs error (device loop2): __ext4_fill_super:5502: inode #2: comm syz.2.1327: iget: special inode unallocated [ 147.303431][ T7895] EXT4-fs (loop2): get root inode failed [ 147.309221][ T7895] EXT4-fs (loop2): mount failed [ 147.529052][ T7919] FAULT_INJECTION: forcing a failure. [ 147.529052][ T7919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.542210][ T7919] CPU: 0 UID: 0 PID: 7919 Comm: syz.2.1330 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 147.542328][ T7919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.542340][ T7919] Call Trace: [ 147.542348][ T7919] [ 147.542355][ T7919] __dump_stack+0x1d/0x30 [ 147.542434][ T7919] dump_stack_lvl+0xe8/0x140 [ 147.542461][ T7919] dump_stack+0x15/0x1b [ 147.542485][ T7919] should_fail_ex+0x265/0x280 [ 147.542530][ T7919] should_fail+0xb/0x20 [ 147.542555][ T7919] should_fail_usercopy+0x1a/0x20 [ 147.542624][ T7919] _copy_to_user+0x20/0xa0 [ 147.542688][ T7919] simple_read_from_buffer+0xb5/0x130 [ 147.542725][ T7919] proc_fail_nth_read+0x100/0x140 [ 147.542768][ T7919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.542888][ T7919] vfs_read+0x1a0/0x6f0 [ 147.542927][ T7919] ? __rcu_read_unlock+0x4f/0x70 [ 147.543022][ T7919] ? __fget_files+0x184/0x1c0 [ 147.543092][ T7919] ksys_read+0xda/0x1a0 [ 147.543131][ T7919] __x64_sys_read+0x40/0x50 [ 147.543185][ T7919] x64_sys_call+0x2d77/0x2fb0 [ 147.543214][ T7919] do_syscall_64+0xd2/0x200 [ 147.543324][ T7919] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 147.543356][ T7919] ? clear_bhb_loop+0x40/0x90 [ 147.543378][ T7919] ? clear_bhb_loop+0x40/0x90 [ 147.543448][ T7919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.543477][ T7919] RIP: 0033:0x7f6f6611d37c [ 147.543498][ T7919] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 147.543524][ T7919] RSP: 002b:00007f6f64787030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 147.543548][ T7919] RAX: ffffffffffffffda RBX: 00007f6f66345fa0 RCX: 00007f6f6611d37c [ 147.543565][ T7919] RDX: 000000000000000f RSI: 00007f6f647870a0 RDI: 0000000000000004 [ 147.543581][ T7919] RBP: 00007f6f64787090 R08: 0000000000000000 R09: 0000000000000000 [ 147.543596][ T7919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.543662][ T7919] R13: 0000000000000000 R14: 00007f6f66345fa0 R15: 00007ffefcc28ca8 [ 147.543726][ T7919] [ 147.781017][ T7656] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.802520][ T7927] loop1: detected capacity change from 0 to 512 [ 147.812406][ T7656] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.826701][ T7927] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.842416][ T7656] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.855497][ T7656] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.916716][ T7927] EXT4-fs (loop1): 1 orphan inode deleted [ 147.922608][ T7927] EXT4-fs (loop1): 1 truncate cleaned up [ 147.929240][ T7927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.976100][ T7941] openvswitch: netlink: Message has 6 unknown bytes. [ 148.072037][ T7927] EXT4-fs error (device loop1): ext4_lookup:1789: inode #15: comm syz.1.1332: iget: bad extra_isize 46 (inode size 256) [ 148.109826][ T7927] EXT4-fs (loop1): Remounting filesystem read-only [ 148.170580][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.220675][ T7975] loop1: detected capacity change from 0 to 512 [ 148.260726][ T7975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.304231][ T7975] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.338657][ T7975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.511106][ T8006] loop1: detected capacity change from 0 to 1024 [ 148.528129][ T8006] EXT4-fs: Ignoring removed orlov option [ 148.549422][ T8006] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 148.559364][ T7993] lo speed is unknown, defaulting to 1000 [ 148.580259][ T8006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.598647][ T8006] EXT4-fs error (device loop1): ext4_find_dest_de:2054: inode #12: block 7: comm syz.1.1343: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 148.693834][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.796573][ T8013] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 148.809777][ T8013] loop1: detected capacity change from 0 to 512 [ 148.821473][ T8013] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.835575][ T8013] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1346: invalid indirect mapped block 4294967295 (level 1) [ 148.852982][ T8013] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1346: invalid indirect mapped block 4294967295 (level 1) [ 148.869711][ T8013] EXT4-fs (loop1): 2 truncates cleaned up [ 148.876539][ T8013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.896859][ T8010] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.010631][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.107773][ T8024] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 149.114493][ T8024] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 149.124185][ T8024] vhci_hcd vhci_hcd.0: Device attached [ 149.172873][ T8022] loop2: detected capacity change from 0 to 512 [ 149.184821][ T8022] journal_path: Non-blockdev passed as './bus' [ 149.192782][ T8022] EXT4-fs: error: could not find journal device path [ 149.207044][ T8024] loop1: detected capacity change from 0 to 128 [ 149.275838][ T8024] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 149.289871][ T8036] lo speed is unknown, defaulting to 1000 [ 149.310399][ T8024] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.370437][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'. [ 149.445308][ T1042] usb 3-1: new high-speed USB device number 4 using vhci_hcd [ 149.507768][ T8027] vhci_hcd: connection reset by peer [ 149.514487][ T5363] vhci_hcd: stop threads [ 149.518786][ T5363] vhci_hcd: release socket [ 149.523385][ T5363] vhci_hcd: disconnect device [ 150.045182][ T8064] loop4: detected capacity change from 0 to 128 [ 150.070464][ T8064] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.085205][ T8064] ext4 filesystem being mounted at /296/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 150.120098][ T3328] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.160046][ T8072] loop2: detected capacity change from 0 to 512 [ 150.167268][ T8072] EXT4-fs: Ignoring removed oldalloc option [ 150.174836][ T8072] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.194401][ T8072] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1363: invalid indirect mapped block 83886080 (level 1) [ 150.209570][ T8072] EXT4-fs (loop2): Remounting filesystem read-only [ 150.216393][ T8072] EXT4-fs (loop2): 1 orphan inode deleted [ 150.222387][ T8072] EXT4-fs (loop2): 1 truncate cleaned up [ 150.232550][ T8072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.310997][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.434952][ T8010] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.480111][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1367'. [ 150.546257][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 150.546274][ T29] audit: type=1400 audit(1748483081.235:8673): avc: denied { read } for pid=8094 comm="syz.2.1369" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 150.590245][ T8010] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.644828][ T8010] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.735609][ T8010] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.748986][ T8010] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.761412][ T8010] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.773612][ T8010] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.824705][ T29] audit: type=1400 audit(1748483081.516:8674): avc: denied { mount } for pid=8104 comm="syz.2.1373" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 150.844070][ T8105] loop2: detected capacity change from 0 to 512 [ 150.846907][ T29] audit: type=1400 audit(1748483081.516:8675): avc: denied { watch } for pid=8104 comm="syz.2.1373" path="/274/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 150.855769][ T8105] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.888479][ T29] audit: type=1400 audit(1748483081.526:8676): avc: denied { setcheckreqprot } for pid=8104 comm="syz.2.1373" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 150.926661][ T8105] EXT4-fs (loop2): 1 truncate cleaned up [ 150.927199][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.933030][ T8105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.961979][ T29] audit: type=1400 audit(1748483081.656:8677): avc: denied { write } for pid=8104 comm="syz.2.1373" path="/274/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 150.984750][ T29] audit: type=1400 audit(1748483081.656:8678): avc: denied { mounton } for pid=8104 comm="syz.2.1373" path="/274/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 151.019037][ T29] audit: type=1326 audit(1748483081.717:8679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.4.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af73be969 code=0x7ffc0000 [ 151.044314][ T29] audit: type=1326 audit(1748483081.717:8680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.4.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f1af73be969 code=0x7ffc0000 [ 151.067956][ T29] audit: type=1326 audit(1748483081.717:8681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.4.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af73be969 code=0x7ffc0000 [ 151.091614][ T8105] loop2: detected capacity change from 512 to 64 [ 151.091619][ T29] audit: type=1326 audit(1748483081.717:8682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.4.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af73be969 code=0x7ffc0000 [ 151.122644][ T8113] FAULT_INJECTION: forcing a failure. [ 151.122644][ T8113] name failslab, interval 1, probability 0, space 0, times 0 [ 151.127865][ T8107] loop5: detected capacity change from 0 to 164 [ 151.135498][ T8113] CPU: 1 UID: 0 PID: 8113 Comm: syz.1.1376 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 151.135548][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.135616][ T8113] Call Trace: [ 151.135622][ T8113] [ 151.135629][ T8113] __dump_stack+0x1d/0x30 [ 151.135658][ T8113] dump_stack_lvl+0xe8/0x140 [ 151.135687][ T8113] dump_stack+0x15/0x1b [ 151.135787][ T8113] should_fail_ex+0x265/0x280 [ 151.135826][ T8113] ? rtnl_newlink+0x5c/0x12d0 [ 151.135867][ T8113] should_failslab+0x8c/0xb0 [ 151.135960][ T8113] __kmalloc_cache_noprof+0x4c/0x320 [ 151.135997][ T8113] rtnl_newlink+0x5c/0x12d0 [ 151.136037][ T8113] ? bpf_send_signal_common+0x2ce/0x300 [ 151.136080][ T8113] ? bpf_send_signal_common+0x2ce/0x300 [ 151.136128][ T8113] ? x86_call_depth_emit_accounting+0x128/0x2e0 [ 151.136186][ T8113] ? xas_load+0x413/0x430 [ 151.136223][ T8113] ? xas_load+0x413/0x430 [ 151.136327][ T8113] ? __rcu_read_unlock+0x4f/0x70 [ 151.136358][ T8113] ? xa_load+0xb1/0xe0 [ 151.136440][ T8113] ? __kfree_skb+0x109/0x150 [ 151.136472][ T8113] ? __rcu_read_unlock+0x4f/0x70 [ 151.136502][ T8113] ? avc_has_perm_noaudit+0x1b1/0x200 [ 151.136582][ T8113] ? selinux_capable+0x1f9/0x270 [ 151.136703][ T8113] ? security_capable+0x83/0x90 [ 151.136735][ T8113] ? ns_capable+0x7d/0xb0 [ 151.136763][ T8113] ? __pfx_rtnl_newlink+0x10/0x10 [ 151.136859][ T8113] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 151.136910][ T8113] netlink_rcv_skb+0x120/0x220 [ 151.136944][ T8113] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 151.136997][ T8113] rtnetlink_rcv+0x1c/0x30 [ 151.137079][ T8113] netlink_unicast+0x59e/0x670 [ 151.137112][ T8113] netlink_sendmsg+0x58b/0x6b0 [ 151.137151][ T8113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.137247][ T8113] __sock_sendmsg+0x145/0x180 [ 151.137305][ T8113] ____sys_sendmsg+0x31e/0x4e0 [ 151.137347][ T8113] ___sys_sendmsg+0x17b/0x1d0 [ 151.137427][ T8113] __x64_sys_sendmsg+0xd4/0x160 [ 151.137470][ T8113] x64_sys_call+0x2999/0x2fb0 [ 151.137501][ T8113] do_syscall_64+0xd2/0x200 [ 151.137548][ T8113] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 151.137629][ T8113] ? clear_bhb_loop+0x40/0x90 [ 151.137726][ T8113] ? clear_bhb_loop+0x40/0x90 [ 151.137756][ T8113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.137785][ T8113] RIP: 0033:0x7f6d911ee969 [ 151.137806][ T8113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.137830][ T8113] RSP: 002b:00007f6d8f857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.137929][ T8113] RAX: ffffffffffffffda RBX: 00007f6d91415fa0 RCX: 00007f6d911ee969 [ 151.137945][ T8113] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000005 [ 151.138042][ T8113] RBP: 00007f6d8f857090 R08: 0000000000000000 R09: 0000000000000000 [ 151.138059][ T8113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.138075][ T8113] R13: 0000000000000000 R14: 00007f6d91415fa0 R15: 00007ffeee9693a8 [ 151.138102][ T8113] [ 151.179049][ T3320] EXT4-fs error (device loop2): htree_dirblock_to_tree:1082: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 151.460925][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.471126][ T8107] ISOFS: unable to read i-node block [ 151.476596][ T8107] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 151.551741][ T8126] netlink: 'syz.1.1380': attribute type 11 has an invalid length. [ 151.566602][ T8126] netlink: 448 bytes leftover after parsing attributes in process `syz.1.1380'. [ 151.605273][ T8126] lo speed is unknown, defaulting to 1000 [ 151.623760][ T8132] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 151.696387][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1385'. [ 151.737453][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1386'. [ 151.878139][ T5348] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.954472][ T5348] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.964498][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1391'. [ 152.013055][ T5348] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.082440][ T5348] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.529277][ T5348] bond0 (unregistering): Released all slaves [ 152.629772][ T5348] tipc: Left network mode [ 152.636144][ T8151] lo speed is unknown, defaulting to 1000 [ 152.664419][ T5348] hsr_slave_0: left promiscuous mode [ 152.675767][ T5348] hsr_slave_1: left promiscuous mode [ 152.698617][ T5348] veth1_macvtap: left promiscuous mode [ 152.733259][ T5348] veth0_macvtap: left promiscuous mode [ 152.741205][ T5348] veth1_vlan: left promiscuous mode [ 152.752430][ T5348] veth0_vlan: left promiscuous mode [ 152.935989][ T8236] FAULT_INJECTION: forcing a failure. [ 152.935989][ T8236] name failslab, interval 1, probability 0, space 0, times 0 [ 152.948871][ T8236] CPU: 0 UID: 0 PID: 8236 Comm: syz.1.1404 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 152.948908][ T8236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.948926][ T8236] Call Trace: [ 152.948934][ T8236] [ 152.948942][ T8236] __dump_stack+0x1d/0x30 [ 152.948973][ T8236] dump_stack_lvl+0xe8/0x140 [ 152.948999][ T8236] dump_stack+0x15/0x1b [ 152.949050][ T8236] should_fail_ex+0x265/0x280 [ 152.949087][ T8236] should_failslab+0x8c/0xb0 [ 152.949111][ T8236] kmem_cache_alloc_noprof+0x50/0x310 [ 152.949199][ T8236] ? skb_clone+0x151/0x1f0 [ 152.949243][ T8236] skb_clone+0x151/0x1f0 [ 152.949312][ T8236] nfnetlink_rcv+0x305/0x1690 [ 152.949343][ T8236] ? __kfree_skb+0x109/0x150 [ 152.949368][ T8236] ? nlmon_xmit+0x4f/0x60 [ 152.949507][ T8236] ? nlmon_xmit+0x4f/0x60 [ 152.949540][ T8236] ? dev_hard_start_xmit+0x39e/0x3d0 [ 152.949577][ T8236] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 152.949603][ T8236] ? __dev_queue_xmit+0x182/0x1fb0 [ 152.949665][ T8236] ? ref_tracker_free+0x37d/0x3e0 [ 152.949743][ T8236] netlink_unicast+0x59e/0x670 [ 152.949818][ T8236] netlink_sendmsg+0x58b/0x6b0 [ 152.949855][ T8236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.949889][ T8236] __sock_sendmsg+0x145/0x180 [ 152.949974][ T8236] ____sys_sendmsg+0x31e/0x4e0 [ 152.950014][ T8236] ___sys_sendmsg+0x17b/0x1d0 [ 152.950067][ T8236] __x64_sys_sendmsg+0xd4/0x160 [ 152.950180][ T8236] x64_sys_call+0x2999/0x2fb0 [ 152.950230][ T8236] do_syscall_64+0xd2/0x200 [ 152.950267][ T8236] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 152.950301][ T8236] ? clear_bhb_loop+0x40/0x90 [ 152.950344][ T8236] ? clear_bhb_loop+0x40/0x90 [ 152.950402][ T8236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.950429][ T8236] RIP: 0033:0x7f6d911ee969 [ 152.950449][ T8236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.950473][ T8236] RSP: 002b:00007f6d8f857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.950497][ T8236] RAX: ffffffffffffffda RBX: 00007f6d91415fa0 RCX: 00007f6d911ee969 [ 152.950513][ T8236] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 152.950608][ T8236] RBP: 00007f6d8f857090 R08: 0000000000000000 R09: 0000000000000000 [ 152.950625][ T8236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.950641][ T8236] R13: 0000000000000000 R14: 00007f6d91415fa0 R15: 00007ffeee9693a8 [ 152.950660][ T8236] [ 153.222447][ T8197] lo speed is unknown, defaulting to 1000 [ 153.238244][ T8236] lo speed is unknown, defaulting to 1000 [ 153.410801][ T8151] chnl_net:caif_netlink_parms(): no params data found [ 153.585341][ T8249] loop4: detected capacity change from 0 to 164 [ 153.607268][ T8151] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.614487][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.645102][ T8151] bridge_slave_0: entered allmulticast mode [ 153.674874][ T8249] ISOFS: unable to read i-node block [ 153.680233][ T8249] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 153.687832][ T8151] bridge_slave_0: entered promiscuous mode [ 153.696225][ T8151] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.703323][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.711236][ T8151] bridge_slave_1: entered allmulticast mode [ 153.717746][ T8151] bridge_slave_1: entered promiscuous mode [ 153.724855][ T8281] FAULT_INJECTION: forcing a failure. [ 153.724855][ T8281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.737978][ T8281] CPU: 1 UID: 0 PID: 8281 Comm: syz.1.1412 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 153.738011][ T8281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.738026][ T8281] Call Trace: [ 153.738034][ T8281] [ 153.738044][ T8281] __dump_stack+0x1d/0x30 [ 153.738119][ T8281] dump_stack_lvl+0xe8/0x140 [ 153.738155][ T8281] dump_stack+0x15/0x1b [ 153.738214][ T8281] should_fail_ex+0x265/0x280 [ 153.738245][ T8281] should_fail+0xb/0x20 [ 153.738270][ T8281] should_fail_usercopy+0x1a/0x20 [ 153.738311][ T8281] _copy_to_user+0x20/0xa0 [ 153.738344][ T8281] simple_read_from_buffer+0xb5/0x130 [ 153.738387][ T8281] proc_fail_nth_read+0x100/0x140 [ 153.738430][ T8281] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.738470][ T8281] vfs_read+0x1a0/0x6f0 [ 153.738575][ T8281] ? __rcu_read_unlock+0x4f/0x70 [ 153.738606][ T8281] ? __fget_files+0x184/0x1c0 [ 153.738649][ T8281] ksys_read+0xda/0x1a0 [ 153.738715][ T8281] __x64_sys_read+0x40/0x50 [ 153.738748][ T8281] x64_sys_call+0x2d77/0x2fb0 [ 153.738772][ T8281] do_syscall_64+0xd2/0x200 [ 153.738811][ T8281] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 153.738863][ T8281] ? clear_bhb_loop+0x40/0x90 [ 153.739040][ T8281] ? clear_bhb_loop+0x40/0x90 [ 153.739066][ T8281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.739094][ T8281] RIP: 0033:0x7f6d911ed37c [ 153.739114][ T8281] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 153.739191][ T8281] RSP: 002b:00007f6d8f857030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.739285][ T8281] RAX: ffffffffffffffda RBX: 00007f6d91415fa0 RCX: 00007f6d911ed37c [ 153.739302][ T8281] RDX: 000000000000000f RSI: 00007f6d8f8570a0 RDI: 0000000000000004 [ 153.739319][ T8281] RBP: 00007f6d8f857090 R08: 0000000000000000 R09: 0000000000000000 [ 153.739335][ T8281] R10: 0000200000000c80 R11: 0000000000000246 R12: 0000000000000002 [ 153.739348][ T8281] R13: 0000000000000000 R14: 00007f6d91415fa0 R15: 00007ffeee9693a8 [ 153.739367][ T8281] [ 154.029540][ T8151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.038800][ T8291] lo speed is unknown, defaulting to 1000 [ 154.072636][ T8151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.169631][ T8151] team0: Port device team_slave_0 added [ 154.179348][ T8151] team0: Port device team_slave_1 added [ 154.220985][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.228125][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.254137][ T8151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.280168][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.287327][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.313478][ T8151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.378892][ T8151] hsr_slave_0: entered promiscuous mode [ 154.385310][ T8151] hsr_slave_1: entered promiscuous mode [ 154.544337][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1415'. [ 154.548639][ T8151] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 154.570318][ T1042] vhci_hcd: vhci_device speed not set [ 154.676079][ T8151] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 154.685898][ T8151] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 154.695189][ T8151] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 154.764909][ T8151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.810100][ T8151] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.870313][ T5363] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.877484][ T5363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.905624][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.912780][ T5363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.939684][ T8151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.950152][ T8151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.975000][ T8361] loop5: detected capacity change from 0 to 1024 [ 154.989588][ T8361] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 154.999485][ T8361] EXT4-fs (loop5): group descriptors corrupted! [ 155.100713][ T8376] loop4: detected capacity change from 0 to 128 [ 155.170506][ T8376] random: crng reseeded on system resumption [ 155.312960][ T8374] loop5: detected capacity change from 0 to 164 [ 155.321633][ T8374] ISOFS: unable to read i-node block [ 155.327103][ T8374] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 155.363577][ T8151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.772019][ T8151] veth0_vlan: entered promiscuous mode [ 155.778966][ T8429] loop1: detected capacity change from 0 to 512 [ 155.794851][ T8429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.796273][ T8151] veth1_vlan: entered promiscuous mode [ 155.839387][ T8429] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1431: invalid indirect mapped block 4294967295 (level 1) [ 155.909353][ T8429] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1431: invalid indirect mapped block 4294967295 (level 1) [ 155.954618][ T8151] veth0_macvtap: entered promiscuous mode [ 155.967121][ T8151] veth1_macvtap: entered promiscuous mode [ 155.978600][ T8429] EXT4-fs (loop1): 2 truncates cleaned up [ 155.989223][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.004474][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.013174][ T8429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.030218][ T8151] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.039112][ T8151] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.047943][ T8151] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.056821][ T8151] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.083480][ T8447] FAULT_INJECTION: forcing a failure. [ 156.083480][ T8447] name failslab, interval 1, probability 0, space 0, times 0 [ 156.096271][ T8447] CPU: 1 UID: 0 PID: 8447 Comm: syz.5.1433 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 156.096321][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.096336][ T8447] Call Trace: [ 156.096344][ T8447] [ 156.096352][ T8447] __dump_stack+0x1d/0x30 [ 156.096382][ T8447] dump_stack_lvl+0xe8/0x140 [ 156.096409][ T8447] dump_stack+0x15/0x1b [ 156.096433][ T8447] should_fail_ex+0x265/0x280 [ 156.096561][ T8447] should_failslab+0x8c/0xb0 [ 156.096649][ T8447] kmem_cache_alloc_node_noprof+0x57/0x320 [ 156.096739][ T8447] ? __alloc_skb+0x101/0x320 [ 156.096778][ T8447] __alloc_skb+0x101/0x320 [ 156.096807][ T8447] netlink_alloc_large_skb+0xba/0xf0 [ 156.096829][ T8447] netlink_sendmsg+0x3cf/0x6b0 [ 156.096892][ T8447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.096928][ T8447] __sock_sendmsg+0x145/0x180 [ 156.096971][ T8447] ____sys_sendmsg+0x31e/0x4e0 [ 156.097026][ T8447] ___sys_sendmsg+0x17b/0x1d0 [ 156.097079][ T8447] __x64_sys_sendmsg+0xd4/0x160 [ 156.097142][ T8447] x64_sys_call+0x2999/0x2fb0 [ 156.097172][ T8447] do_syscall_64+0xd2/0x200 [ 156.097207][ T8447] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 156.097270][ T8447] ? clear_bhb_loop+0x40/0x90 [ 156.097324][ T8447] ? clear_bhb_loop+0x40/0x90 [ 156.097353][ T8447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.097379][ T8447] RIP: 0033:0x7f956ab8e969 [ 156.097394][ T8447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.097484][ T8447] RSP: 002b:00007f95691f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.097504][ T8447] RAX: ffffffffffffffda RBX: 00007f956adb5fa0 RCX: 00007f956ab8e969 [ 156.097517][ T8447] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 156.097529][ T8447] RBP: 00007f95691f7090 R08: 0000000000000000 R09: 0000000000000000 [ 156.097545][ T8447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.097558][ T8447] R13: 0000000000000000 R14: 00007f956adb5fa0 R15: 00007fff40061c98 [ 156.097577][ T8447] [ 156.495076][ T8435] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 156.659121][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.698810][ T8463] loop5: detected capacity change from 0 to 512 [ 156.842940][ T8473] loop1: detected capacity change from 0 to 512 [ 156.869769][ T8473] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.877371][ T8473] EXT4-fs: quotafile must be on filesystem root [ 156.959648][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a204c00: rx timeout, send abort [ 156.968675][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 156.968699][ T29] audit: type=1326 audit(1748483087.681:8888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8472 comm="syz.1.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d911ee969 code=0x7ffc0000 [ 157.030648][ T29] audit: type=1400 audit(1748483087.691:8890): avc: denied { read } for pid=2989 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 157.052802][ T29] audit: type=1400 audit(1748483087.691:8891): avc: denied { search } for pid=2989 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.074400][ T29] audit: type=1400 audit(1748483087.691:8892): avc: denied { search } for pid=2989 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.096353][ T29] audit: type=1400 audit(1748483087.691:8893): avc: denied { add_name } for pid=2989 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.117186][ T29] audit: type=1400 audit(1748483087.691:8894): avc: denied { create } for pid=2989 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 157.138144][ T29] audit: type=1400 audit(1748483087.691:8895): avc: denied { append open } for pid=2989 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 157.161398][ T29] audit: type=1400 audit(1748483087.691:8896): avc: denied { getattr } for pid=2989 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 157.184343][ T29] audit: type=1326 audit(1748483087.691:8889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8472 comm="syz.1.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d911ee969 code=0x7ffc0000 [ 157.208081][ T29] audit: type=1326 audit(1748483087.691:8897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8472 comm="syz.1.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d911ee969 code=0x7ffc0000 [ 157.457798][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a205c00: rx timeout, send abort [ 157.468181][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a204c00: abort rx timeout. Force session deactivation [ 157.577315][ T8498] loop6: detected capacity change from 0 to 512 [ 157.640338][ T8498] journal_path: Non-blockdev passed as './bus' [ 157.647948][ T8498] EXT4-fs: error: could not find journal device path [ 157.685845][ T8501] loop4: detected capacity change from 0 to 164 [ 157.693720][ T8501] ISOFS: unable to read i-node block [ 157.699200][ T8501] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 157.834530][ T8508] Unsupported ieee802154 address type: 0 [ 157.965618][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a205c00: abort rx timeout. Force session deactivation [ 157.980792][ T8504] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 158.284088][ T8522] vlan0: entered allmulticast mode [ 158.289340][ T8522] vlan1: entered allmulticast mode [ 158.294477][ T8522] veth0_vlan: entered allmulticast mode [ 158.379704][ T8528] Invalid ELF header magic: != ELF [ 158.612811][ T8543] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1458'. [ 158.627353][ T8543] bridge0: entered promiscuous mode [ 158.640261][ T8543] bridge0: port 3(macvlan2) entered blocking state [ 158.647401][ T8543] bridge0: port 3(macvlan2) entered disabled state [ 158.655381][ T8543] macvlan2: entered allmulticast mode [ 158.660868][ T8543] bridge0: entered allmulticast mode [ 158.690651][ T8543] macvlan2: left allmulticast mode [ 158.695925][ T8543] bridge0: left allmulticast mode [ 158.712702][ T8543] bridge0: left promiscuous mode [ 158.836652][ T8551] loop5: detected capacity change from 0 to 512 [ 158.853307][ T8551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.888513][ T8551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.903040][ T8551] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.936348][ T7698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.976020][ T8556] FAULT_INJECTION: forcing a failure. [ 158.976020][ T8556] name failslab, interval 1, probability 0, space 0, times 0 [ 158.988955][ T8556] CPU: 0 UID: 0 PID: 8556 Comm: syz.5.1461 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 158.988990][ T8556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.989007][ T8556] Call Trace: [ 158.989016][ T8556] [ 158.989027][ T8556] __dump_stack+0x1d/0x30 [ 158.989090][ T8556] dump_stack_lvl+0xe8/0x140 [ 158.989117][ T8556] dump_stack+0x15/0x1b [ 158.989203][ T8556] should_fail_ex+0x265/0x280 [ 158.989242][ T8556] should_failslab+0x8c/0xb0 [ 158.989268][ T8556] kmem_cache_alloc_node_noprof+0x57/0x320 [ 158.989302][ T8556] ? __alloc_skb+0x101/0x320 [ 158.989381][ T8556] __alloc_skb+0x101/0x320 [ 158.989412][ T8556] netlink_ack+0xfd/0x500 [ 158.989446][ T8556] netlink_rcv_skb+0x192/0x220 [ 158.989476][ T8556] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 158.989559][ T8556] xfrm_netlink_rcv+0x48/0x60 [ 158.989657][ T8556] netlink_unicast+0x59e/0x670 [ 158.989680][ T8556] netlink_sendmsg+0x58b/0x6b0 [ 158.989739][ T8556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.989804][ T8556] __sock_sendmsg+0x145/0x180 [ 158.989850][ T8556] ____sys_sendmsg+0x31e/0x4e0 [ 158.989890][ T8556] ___sys_sendmsg+0x17b/0x1d0 [ 158.989940][ T8556] __x64_sys_sendmsg+0xd4/0x160 [ 158.990078][ T8556] x64_sys_call+0x2999/0x2fb0 [ 158.990102][ T8556] do_syscall_64+0xd2/0x200 [ 158.990187][ T8556] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 158.990224][ T8556] ? clear_bhb_loop+0x40/0x90 [ 158.990247][ T8556] ? clear_bhb_loop+0x40/0x90 [ 158.990269][ T8556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.990352][ T8556] RIP: 0033:0x7f956ab8e969 [ 158.990369][ T8556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.990393][ T8556] RSP: 002b:00007f95691f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.990418][ T8556] RAX: ffffffffffffffda RBX: 00007f956adb5fa0 RCX: 00007f956ab8e969 [ 158.990435][ T8556] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000005 [ 158.990452][ T8556] RBP: 00007f95691f7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.990469][ T8556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.990541][ T8556] R13: 0000000000000000 R14: 00007f956adb5fa0 R15: 00007fff40061c98 [ 158.990570][ T8556] [ 159.265207][ T8560] Invalid ELF header magic: != ELF [ 159.401181][ T8564] loop5: detected capacity change from 0 to 512 [ 159.427354][ T8564] journal_path: Non-blockdev passed as './bus' [ 159.436151][ T8564] EXT4-fs: error: could not find journal device path [ 159.560601][ T8576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7950 sclass=netlink_route_socket pid=8576 comm=syz.1.1469 [ 160.467272][ T8635] 9pnet_fd: Insufficient options for proto=fd [ 160.510823][ T7710] syz_tun (unregistering): left allmulticast mode [ 160.532519][ T8641] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 160.612471][ T8652] loop5: detected capacity change from 0 to 1764 [ 160.653766][ T5352] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.787989][ T5352] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.847753][ T5352] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.977281][ T5352] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.994920][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1489'. [ 161.004288][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1489'. [ 161.104707][ T8692] loop6: detected capacity change from 0 to 1764 [ 161.161737][ T5352] bridge_slave_1: left allmulticast mode [ 161.167350][ T8692] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1490'. [ 161.167474][ T5352] bridge_slave_1: left promiscuous mode [ 161.182020][ T5352] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.241577][ T8702] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 161.256742][ T5352] bridge_slave_0: left allmulticast mode [ 161.262430][ T5352] bridge_slave_0: left promiscuous mode [ 161.268262][ T5352] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.448059][ T5352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.463169][ T5352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.477525][ T5352] bond0 (unregistering): Released all slaves [ 161.504304][ T8692] 0ªX¹¦À: renamed from caif0 [ 161.512292][ T8692] 0ªX¹¦À: entered allmulticast mode [ 161.517627][ T8692] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 161.565554][ T5352] tipc: Left network mode [ 161.592038][ T8677] lo speed is unknown, defaulting to 1000 [ 161.617159][ T5352] hsr_slave_0: left promiscuous mode [ 161.628422][ T5352] hsr_slave_1: left promiscuous mode [ 161.639021][ T8706] loop4: detected capacity change from 0 to 164 [ 161.651193][ T8706] ISOFS: unable to read i-node block [ 161.656694][ T8706] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 161.695707][ T5352] veth1_macvtap: left promiscuous mode [ 161.701308][ T5352] veth0_macvtap: left promiscuous mode [ 161.717285][ T5352] veth1_vlan: left promiscuous mode [ 161.722618][ T5352] veth0_vlan: left promiscuous mode [ 161.972552][ T5352] team0 (unregistering): Port device team_slave_1 removed [ 161.985913][ T5352] team0 (unregistering): Port device team_slave_0 removed [ 161.998218][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 161.998312][ T29] audit: type=1326 audit(1748483092.730:9134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 162.033422][ T29] audit: type=1326 audit(1748483092.730:9135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 162.057006][ T29] audit: type=1326 audit(1748483092.770:9136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 162.080962][ T29] audit: type=1326 audit(1748483092.770:9137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 162.104820][ T29] audit: type=1326 audit(1748483092.770:9138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 162.128250][ T29] audit: type=1326 audit(1748483092.770:9139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 162.151801][ T29] audit: type=1326 audit(1748483092.770:9140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 162.176023][ T29] audit: type=1326 audit(1748483092.770:9141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 162.199387][ T29] audit: type=1326 audit(1748483092.770:9142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 162.223125][ T29] audit: type=1326 audit(1748483092.770:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 162.270845][ T8725] bridge_slave_0: left allmulticast mode [ 162.276600][ T8725] bridge_slave_0: left promiscuous mode [ 162.282445][ T8725] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.299077][ T8725] bridge_slave_1: left allmulticast mode [ 162.305046][ T8725] bridge_slave_1: left promiscuous mode [ 162.311258][ T8725] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.322960][ T8725] bond0: (slave bond_slave_0): Releasing backup interface [ 162.333540][ T8725] bond0: (slave bond_slave_1): Releasing backup interface [ 162.345384][ T8725] team0: Port device team_slave_0 removed [ 162.354358][ T8725] team0: Port device team_slave_1 removed [ 162.361391][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.368918][ T8725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.377998][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.385554][ T8725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.406542][ T3378] lo speed is unknown, defaulting to 1000 [ 162.412390][ T3378] infiniband syz0: ib_query_port failed (-19) [ 162.473764][ T8677] chnl_net:caif_netlink_parms(): no params data found [ 162.521692][ T8758] 9pnet_fd: Insufficient options for proto=fd [ 162.708068][ T8677] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.715235][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.723597][ T8677] bridge_slave_0: entered allmulticast mode [ 162.730598][ T8677] bridge_slave_0: entered promiscuous mode [ 162.743874][ T8677] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.749943][ T5352] IPVS: stop unused estimator thread 0... [ 162.751066][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.764595][ T8677] bridge_slave_1: entered allmulticast mode [ 162.771344][ T8677] bridge_slave_1: entered promiscuous mode [ 162.818999][ T8677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.828953][ T8790] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 162.841454][ T8677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.885501][ T8677] team0: Port device team_slave_0 added [ 162.899614][ T8677] team0: Port device team_slave_1 added [ 162.935879][ T8677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.943063][ T8677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.969207][ T8677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.988069][ T8677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.995145][ T8677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.021168][ T8677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.076363][ T8677] hsr_slave_0: entered promiscuous mode [ 163.082781][ T8677] hsr_slave_1: entered promiscuous mode [ 163.089292][ T8677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.096960][ T8677] Cannot create hsr debugfs directory [ 163.186193][ T8677] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 163.195961][ T8677] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 163.205758][ T8677] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 163.215729][ T8677] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 163.234395][ T8677] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.241613][ T8677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.248984][ T8677] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.256172][ T8677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.294877][ T8677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.307304][ T5365] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.315722][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.331857][ T8677] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.344537][ T5363] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.351685][ T5363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.373621][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.380768][ T5363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.516335][ T8677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.584377][ T8863] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1514'. [ 163.601739][ T8865] 9pnet_fd: Insufficient options for proto=fd [ 163.668066][ T8874] : renamed from veth1_to_batadv (while UP) [ 163.750578][ T8889] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 163.791687][ T8677] veth0_vlan: entered promiscuous mode [ 163.814282][ T8677] veth1_vlan: entered promiscuous mode [ 163.842419][ T23] IPVS: starting estimator thread 0... [ 163.850836][ T8895] lo speed is unknown, defaulting to 1000 [ 163.870491][ T8895] lo speed is unknown, defaulting to 1000 [ 163.885397][ T8677] veth0_macvtap: entered promiscuous mode [ 163.892865][ T8895] lo speed is unknown, defaulting to 1000 [ 163.901136][ T8677] veth1_macvtap: entered promiscuous mode [ 163.921712][ T8895] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 163.936594][ T8897] IPVS: using max 2304 ests per chain, 115200 per kthread [ 163.942535][ T8677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.981527][ T8895] lo speed is unknown, defaulting to 1000 [ 163.989887][ T8677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.008816][ T8677] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.017631][ T8677] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.026811][ T8677] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.035570][ T8677] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.060527][ T8895] lo speed is unknown, defaulting to 1000 [ 164.081851][ T8895] lo speed is unknown, defaulting to 1000 [ 164.109178][ T8895] lo speed is unknown, defaulting to 1000 [ 164.136542][ T8895] lo speed is unknown, defaulting to 1000 [ 164.154429][ T8923] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1524'. [ 164.191786][ T8928] 9pnet_fd: Insufficient options for proto=fd [ 164.294777][ T8938] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 164.322385][ T8942] loop4: detected capacity change from 0 to 128 [ 164.401508][ T8942] random: crng reseeded on system resumption [ 164.638404][ T8970] loop4: detected capacity change from 0 to 512 [ 164.645974][ T8972] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1537'. [ 164.700990][ T8970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.747694][ T8970] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.781330][ T8980] loop6: detected capacity change from 0 to 512 [ 164.856217][ T8980] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.885690][ T8993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1539'. [ 164.918355][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.936359][ T8984] infiniband syz!: set active [ 164.941153][ T8984] infiniband syz!: added team_slave_0 [ 164.958745][ T8980] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.975036][ T8984] RDS/IB: syz!: added [ 164.985810][ T8984] smc: adding ib device syz! with port count 1 [ 164.993001][ T8984] smc: ib device syz! port 1 has pnetid [ 165.045960][ T8151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.106715][ T9005] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 165.573564][ T9007] lo speed is unknown, defaulting to 1000 [ 166.198940][ T9058] loop7: detected capacity change from 0 to 2048 [ 166.253547][ T9058] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.337231][ T9072] netlink: 'syz.6.1558': attribute type 1 has an invalid length. [ 166.345074][ T9072] netlink: 'syz.6.1558': attribute type 2 has an invalid length. [ 166.354287][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1558'. [ 166.389085][ T9058] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1553: bg 0: block 234: padding at end of block bitmap is not set [ 166.422089][ T9058] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 540 with error 28 [ 166.434700][ T9058] EXT4-fs (loop7): This should not happen!! Data will be lost [ 166.434700][ T9058] [ 166.444702][ T9058] EXT4-fs (loop7): Total free blocks count 0 [ 166.451005][ T9058] EXT4-fs (loop7): Free/Dirty block details [ 166.457150][ T9058] EXT4-fs (loop7): free_blocks=0 [ 166.462222][ T9058] EXT4-fs (loop7): dirty_blocks=544 [ 166.467498][ T9058] EXT4-fs (loop7): Block reservation details [ 166.473686][ T9058] EXT4-fs (loop7): i_reserved_data_blocks=34 [ 166.509369][ T9078] veth3: entered promiscuous mode [ 166.514513][ T9078] veth3: entered allmulticast mode [ 166.607140][ T8677] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.712023][ T9085] 9p: Unknown access argument 18446744073709551615: -34 [ 167.276206][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 167.276223][ T29] audit: type=1326 audit(1748483098.028:9395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 167.306136][ T29] audit: type=1326 audit(1748483098.028:9396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 167.329747][ T29] audit: type=1326 audit(1748483098.028:9397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 167.400914][ T29] audit: type=1326 audit(1748483098.028:9398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 167.424554][ T29] audit: type=1326 audit(1748483098.028:9399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 167.448155][ T29] audit: type=1326 audit(1748483098.028:9400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 167.471462][ T29] audit: type=1326 audit(1748483098.028:9401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 167.495113][ T29] audit: type=1326 audit(1748483098.028:9402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 167.506378][ T9129] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1571'. [ 167.518770][ T29] audit: type=1326 audit(1748483098.028:9403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 167.518810][ T29] audit: type=1326 audit(1748483098.028:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 167.530599][ T9129] 0ªX¹¦À: renamed from caif0 [ 167.639261][ T9136] FAULT_INJECTION: forcing a failure. [ 167.639261][ T9136] name failslab, interval 1, probability 0, space 0, times 0 [ 167.641625][ T9138] 9pnet_fd: Insufficient options for proto=fd [ 167.651958][ T9136] CPU: 0 UID: 0 PID: 9136 Comm: syz.4.1573 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 167.652048][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.652066][ T9136] Call Trace: [ 167.652077][ T9136] [ 167.652087][ T9136] __dump_stack+0x1d/0x30 [ 167.652118][ T9136] dump_stack_lvl+0xe8/0x140 [ 167.652147][ T9136] dump_stack+0x15/0x1b [ 167.652273][ T9136] should_fail_ex+0x265/0x280 [ 167.652311][ T9136] should_failslab+0x8c/0xb0 [ 167.652338][ T9136] __kvmalloc_node_noprof+0x126/0x4f0 [ 167.652372][ T9136] ? bpf_test_run_xdp_live+0x114/0xfe0 [ 167.652417][ T9136] bpf_test_run_xdp_live+0x114/0xfe0 [ 167.652449][ T9136] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 167.652521][ T9136] ? cpus_read_unlock+0x6e/0xc0 [ 167.652550][ T9136] ? __static_call_update+0x37c/0x3b0 [ 167.652588][ T9136] ? 0xffffffffa0205540 [ 167.652659][ T9136] ? synchronize_rcu+0x45/0x320 [ 167.652779][ T9136] ? 0xffffffffa0205540 [ 167.652797][ T9136] ? 0xffffffffa0205540 [ 167.652825][ T9136] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 167.652937][ T9136] ? 0xffffffffa02019f8 [ 167.652975][ T9136] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 167.653026][ T9136] bpf_prog_test_run_xdp+0x4f5/0x910 [ 167.653063][ T9136] ? __rcu_read_unlock+0x4f/0x70 [ 167.653133][ T9136] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 167.653166][ T9136] bpf_prog_test_run+0x22a/0x390 [ 167.653195][ T9136] __sys_bpf+0x3dc/0x790 [ 167.653341][ T9136] __x64_sys_bpf+0x41/0x50 [ 167.653380][ T9136] x64_sys_call+0x2478/0x2fb0 [ 167.653472][ T9136] do_syscall_64+0xd2/0x200 [ 167.653515][ T9136] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 167.653610][ T9136] ? clear_bhb_loop+0x40/0x90 [ 167.653681][ T9136] ? clear_bhb_loop+0x40/0x90 [ 167.653712][ T9136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.653741][ T9136] RIP: 0033:0x7f1af73be969 [ 167.653761][ T9136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.653807][ T9136] RSP: 002b:00007f1af5a27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 167.653833][ T9136] RAX: ffffffffffffffda RBX: 00007f1af75e5fa0 RCX: 00007f1af73be969 [ 167.653850][ T9136] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 167.653867][ T9136] RBP: 00007f1af5a27090 R08: 0000000000000000 R09: 0000000000000000 [ 167.653883][ T9136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.653900][ T9136] R13: 0000000000000000 R14: 00007f1af75e5fa0 R15: 00007fffa7f94b08 [ 167.653926][ T9136] [ 167.742046][ T9134] loop5: detected capacity change from 0 to 512 [ 167.978561][ T9134] journal_path: Non-blockdev passed as './bus' [ 167.985819][ T9134] EXT4-fs: error: could not find journal device path [ 168.090790][ T9129] 0ªX¹¦À: entered allmulticast mode [ 168.096127][ T9129] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 168.458636][ T9163] loop4: detected capacity change from 0 to 512 [ 168.549694][ T9149] lo speed is unknown, defaulting to 1000 [ 169.255606][ T9183] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.319477][ T9183] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.474422][ T9183] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.574145][ T9202] 9pnet_fd: Insufficient options for proto=fd [ 169.593327][ T9183] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.632236][ T9198] loop4: detected capacity change from 0 to 512 [ 169.656574][ T9198] journal_path: Non-blockdev passed as './bus' [ 169.663640][ T9198] EXT4-fs: error: could not find journal device path [ 169.718275][ T9183] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.743473][ T9183] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.769082][ T9183] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.792818][ T9183] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.900462][ T9213] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 170.987105][ T9229] loop5: detected capacity change from 0 to 128 [ 171.032255][ T9229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9229 comm=syz.5.1609 [ 171.140722][ T9237] lo speed is unknown, defaulting to 1000 [ 171.382995][ T9249] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 171.440207][ T9255] loop4: detected capacity change from 0 to 128 [ 171.485452][ T9255] random: crng reseeded on system resumption [ 171.633157][ T9264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1621'. [ 171.647167][ T9262] loop5: detected capacity change from 0 to 512 [ 171.657809][ T9262] journal_path: Non-blockdev passed as './bus' [ 171.669671][ T9262] EXT4-fs: error: could not find journal device path [ 171.685133][ T9257] loop7: detected capacity change from 0 to 164 [ 171.696020][ T9257] ISOFS: unable to read i-node block [ 171.701502][ T9257] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 172.140533][ T9279] 9pnet_fd: Insufficient options for proto=fd [ 172.165442][ T9269] lo speed is unknown, defaulting to 1000 [ 172.181116][ T9281] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 172.579124][ T9290] loop4: detected capacity change from 0 to 128 [ 172.612197][ T9290] random: crng reseeded on system resumption [ 172.728787][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 172.728807][ T29] audit: type=1326 audit(1748483103.505:9762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9289 comm="syz.4.1632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1af73be969 code=0x0 [ 172.832314][ T29] audit: type=1400 audit(1748483103.606:9763): avc: denied { getopt } for pid=9292 comm="syz.5.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 172.991858][ T29] audit: type=1400 audit(1748483103.666:9764): avc: denied { ioctl } for pid=9292 comm="syz.5.1633" path="socket:[26799]" dev="sockfs" ino=26799 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.152827][ T29] audit: type=1326 audit(1748483103.917:9765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.6.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4993ade969 code=0x7ffc0000 [ 173.176355][ T29] audit: type=1326 audit(1748483103.917:9766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.6.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f4993ade969 code=0x7ffc0000 [ 173.199725][ T29] audit: type=1326 audit(1748483103.917:9767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.6.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4993ade969 code=0x7ffc0000 [ 173.518170][ T9311] geneve2: entered promiscuous mode [ 173.523503][ T9311] geneve2: entered allmulticast mode [ 173.557341][ T29] audit: type=1400 audit(1748483104.328:9768): avc: denied { ioctl } for pid=9310 comm="syz.4.1638" path="socket:[26829]" dev="sockfs" ino=26829 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 173.617848][ T9317] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 173.651250][ T9318] lo speed is unknown, defaulting to 1000 [ 173.837731][ T9314] loop7: detected capacity change from 0 to 164 [ 173.846262][ T9314] ISOFS: unable to read i-node block [ 173.851645][ T9314] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 173.918536][ T29] audit: type=1326 audit(1748483104.609:9769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9313 comm="syz.7.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557ce6e969 code=0x7ffc0000 [ 173.942063][ T29] audit: type=1326 audit(1748483104.609:9770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9313 comm="syz.7.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557ce6e969 code=0x7ffc0000 [ 173.965598][ T29] audit: type=1326 audit(1748483104.609:9771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9313 comm="syz.7.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557ce6e969 code=0x7ffc0000 [ 174.093200][ T9326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.113788][ T9326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.211338][ T9331] loop5: detected capacity change from 0 to 128 [ 174.220613][ T9] IPVS: starting estimator thread 0... [ 174.319623][ T9331] random: crng reseeded on system resumption [ 174.351186][ T9332] IPVS: using max 1824 ests per chain, 91200 per kthread [ 174.450855][ T9336] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1645'. [ 174.852545][ T9362] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1657'. [ 174.864105][ T9363] loop5: detected capacity change from 0 to 128 [ 174.898567][ T9363] random: crng reseeded on system resumption [ 174.936367][ T9366] loop4: detected capacity change from 0 to 512 [ 175.005446][ T9366] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 175.013447][ T9366] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 175.022921][ T9357] lo speed is unknown, defaulting to 1000 [ 175.030802][ T9366] System zones: 0-1, 15-15, 18-18, 34-34 [ 175.040025][ T9366] EXT4-fs (loop4): orphan cleanup on readonly fs [ 175.053203][ T9366] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 175.067833][ T9366] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 175.092897][ T9376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.101753][ T9376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.113928][ T9366] EXT4-fs (loop4): 1 truncate cleaned up [ 175.120036][ T9366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.178095][ T9382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1664'. [ 175.500181][ T9399] loop6: detected capacity change from 0 to 128 [ 175.514971][ T9366] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 175.526704][ T9399] random: crng reseeded on system resumption [ 175.681762][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.839786][ T9419] FAULT_INJECTION: forcing a failure. [ 175.839786][ T9419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.852923][ T9419] CPU: 1 UID: 0 PID: 9419 Comm: syz.4.1680 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 175.852960][ T9419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.852974][ T9419] Call Trace: [ 175.852980][ T9419] [ 175.853067][ T9419] __dump_stack+0x1d/0x30 [ 175.853095][ T9419] dump_stack_lvl+0xe8/0x140 [ 175.853123][ T9419] dump_stack+0x15/0x1b [ 175.853146][ T9419] should_fail_ex+0x265/0x280 [ 175.853187][ T9419] should_fail+0xb/0x20 [ 175.853217][ T9419] should_fail_usercopy+0x1a/0x20 [ 175.853332][ T9419] _copy_to_user+0x20/0xa0 [ 175.853438][ T9419] simple_read_from_buffer+0xb5/0x130 [ 175.853601][ T9419] proc_fail_nth_read+0x100/0x140 [ 175.853686][ T9419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.853728][ T9419] vfs_read+0x1a0/0x6f0 [ 175.853759][ T9419] ? __rcu_read_unlock+0x4f/0x70 [ 175.853788][ T9419] ? __fget_files+0x184/0x1c0 [ 175.853850][ T9419] ? finish_task_switch+0xad/0x2b0 [ 175.853883][ T9419] ksys_read+0xda/0x1a0 [ 175.854044][ T9419] __x64_sys_read+0x40/0x50 [ 175.854083][ T9419] x64_sys_call+0x2d77/0x2fb0 [ 175.854165][ T9419] do_syscall_64+0xd2/0x200 [ 175.854205][ T9419] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 175.854238][ T9419] ? clear_bhb_loop+0x40/0x90 [ 175.854324][ T9419] ? clear_bhb_loop+0x40/0x90 [ 175.854354][ T9419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.854449][ T9419] RIP: 0033:0x7f1af73bd37c [ 175.854469][ T9419] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 175.854562][ T9419] RSP: 002b:00007f1af5a27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.854587][ T9419] RAX: ffffffffffffffda RBX: 00007f1af75e5fa0 RCX: 00007f1af73bd37c [ 175.854599][ T9419] RDX: 000000000000000f RSI: 00007f1af5a270a0 RDI: 0000000000000006 [ 175.854624][ T9419] RBP: 00007f1af5a27090 R08: 0000000000000000 R09: 0000000000000000 [ 175.854640][ T9419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.854656][ T9419] R13: 0000000000000000 R14: 00007f1af75e5fa0 R15: 00007fffa7f94b08 [ 175.854681][ T9419] [ 176.354911][ T9428] loop5: detected capacity change from 0 to 164 [ 176.363810][ T9428] ISOFS: unable to read i-node block [ 176.369255][ T9428] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 176.447315][ T9436] loop6: detected capacity change from 0 to 2048 [ 176.464400][ T9436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.482756][ T9436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.558246][ T9441] loop7: detected capacity change from 0 to 128 [ 176.578159][ T9441] random: crng reseeded on system resumption [ 177.137616][ T9477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1702'. [ 177.216036][ T9481] loop6: detected capacity change from 0 to 128 [ 177.584575][ T9500] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1710'. [ 177.705470][ T9507] loop7: detected capacity change from 0 to 2048 [ 177.735872][ T9507] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.748729][ T9507] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.899859][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 177.899874][ T29] audit: type=1326 audit(1748483108.680:10199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.5.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 177.934798][ T9508] loop5: detected capacity change from 0 to 164 [ 177.946174][ T9508] ISOFS: unable to read i-node block [ 177.952139][ T9508] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 177.980659][ T29] audit: type=1326 audit(1748483108.711:10200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.5.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 178.004324][ T29] audit: type=1326 audit(1748483108.711:10201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.5.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 178.027904][ T29] audit: type=1326 audit(1748483108.721:10202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.5.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 178.051681][ T29] audit: type=1326 audit(1748483108.721:10203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.5.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 178.075494][ T29] audit: type=1326 audit(1748483108.721:10204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.5.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 178.099449][ T29] audit: type=1326 audit(1748483108.721:10205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.5.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 178.123167][ T29] audit: type=1326 audit(1748483108.721:10206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.5.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f956ab8e969 code=0x7ffc0000 [ 178.146979][ T29] audit: type=1326 audit(1748483108.721:10207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.5.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f956ab8e9a3 code=0x7ffc0000 [ 178.170330][ T29] audit: type=1326 audit(1748483108.721:10208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.5.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f956ab8d41f code=0x7ffc0000 [ 178.404378][ T9529] wireguard0: entered promiscuous mode [ 178.410016][ T9529] wireguard0: entered allmulticast mode [ 178.446199][ T9532] syz_tun: entered allmulticast mode [ 178.471076][ T9533] lo speed is unknown, defaulting to 1000 [ 178.497607][ T9531] syz_tun: left allmulticast mode [ 178.530333][ T9537] loop7: detected capacity change from 0 to 512 [ 178.546772][ T9537] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 178.554924][ T9537] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 178.572993][ T9537] System zones: 0-1, 15-15, 18-18, 34-34 [ 178.579736][ T9537] EXT4-fs (loop7): orphan cleanup on readonly fs [ 178.593694][ T9537] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 178.608466][ T9537] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 178.671717][ T9546] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1727'. [ 178.682170][ T9537] EXT4-fs (loop7): 1 truncate cleaned up [ 178.688233][ T9537] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.787690][ T8677] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.401888][ T9573] FAULT_INJECTION: forcing a failure. [ 179.401888][ T9573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.415042][ T9573] CPU: 0 UID: 0 PID: 9573 Comm: syz.5.1738 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 179.415081][ T9573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.415166][ T9573] Call Trace: [ 179.415174][ T9573] [ 179.415182][ T9573] __dump_stack+0x1d/0x30 [ 179.415204][ T9573] dump_stack_lvl+0xe8/0x140 [ 179.415224][ T9573] dump_stack+0x15/0x1b [ 179.415303][ T9573] should_fail_ex+0x265/0x280 [ 179.415342][ T9573] should_fail+0xb/0x20 [ 179.415368][ T9573] should_fail_usercopy+0x1a/0x20 [ 179.415400][ T9573] _copy_to_user+0x20/0xa0 [ 179.415459][ T9573] simple_read_from_buffer+0xb5/0x130 [ 179.415506][ T9573] proc_fail_nth_read+0x100/0x140 [ 179.415546][ T9573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.415622][ T9573] vfs_read+0x1a0/0x6f0 [ 179.415723][ T9573] ? __rcu_read_unlock+0x4f/0x70 [ 179.415753][ T9573] ? __fget_files+0x184/0x1c0 [ 179.415800][ T9573] ksys_read+0xda/0x1a0 [ 179.415939][ T9573] __x64_sys_read+0x40/0x50 [ 179.415978][ T9573] x64_sys_call+0x2d77/0x2fb0 [ 179.416002][ T9573] do_syscall_64+0xd2/0x200 [ 179.416074][ T9573] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 179.416101][ T9573] ? clear_bhb_loop+0x40/0x90 [ 179.416122][ T9573] ? clear_bhb_loop+0x40/0x90 [ 179.416159][ T9573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.416188][ T9573] RIP: 0033:0x7f956ab8d37c [ 179.416207][ T9573] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 179.416231][ T9573] RSP: 002b:00007f95691f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.416319][ T9573] RAX: ffffffffffffffda RBX: 00007f956adb5fa0 RCX: 00007f956ab8d37c [ 179.416332][ T9573] RDX: 000000000000000f RSI: 00007f95691f70a0 RDI: 0000000000000006 [ 179.416349][ T9573] RBP: 00007f95691f7090 R08: 0000000000000000 R09: 0000000000000000 [ 179.416365][ T9573] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 179.416381][ T9573] R13: 0000000000000000 R14: 00007f956adb5fa0 R15: 00007fff40061c98 [ 179.416416][ T9573] [ 179.905936][ T9593] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1747'. [ 179.958202][ T9595] lo speed is unknown, defaulting to 1000 [ 180.072288][ T9578] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 180.840878][ T9623] ip6erspan0: entered promiscuous mode [ 181.233275][ T9629] FAULT_INJECTION: forcing a failure. [ 181.233275][ T9629] name failslab, interval 1, probability 0, space 0, times 0 [ 181.246050][ T9629] CPU: 0 UID: 0 PID: 9629 Comm: syz.5.1757 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 181.246088][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.246137][ T9629] Call Trace: [ 181.246197][ T9629] [ 181.246205][ T9629] __dump_stack+0x1d/0x30 [ 181.246233][ T9629] dump_stack_lvl+0xe8/0x140 [ 181.246258][ T9629] dump_stack+0x15/0x1b [ 181.246281][ T9629] should_fail_ex+0x265/0x280 [ 181.246320][ T9629] should_failslab+0x8c/0xb0 [ 181.246376][ T9629] kmem_cache_alloc_noprof+0x50/0x310 [ 181.246399][ T9629] ? __anon_vma_prepare+0xcd/0x2f0 [ 181.246432][ T9629] __anon_vma_prepare+0xcd/0x2f0 [ 181.246505][ T9629] do_wp_page+0x181c/0x23d0 [ 181.246554][ T9629] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 181.246598][ T9629] ? __rcu_read_lock+0x37/0x50 [ 181.246623][ T9629] handle_mm_fault+0x77d/0x2c00 [ 181.246656][ T9629] ? mas_walk+0xf2/0x120 [ 181.246722][ T9629] do_user_addr_fault+0x636/0x1090 [ 181.246770][ T9629] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 181.246812][ T9629] exc_page_fault+0x62/0xa0 [ 181.246854][ T9629] asm_exc_page_fault+0x26/0x30 [ 181.246880][ T9629] RIP: 0033:0x7f956aa50cc3 [ 181.246952][ T9629] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 181.246974][ T9629] RSP: 002b:00007f95691b44a0 EFLAGS: 00010202 [ 181.246995][ T9629] RAX: 0000000000000400 RBX: 00007f95691b4540 RCX: 00007f9560d95000 [ 181.247011][ T9629] RDX: 00007f95691b46e0 RSI: 0000000000000019 RDI: 00007f95691b45e0 [ 181.247027][ T9629] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000b4 [ 181.247041][ T9629] R10: 00000000000000c4 R11: 00007f95691b4540 R12: 0000000000000001 [ 181.247109][ T9629] R13: 00007f956ac2bfc0 R14: 0000000000000020 R15: 00007f95691b45e0 [ 181.247134][ T9629] [ 181.431137][ T9629] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 181.445669][ T9629] loop5: detected capacity change from 0 to 512 [ 181.460384][ T9629] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 181.808179][ T9635] loop6: detected capacity change from 0 to 128 [ 181.950999][ T9635] random: crng reseeded on system resumption [ 182.273077][ T9649] lo speed is unknown, defaulting to 1000 [ 182.504842][ T9629] EXT4-fs (loop5): 1 truncate cleaned up [ 182.511398][ T9629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.244466][ T7698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.350199][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 183.350216][ T29] audit: type=1400 audit(1748483114.155:10464): avc: denied { write } for pid=9671 comm="syz.5.1774" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 183.386523][ T9672] program syz.5.1774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.556372][ T29] audit: type=1326 audit(1748483114.346:10465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 183.580078][ T29] audit: type=1326 audit(1748483114.346:10466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 183.603703][ T29] audit: type=1326 audit(1748483114.346:10467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 183.627307][ T29] audit: type=1326 audit(1748483114.346:10468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 183.650952][ T29] audit: type=1326 audit(1748483114.346:10469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 183.674500][ T29] audit: type=1326 audit(1748483114.346:10470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 183.698211][ T29] audit: type=1326 audit(1748483114.346:10471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 183.721645][ T29] audit: type=1326 audit(1748483114.346:10472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 183.745308][ T29] audit: type=1326 audit(1748483114.346:10473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 183.795371][ T9692] loop5: detected capacity change from 0 to 128 [ 183.856275][ T9692] random: crng reseeded on system resumption [ 183.871042][ T9695] lo speed is unknown, defaulting to 1000 [ 184.066874][ T9708] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=770 sclass=netlink_tcpdiag_socket pid=9708 comm=syz.7.1786 [ 184.082909][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1786'. [ 184.106419][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1786'. [ 184.282848][ T9714] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1786'. [ 184.296925][ T9711] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1786'. [ 185.266807][ T9737] FAULT_INJECTION: forcing a failure. [ 185.266807][ T9737] name failslab, interval 1, probability 0, space 0, times 0 [ 185.272848][ T9740] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 185.279506][ T9737] CPU: 0 UID: 0 PID: 9737 Comm: syz.4.1794 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 185.279547][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.279564][ T9737] Call Trace: [ 185.279574][ T9737] [ 185.279584][ T9737] __dump_stack+0x1d/0x30 [ 185.279614][ T9737] dump_stack_lvl+0xe8/0x140 [ 185.279641][ T9737] dump_stack+0x15/0x1b [ 185.279664][ T9737] should_fail_ex+0x265/0x280 [ 185.279704][ T9737] should_failslab+0x8c/0xb0 [ 185.279731][ T9737] kmem_cache_alloc_noprof+0x50/0x310 [ 185.279762][ T9737] ? mas_alloc_nodes+0x265/0x520 [ 185.279807][ T9737] mas_alloc_nodes+0x265/0x520 [ 185.279850][ T9737] mas_preallocate+0x456/0x680 [ 185.279894][ T9737] __split_vma+0x239/0x610 [ 185.279926][ T9737] ? mas_find+0x4ea/0x610 [ 185.279973][ T9737] vms_gather_munmap_vmas+0x2a5/0x7a0 [ 185.280006][ T9737] mmap_region+0x44f/0x1470 [ 185.280036][ T9737] ? mntput+0x4b/0x80 [ 185.280066][ T9737] ? terminate_walk+0x27f/0x2a0 [ 185.280111][ T9737] do_mmap+0x9d0/0xc10 [ 185.280148][ T9737] vm_mmap_pgoff+0x17a/0x2e0 [ 185.280176][ T9737] ksys_mmap_pgoff+0xc2/0x310 [ 185.280207][ T9737] ? __x64_sys_mmap+0x49/0x70 [ 185.280239][ T9737] x64_sys_call+0x1602/0x2fb0 [ 185.280269][ T9737] do_syscall_64+0xd2/0x200 [ 185.280308][ T9737] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 185.280345][ T9737] ? clear_bhb_loop+0x40/0x90 [ 185.280372][ T9737] ? clear_bhb_loop+0x40/0x90 [ 185.280401][ T9737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.280430][ T9737] RIP: 0033:0x7f1af73be969 [ 185.280449][ T9737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.280474][ T9737] RSP: 002b:00007f1af5a27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 185.280500][ T9737] RAX: ffffffffffffffda RBX: 00007f1af75e5fa0 RCX: 00007f1af73be969 [ 185.280516][ T9737] RDX: 0000000000000009 RSI: 0000000000600000 RDI: 00002000009fd000 [ 185.280533][ T9737] RBP: 00007f1af5a27090 R08: ffffffffffffffff R09: 0000000000000000 [ 185.280549][ T9737] R10: 0000000000006031 R11: 0000000000000246 R12: 0000000000000001 [ 185.280566][ T9737] R13: 0000000000000000 R14: 00007f1af75e5fa0 R15: 00007fffa7f94b08 [ 185.280590][ T9737] [ 185.608950][ T9748] loop4: detected capacity change from 0 to 2048 [ 185.663763][ T9748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.772690][ T9759] lo speed is unknown, defaulting to 1000 [ 185.826563][ T9748] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1801: bg 0: block 234: padding at end of block bitmap is not set [ 185.860297][ T9748] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 444 with error 117 [ 185.872973][ T9748] EXT4-fs (loop4): This should not happen!! Data will be lost [ 185.872973][ T9748] [ 185.925795][ T9773] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 186.009739][ T9779] loop6: detected capacity change from 0 to 128 [ 186.055514][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.650165][ T9794] loop7: detected capacity change from 0 to 512 [ 186.671435][ T9794] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 186.686044][ T9794] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 186.694333][ T9794] EXT4-fs (loop7): orphan cleanup on readonly fs [ 186.701540][ T9794] EXT4-fs (loop7): 1 truncate cleaned up [ 186.708052][ T9794] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 187.135838][ T9811] Invalid ELF header magic: != ELF [ 187.331642][ T9818] loop5: detected capacity change from 0 to 512 [ 187.415841][ T9821] lo speed is unknown, defaulting to 1000 [ 187.423133][ T9823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.452307][ T9823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.497246][ T9818] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 187.505240][ T9818] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 187.554696][ T9818] System zones: 0-1, 15-15, 18-18, 34-34 [ 187.583559][ T9818] EXT4-fs (loop5): orphan cleanup on readonly fs [ 187.607049][ T9818] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 187.621856][ T9818] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 187.680201][ T9818] EXT4-fs (loop5): 1 truncate cleaned up [ 187.688421][ T9818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.715368][ T9815] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 187.829994][ T7698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.946218][ T9842] random: crng reseeded on system resumption [ 188.062543][ T9846] Invalid ELF header magic: != ELF [ 188.085528][ T8677] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.121027][ T9855] loop5: detected capacity change from 0 to 128 [ 188.160334][ T9862] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 188.226598][ T9870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.235504][ T9870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.360235][ T9872] lo speed is unknown, defaulting to 1000 [ 188.488781][ T9881] netlink: 'syz.5.1848': attribute type 4 has an invalid length. [ 188.801486][ T9890] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 188.833727][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 188.833761][ T29] audit: type=1326 audit(1748483119.649:10751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 188.865865][ T29] audit: type=1326 audit(1748483119.679:10752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 188.889683][ T29] audit: type=1326 audit(1748483119.679:10753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 188.913380][ T29] audit: type=1326 audit(1748483119.679:10754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 188.927720][ T9898] loop4: detected capacity change from 0 to 128 [ 188.937186][ T29] audit: type=1326 audit(1748483119.679:10755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 188.966895][ T29] audit: type=1326 audit(1748483119.679:10756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 188.990263][ T29] audit: type=1326 audit(1748483119.679:10757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 189.013823][ T29] audit: type=1326 audit(1748483119.679:10758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 189.037165][ T29] audit: type=1326 audit(1748483119.679:10759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 189.060911][ T29] audit: type=1326 audit(1748483119.679:10760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa321b3e969 code=0x7ffc0000 [ 189.209415][ T9911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.228521][ T9911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.317264][ T9918] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 189.395604][ T9926] loop6: detected capacity change from 0 to 128 [ 189.564851][ T9924] lo speed is unknown, defaulting to 1000 [ 189.600408][ T9947] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 190.827573][ T9969] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1881'. [ 190.932287][ T9978] loop5: detected capacity change from 0 to 128 [ 190.950387][ T9978] random: crng reseeded on system resumption [ 190.954253][ T9980] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 191.123088][ T9984] loop4: detected capacity change from 0 to 512 [ 191.162578][ T9984] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 191.170588][ T9984] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 191.191269][ T9984] System zones: 0-1, 15-15, 18-18, 34-34 [ 191.197349][ T9984] EXT4-fs (loop4): orphan cleanup on readonly fs [ 191.204002][ T9984] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 191.218610][ T9984] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 191.228287][ T9984] EXT4-fs (loop4): 1 truncate cleaned up [ 191.234588][ T9984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.253847][ T9984] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 191.398383][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.415637][T10000] loop7: detected capacity change from 0 to 128 [ 191.491868][T10009] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 191.516830][T10013] loop4: detected capacity change from 0 to 128 [ 191.715196][T10018] loop4: detected capacity change from 0 to 512 [ 191.771566][T10018] journal_path: Non-blockdev passed as './bus' [ 191.781782][T10018] EXT4-fs: error: could not find journal device path [ 191.980331][T10021] loop5: detected capacity change from 0 to 512 [ 192.117989][T10021] journal_path: Non-blockdev passed as './bus' [ 192.124916][T10021] EXT4-fs: error: could not find journal device path [ 192.606936][T10032] loop6: detected capacity change from 0 to 512 [ 192.732744][T10032] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 192.740837][T10032] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 192.771072][T10040] ================================================================== [ 192.779225][T10040] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 192.786561][T10040] [ 192.788903][T10040] write to 0xffff888104650800 of 8 bytes by task 10034 on cpu 0: [ 192.796823][T10040] mas_wmb_replace+0x20e/0x14a0 [ 192.797224][T10032] System zones: [ 192.801794][T10040] mas_wr_store_entry+0x17ae/0x2b60 [ 192.801815][T10032] 0-1 [ 192.801835][T10040] mas_store_prealloc+0x74d/0x9e0 [ 192.801864][T10040] vma_iter_store_new+0x1c5/0x200 [ 192.801884][T10040] vma_complete+0x125/0x570 [ 192.801899][T10040] __split_vma+0x594/0x610 [ 192.805474][T10032] , 15-15 [ 192.810636][T10040] vma_modify+0x1a4/0x210 [ 192.810663][T10040] vma_modify_flags+0x101/0x130 [ 192.813248][T10032] , 18-18 [ 192.818254][T10040] mprotect_fixup+0x2cc/0x570 [ 192.818281][T10040] do_mprotect_pkey+0x6d6/0x980 [ 192.818308][T10040] __x64_sys_mprotect+0x48/0x60 [ 192.818331][T10040] x64_sys_call+0x2794/0x2fb0 [ 192.818359][T10040] do_syscall_64+0xd2/0x200 [ 192.823467][T10032] , 34-34 [ 192.827956][T10040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.827987][T10040] [ 192.832384][T10032] [ 192.884597][T10040] read to 0xffff888104650800 of 8 bytes by task 10040 on cpu 1: [ 192.892266][T10040] mas_state_walk+0x119/0x650 [ 192.896984][T10040] mas_walk+0x30/0x120 [ 192.901111][T10040] lock_vma_under_rcu+0xa2/0x2f0 [ 192.906106][T10040] do_user_addr_fault+0x233/0x1090 [ 192.911264][T10040] exc_page_fault+0x62/0xa0 [ 192.915796][T10040] asm_exc_page_fault+0x26/0x30 [ 192.920678][T10040] [ 192.923100][T10040] value changed: 0xffff8881045acb01 -> 0xffff888104650800 [ 192.930247][T10040] [ 192.932588][T10040] Reported by Kernel Concurrency Sanitizer on: [ 192.938753][T10040] CPU: 1 UID: 0 PID: 10040 Comm: syz.4.1909 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 192.950939][T10040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.961027][T10040] ================================================================== [ 192.985197][T10032] EXT4-fs (loop6): orphan cleanup on readonly fs [ 192.991622][T10032] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 193.006459][T10032] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 193.066200][T10032] EXT4-fs (loop6): 1 truncate cleaned up [ 193.072504][T10032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.096592][T10031] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 193.212216][ T8151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.