last executing test programs: 8m1.828675705s ago: executing program 32 (id=1462): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) r3 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000100)='./control\x00', 0x0) 6m52.544978186s ago: executing program 33 (id=3006): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a40)='t`\x16{\xf9\x8eE5\xf7\xbbE\xc94I\xb4\xbap\xc7\x13\x0f\xa8\x8c.\xc8\xe5\xbc\xbeQ#\v$z\x7f:\xe5J\xad\xf1\xdc\x8dE\x90\xf8\x01\x1f\xdd\xa6!\xf0\x1a\x9b\'\x8a\x83Y\x8d\x01\xf8\xda$\x93\xbb|\x00', &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) close(r1) 6m15.968855727s ago: executing program 34 (id=3598): socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) io_setup(0x100, &(0x7f00000004c0)=0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x1000}]) 5m13.926413587s ago: executing program 35 (id=5034): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x403, 0xfffffffc, 0x3c, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x100}}, './file0\x00'}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="441f08ee00270bee724ecd8391ab161f02a79f25a6ac65a600926000000000d809", 0x21) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) write$UHID_INPUT(r3, &(0x7f0000001500)={0x8, {"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", 0x1000}}, 0x1006) lgetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="75736540aba3e5e34b647b89fa97ed619262d0302e7e73c2eace7d03579964426d10ad1c100696ea8f70a0a4"], &(0x7f0000000580)=""/66, 0x42) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r10, &(0x7f0000000140)="24000000010006", 0x7) 4m37.475722509s ago: executing program 36 (id=5484): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000880)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) uname(&(0x7f0000000100)=""/214) 2m14.060492319s ago: executing program 37 (id=7775): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) getgid() r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ffdd18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f0000000400)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa2}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000140)) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'}) 2m10.720246763s ago: executing program 38 (id=7803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="7547f6be1cc959227f5de344e6c5d0c38e473a7c9b6ea9e742acfc8527dc30c468284023985d3c2f5f63f624e85e5c274319271318e350f0394cc704bc136b9133bc002ba11ae9", @ANYRESDEC=r1], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc0) 2m8.312463711s ago: executing program 39 (id=7835): socket$inet(0x2, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$cgroup_int(r1, &(0x7f0000000080)=0x101, 0x12) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') fgetxattr(r4, &(0x7f0000000180)=@known='system.posix_acl_access\x00', &(0x7f0000000300)=""/141, 0x8d) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x2000040c) 2m6.52688731s ago: executing program 40 (id=7854): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000540)=""/200) ioctl$TIOCMBIC(r0, 0x5417, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000009df520ae709acfe5deb60781b64c7d7bdf19447ff65250c5c3b9598fe0c91a0ede5f1de436db9a0b686610672e90fd45cec2776df82e22d99d569a749fd9aaef3d9a49257a8268fc12d67c519af35a430ebd35b0d1fa3811e114d9af23eb265d3f38d0216e9cc061627275f34bf616ef3339e6adad5c0983c357c2f208e00844389fc91770ce24c5d2dae7fd20aaa966ea73682cf9921f3b9e31d3706d2815", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10005c, 0x0, 0x0, 0x0, 0x2ea7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r3, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) geteuid() 2m6.52395266s ago: executing program 41 (id=7853): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2m5.87190826s ago: executing program 42 (id=7864): mount(0x0, 0x0, &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffce9, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x198) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket(0x2, 0x80805, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$selinux_validatetrans(r4, &(0x7f0000002040)=ANY=[@ANYBLOB='system_u:object_r:var_auth_t:s0 system_u:object_r:printer_device_t:s0 00000000000000003575 u'], 0x89) 2m2.700118331s ago: executing program 43 (id=7871): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) pselect6(0x8a, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x57d, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46040700030700000000000200030006"], 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r2], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x77359400}}, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r5) r6 = inotify_init1(0x800) fcntl$setstatus(r5, 0x4, 0x2c00) r7 = gettid() fcntl$setown(r5, 0x8, r7) fcntl$setsig(r6, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r8 = socket$rds(0x15, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r8, &(0x7f0000000380)={0x80000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="02130000020000000000400000000000"], 0x10}}, 0x0) 1m59.378850954s ago: executing program 44 (id=7888): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'veth1_vlan\x00', 0x2000}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x20000, 0x114, 0xa}, 0x18) lsetxattr$security_evm(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2={0x3, 0x3, 0xb, 0x21e, 0xdd, "44c679a1dd60c809575dcb93a0d77cc424cea83d3ec36323eca801a780bcb53672fa26efa99340bc2cba79917ac15c1a32da5e0a1807bd684e927e355c668b31c9d13e2a1bc952e05cc6d35e6e18561be7893f8d3ede22d765993145d0d8ef4624f20b3d87c6cde284d32eb6d2f5d6d39aa51bd2a42697374c41d12cc0954c7dfc88712f1fdf4fdbf53abc8c84d5edcd501ace9f5b393d805b5661520afd0eee713db77e7196930c973c96266a61f37cefae776a63828a11a0880064ac2d77462b892ea1f2bbb7c28b59050b268cfc8afcb05bb8f1b373df1418de33f3"}, 0xe6, 0x2) move_mount(r7, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) 1m55.303943339s ago: executing program 45 (id=7927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r1, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4886) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x300, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x20004054) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000380)='r', 0x1}], 0x1) r8 = accept4$unix(r6, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x8000080) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000001000000007887000c41000000030014"], 0x30}}, 0x0) connect(r11, &(0x7f00000005c0)=@ethernet, 0x80) 1m43.115738494s ago: executing program 1 (id=8104): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x7, 0x8, 0x2}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000200000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000004d60106595"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000005000000", 0xfe60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r6}, 0x18) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x200000, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 1m43.093244524s ago: executing program 1 (id=8106): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) get_mempolicy(0x0, 0x0, 0x2fc, &(0x7f000027f000/0x1000)=nil, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000020000000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b0008ef51dc43b32835b04a8f77cfcef7980acd911a4e6d382339ef73431c726d2669a7230d68f483b560fc73bd", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) move_pages(0x0, 0x3, &(0x7f0000000280)=[&(0x7f0000af8000/0x4000)=nil, &(0x7f00006ea000/0x1000)=nil, &(0x7f000072c000/0x4000)=nil], &(0x7f0000000300)=[0x40, 0xa], &(0x7f0000000380)=[0x0], 0x6) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x3450, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x20, 0x0, 0x40000332}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x47, 0x0}) io_uring_enter(r6, 0x47ba, 0x1595, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r3, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10, 0x0, 0x100}, 0x18) 1m42.885568827s ago: executing program 0 (id=8108): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) tgkill(r0, r0, 0x21) 1m42.883925137s ago: executing program 0 (id=8110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'veth1_vlan\x00', 0x2000}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x20000, 0x114, 0xa}, 0x18) lsetxattr$security_evm(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2={0x3, 0x3, 0xb, 0x21e, 0xdd, "44c679a1dd60c809575dcb93a0d77cc424cea83d3ec36323eca801a780bcb53672fa26efa99340bc2cba79917ac15c1a32da5e0a1807bd684e927e355c668b31c9d13e2a1bc952e05cc6d35e6e18561be7893f8d3ede22d765993145d0d8ef4624f20b3d87c6cde284d32eb6d2f5d6d39aa51bd2a42697374c41d12cc0954c7dfc88712f1fdf4fdbf53abc8c84d5edcd501ace9f5b393d805b5661520afd0eee713db77e7196930c973c96266a61f37cefae776a63828a11a0880064ac2d77462b892ea1f2bbb7c28b59050b268cfc8afcb05bb8f1b373df1418de33f3"}, 0xe6, 0x2) move_mount(r8, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) 1m42.843167118s ago: executing program 46 (id=8109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000032000000c", @ANYBLOB="e8ad2dfbfd77be90dd47dc963f76d043d1ba1fa48eca93015de86d51e13ed41b9ad1d5166860ca6b93e984606649d05361d1c056c3da69b03199f033a2101c0172218deca956eed724308c6bc149d04b644d11879aca552404d57a4b55aab560f00c36f4c5520a2b49b1cec2fef01f786ea3a1845847613aac286809ddf7e40e3bd7f27f96af2b2d056804672cb4abd54791852e5ecf8addbe600d54a5a666a19fabc9ad11c2e56aca24c89de57643bca0c7bddcb72e7eda5f5e3529246484d8d3511340ea212b4edb619b3e7ef559c0a00213ae6b5efa8f43e96f599e3608ada59e"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000365a00050000002e000000defffe0520000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="785116000700000081"]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@local}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m42.70151835s ago: executing program 1 (id=8113): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = syz_io_uring_setup(0x2515, &(0x7f0000000280)={0x0, 0x100002, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) unshare(0x22020600) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_LINKAT={0x27, 0x10, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='./bus\x00', 0xffffffffffffffff, 0x1400}) io_uring_enter(r2, 0x53d1, 0x0, 0x4, 0x0, 0x0) 1m42.694155991s ago: executing program 0 (id=8114): pipe2$9p(0x0, 0x0) unshare(0x20060400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RLERRORu(r5, &(0x7f0000000180)={0xe, 0x7, 0x1, {{0x1, '\x00'}, 0x7}}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x3) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r6, 0x409, 0xb) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000280)=""/201}, 0x20) setxattr$security_capability(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=@v2={0x2000000, [{0x5, 0x7ff}, {0x4, 0x5}]}, 0x14, 0x1) 1m42.621755832s ago: executing program 1 (id=8115): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) dup(r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) 1m42.613734721s ago: executing program 1 (id=8117): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002340)=@newtfilter={0x2054, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2024, 0x2, [@TCA_BASIC_EMATCHES={0x28c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x0, 0x1}, {0x5, 0x6, 0x2}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x220, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xa, 0x8, 0xffc0}, {0x2, 0x5, 0x1}}}, @TCF_EM_CONTAINER={0x5c, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x6}, "1cbffb6286db31b1505e132a3b67a7d00bf5f34712a9ef2f5e5003f67de2d49af2b13cf4050acd18e2c733c6d7daf55c7f75c5d9c19606acf1e58e25e40d98f529579259623d5777aa27b09534"}}, @TCF_EM_CONTAINER={0x68, 0x1, 0x0, 0x0, {{0x0, 0x0, 0x9}, "5f2cab9174ea146fc004c781926845f1444feb55dfaf01a01f106c7b19762bdb180f5aed76e6f052d2dfd5607577d309d2019a1cb39c9548057db16487603fc4fbef21f04343931750ec5cbc088cac011efe1c1ddfc37c531156"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x3, 0xff7f}, {0x4, 0x751, 0x6, 0x1}}}, @TCF_EM_META={0x64, 0x2, 0x0, 0x0, {{0x3, 0x4, 0x7f}, [@TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='!', @TCF_META_TYPE_VAR="6486b453", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="0d32f3cfd7", @TCF_META_TYPE_VAR="de98c97657f3", @TCF_META_TYPE_VAR="206b1a66"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff, 0x8, 0x1}, {0x1, 0x1c, 0x2}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="c73ef53e8bc56a3a0a"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x9, 0x3}, {0x0, 0x7, 0x1}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_IPT={0x58, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x27, 0x5, "b30ea9ca70da59fa23a6120ca21117e2c9d9920640c8236518e3881813da9ac2fc92b0"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_META={0x64, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x2f, 0x2, [@TCF_META_TYPE_VAR="67a274b3cbea32", @TCF_META_TYPE_VAR="954abb2858bfc0ef", @TCF_META_TYPE_VAR="d98944cbfca6b976", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_VAR="2417bf377d", @TCF_META_TYPE_VAR="5e162a", @TCF_META_TYPE_VAR="d5491038"]}, @TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR='{P', @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x7f, 0x1}, {0x5, 0x5}}}]}}, @TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x68}}}]}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7f, 0x7, 0xf800}, {{0x2, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0x4}, {0x0, 0x6, 0x4}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x9}, {{0x3, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}]}, @TCA_BASIC_POLICE={0x818, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x638, 0x5, 0xac, 0x1, 0xd56, 0x3, 0x1, 0x34, 0xff, 0x8, 0x4, 0x10, 0x113, 0x5, 0x0, 0x2, 0x2, 0x0, 0x6, 0x4, 0x4, 0x1, 0x3, 0x6, 0x0, 0x585b4726, 0xc3d, 0x2, 0x3, 0xe, 0xa1, 0x8, 0x2c, 0x3, 0xde0, 0x0, 0xb, 0x3, 0x8, 0x18, 0x100, 0x100, 0x4, 0x9, 0x32f, 0xff, 0xfffffa65, 0x6, 0x2, 0x6, 0x3, 0xfffffffc, 0x7, 0x10000, 0x200, 0x7fff, 0x2d, 0x81, 0x8a70, 0x0, 0xff, 0x7, 0xd7c, 0x3, 0xffffffff, 0x80ae, 0x5, 0x5, 0x8, 0x8, 0x7, 0xd, 0x3ff, 0x0, 0x4, 0x2, 0x1, 0x2, 0xfff, 0x7, 0x2, 0x9, 0x75bf, 0x8, 0x4, 0x6, 0x1ff, 0x0, 0x6, 0x14a, 0x6, 0x8, 0x0, 0x2, 0x7fffffff, 0x3, 0x4, 0x80, 0x7, 0x401, 0xf000000, 0x78f62317, 0x1, 0x0, 0x1, 0xb00, 0x1ff, 0x7fff, 0x0, 0x4, 0xffffffff, 0x6, 0x9, 0x8, 0x1, 0xe, 0x7, 0x1, 0xffffffff, 0x8001, 0xe, 0xfff, 0xc2a1, 0xfffff6db, 0xfffffff8, 0xc29, 0x20, 0xfffffffe, 0x800, 0x6, 0x3, 0xb8, 0x4f, 0x1000, 0x5e2, 0x6, 0x80, 0x5, 0x0, 0x6, 0x7, 0x0, 0x3, 0x1, 0x0, 0x10001, 0x9, 0x81, 0xf, 0xbea1, 0xfffffffc, 0x6, 0x4, 0xfffffffa, 0x7, 0x7fffffff, 0x5, 0x61, 0x0, 0x9, 0x684, 0x7, 0x7, 0x4, 0x4, 0x6, 0x4, 0x670, 0x7, 0x101, 0x2, 0x1, 0xff, 0x8622, 0x7, 0x6, 0x5, 0x3, 0x6, 0x584f, 0xeed, 0x7ff, 0x7, 0x6, 0x4, 0x3, 0xc, 0x3ff, 0x10, 0x5, 0x1, 0x782, 0xa, 0x1, 0x8, 0x8, 0x4, 0x6f87, 0x7, 0x1, 0x1, 0xfffffcd1, 0x1, 0x2, 0x937, 0xb91, 0xf, 0x7, 0x0, 0x100, 0x4, 0xc, 0x20b, 0x9b6, 0x8, 0x8001, 0x9, 0x3, 0x9, 0x3, 0x78, 0x2, 0x7, 0xfff, 0x0, 0x8000, 0x4, 0x5, 0x5, 0x100, 0x5744be61, 0xffff490f, 0x68, 0x0, 0x9, 0x10, 0xf, 0x2f, 0xfffffff8, 0x0, 0xffffff29, 0xfffffff8, 0xb, 0x0, 0x2, 0x4, 0x9, 0x1, 0x0, 0x8, 0x4, 0x1b9, 0x1000, 0x808e, 0x5, 0xff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x5f1, 0xfffffffd, 0x769, 0x9, 0x7, 0x8, 0x3ff, 0x3, 0x0, 0x81, 0x28e, 0x4, 0x40, 0x6, 0xdc2, 0x1ff, 0x8, 0x1, 0x9b48, 0x8, 0x80000001, 0x0, 0x9, 0x0, 0x2, 0x7, 0x8000, 0x4, 0x2, 0x401, 0x0, 0xfffff4af, 0x8, 0x4, 0x86a, 0x46fe, 0x1, 0x7fff, 0x9, 0x5, 0x5, 0x707e, 0x800, 0x6, 0x1bc24994, 0x8, 0x8, 0x2db, 0x3, 0x6, 0x1, 0x2, 0x6, 0x5, 0x4, 0x8, 0x2e5, 0x5, 0xfffffff3, 0x4, 0xc, 0x8, 0xf, 0x7, 0x5, 0x920c, 0x6c1, 0x2, 0x2, 0x81, 0xffffffff, 0x800, 0x101, 0x7fffffff, 0x0, 0x40, 0xa, 0x6, 0x2, 0x9, 0x5, 0x8, 0xe3b, 0xa, 0x0, 0x3e16, 0x9, 0x8, 0xfffffffd, 0x7, 0x9, 0x1, 0x8, 0x1a0d10c3, 0xf37f, 0x9, 0x1, 0x5, 0x3, 0x5, 0x48, 0x1, 0x0, 0x6, 0x2, 0x6, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x2, 0x6, 0x8, 0x75, 0x7, 0x2, 0x3, 0x7, 0x7, 0x9, 0xb79, 0x100, 0x400, 0x40, 0x6, 0x1, 0x8, 0x6, 0x80000001, 0x80000001, 0xb, 0x0, 0x88f, 0x9, 0x5, 0x2, 0x0, 0xe0000000, 0xb, 0x0, 0x82, 0xfff, 0x40000, 0x1, 0xf, 0x7f, 0x3, 0x10001, 0x7fff, 0x5, 0x200, 0x1000, 0x2, 0xb2a4, 0x3fb2, 0x7, 0x1, 0x1, 0x0, 0x6, 0x7, 0x2, 0x0, 0x4, 0x0, 0x9, 0x0, 0x6, 0x4, 0x15f6859a, 0x2, 0xb7d, 0x3, 0x5, 0x7ff, 0xa0, 0x2, 0xf8, 0x4, 0x9, 0x6, 0x1, 0xcb60, 0x1000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x1, 0x2, 0x5, 0x4, 0x3, 0x80, 0x9, 0x1, 0x7, 0x1, 0xa, 0x8, 0xae9, 0x6, 0x9fc, 0xfffffff7, 0x2, 0xc, 0x4, 0xc000000, 0x200, 0x9, 0x2, 0x7fffffff, 0x8, 0x7, 0xc1, 0x9, 0x9b6, 0x7a24, 0x1, 0x800, 0x2, 0x7, 0x0, 0x10001, 0xffff7fff, 0x3, 0x6, 0x8, 0xe, 0x4, 0x6, 0x7, 0x8000, 0xfff, 0x843, 0xfffffffe, 0x0, 0x9, 0x2c, 0x200, 0x3ff, 0xffffff01, 0x100000, 0x3, 0x5, 0xbc87, 0x10, 0x9, 0x6, 0x8001, 0x4, 0xffffffff, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfc}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0x1}}, @TCA_BASIC_ACT={0x1574, 0x3, [@m_nat={0x116c, 0xe, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x800, 0x20000000, 0x2a, 0x6}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x1, 0x10000000, 0x0, 0x4000}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3757, 0x9, 0x10000000, 0x0, 0x6}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x2, 0x3, 0x5, 0x2}, @local, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc1, 0xffffff81, 0x10000000, 0x7, 0xfff}, @rand_addr=0x64010100, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0xd, 0x10000000, 0xffffffff, 0x2}, @remote, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x4, 0x2, 0xf5, 0x400}, @multicast1, @private=0xa010100, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x0, 0x20000000, 0x6, 0x8}, @remote, @broadcast, 0xff000000, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x110, 0x8, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xa, 0x6, './bus\x00'}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x5, 0x4, 0x80, 0x80000001}, {0x2, 0x10, 0x0, 0xe2fb}, {0x3ff, 0x91, 0x57, 0xe957}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0xa2, 0x6, "e686f82ca1b84601657ba34dc6f5fc7f2199bd50a0ad050cce971914438db8af06f88211ea97c667aca9a928484c1f9c85a3d9a65b56cdec4e052eaa4564785a1ac600acacbfee74845796eb009d415dc91264ef08d01a6a6cf15294515d3ac102751fb7ed1e6a10564a42ec3b162d9e5d61c613818c4a4c0f68515e9e60bf934e5928f8c4f0847c47df946bdcf098116c172550b1d6776778768ae8ef11"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x78, 0x17, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}]}, {0x44, 0x6, "4bbd43ca054b0cea58adfa5b4c3526c7cb851b6bc8f0e1fb3d83b1f6dfd9935609d6b8cb053e3e1329a76d55a0bac94bb6ae6d845cb585d17e29cc37faa5138f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_xt={0x128, 0x6, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0xf5, 0x6, "e5ea0e3980b47b5cbbdd3a60234324ea22e337dd7b4b05ce18ee27aec181d688ae1461a257a72fb2988b1dae010094fbe6634572ec1ed7f4379d01fee9f785f3bef567e86cf890202188b3545de83c07d2acbec028fc473c58c047f694d23b446e0c3d0eea4f26c0168722ef51ff1ff9e717a172bdcb307ad9c9393186b985b7b25c207f1a290602b4659a146d6971d3e4378d79ce45dbc8723c6f3ea4518c0ddda4eda75bfff65f305372a4347f288b3a2cee3c111ca44ea50a7003904f2c0dfd46e8cc245a522a72b83a963e33f8371044c321ae7d82d6fae4ec20a799030ef5ac7807cb406fdce2f149c3c37034ea1d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x154, 0x11, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400000, 0x5, 0x1, 0x1, 0x4}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xfffffffe, 0x6, 0x6b, 0x2}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc, 0x3, 0x5, 0x9, 0x4}, 0x400}}]}, {0xd0, 0x6, "38679af11a07dedfab2110049670e59720418aad7ed589f935e863f036be51535b2c8122fdb6c488cb1f4dbcdacc4a49e11a20087e6ff7951b0bba2a0dafbb2e95ecc419feb46087a5556e97da7ab70ed54c2234b0c1b0a042840fdef148882107cf44cda1f450441c74448de7ac38ccc3ec8646756714c3b121a439c00197f5115382d1ae0be819e04faaefc9d0eef95d2091224eb37b13fda14b6b57313060c652c77e471b1ffa505021f8ec66c03548eaf8579fcff901e307d05db8b8b23096b86ae90da9f48eedd01436"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2054}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000001300)={0x8, {"af0014920c989bde943127351c7e048fe805d44569c987d51286ac5e80b0961cfe3629729c82e28c53b31e3ecbb8722bff9c0906027d5cb6fbd929cb4b5e657cc88a443809e6a720828c27b6519e7c18904d67528373733934aa5240afd60544d489e1ec3779ac45095c12c6c5f13c086306dfbbd31926b74150ff2c87db2be1d995e9b3a16fb7360de12618b05d94c291acfcdab84c919de60133f54a0a18d2517c1d0de417ae39fec1c9fa306573205051a9880da1f213b9a27c22b72d42d92b7b260b41bcc1868a0404936774ea5209f02929ec3eef4298818ddb708de6c0e1fda05436037d7d4042d2de3adebc8a62f58ec6ccb4160435c4393ba913250b56ec2fce544a01a5a3ce4363fd497fb256910f31e9416f5b719d64f931bd6d71b54787841b3e49e01fe6ac9598ddb5ef1aeb3d1cabb75845d46806a494b6cf89ec9c8203b92dd0dadc5a3c02545cd005b5f26b7d2b848cb684cb58245d591472d5109e7fbe1175656d729fdd689af57802b33d7d53d427aa57eb0af7a63d9f73be83cd9c12bd06463083b4cc853aad416e9faf484fa069d3b7599b6fc6d94152811403201b91da2547ff6721b0ea237c37464b47b3b4f37384e50ba5773a63356991a5abef659e089cc95e5c3b6d8428115efcf9e89e2743b167d7b9824392d868c159fd1264bea8b9b8b26769d15a27df3af350e2a6e9e37b35c153bf980e8ad15de3b0f3add5f98eb2cbc03eeb2b04e6fb032991d7a88b14c7d2cf2959fc4ed27c4c93c13f5760d0803f10afb91effb45967b4793c58e4bc2e4348c93b4e59f1544a01e89530f6056cda3f972050ae79d9297af71cce0d82c764db2422967f05c9847715c66321e8ab0075a361e8fd78a956074945e687ec1ad01f8dfeb7f3ae2c25daff35617a5d752ad5b019689f10c789d0196f73011f5a4e002aebb676ccb2d8b92ff6c1eb60de10ed0d42f2d19fe96786938eca0fd09a3f16f7b52ef806183282c05ff9fccf96abd096b442c73c494c78c4161ce0599bf6e637664f5dbefa129e69a0d53525d77f871716052385649c1249a402a4a9ecadfd7182a4aba3fc48d76890dfe8a5442ff1b833b95fdb7ae5f052e5c18e9b0ad482ed80c4567f0d0645e6525e3390195b3a4314ab063ffca639d2b181efe15d5bb09e967900fd55ad9db7f6ba99268e0d7e2785c5b14f801b16b6fe9966bb3fa88352bc2ca79aa9a77ec5f9c271dcc62b6124a4d5ed1014fa6eb98521d4be4ca4323311d39e44002e71469326056d98af69fd42eed1dfec48d191587b35e2641abe8c80a2553b92cb43feea49505b5b5ca35dfaf06c693730033ebcad45b6b8026d4722b5c7e13d69269808f438816f77a7b1ed2d31ab44968657e70a51e8d98e520e3628014a09e55f36ca5c4c630d687b20e5a7bdfd6d43613fd3738c8ec1464561586987388885b7a424c949a3110e5de795ffdcf1ef43fb8b5b0364cdb0e9a62c1c6922f08125d456f0ee5d58fa670ff071a8d5b57c06efe30d960f9a67d3dd7dd6ec13c799f9b89d90593ba794c5c582f8bd583af0a59043a1da36cee8e2cc173610960e33300ec48cf7281887ffe66e7ec113a29ed339556d84d638ae9554bb20f2a7695da8bcad10e5f155fe5d54eb511087f7abb4a8ae9e78e233b1e079a44c9cdf2529ed3166c24f80a2bda3b2dfdd2e1c2f650cc35fccf8cb17c03681c6f379f535eeaf46caa1dd95f0b72ea6cf301f2d713844b36c7e90e052528f04a668e1dc5ed11e95bbb86268c712af3f6c77d538c9d3dafeceaacc7ba6b20d9266d75c7470d627725700bfd36a9faf5488532a0871a00e18466f3499e3e3270513168d05f52472045b8558d3fb7880805b6fe3a56b3df9eaea72d147f94ee09e763fcf66d0c71b708fb842bbe619eeeaf483fa717864ab435ca03503285591364727a3615582c80d2023897f7bfdda9b00d095ec11f42482f3851a9232ed09ec6733d54020a9e3b98cb3a014f094e9d968672632a30f967a6d2f00c64fb0aefbeb64510edca5496c9f69379f71412f08fe6afeeb604040a42f00290bc04a40f66f0b84c9c6d7e4d1bc213ed49142215b259be08a0a305c68cbec769ce195ea62b7a2ce632da0a98b469284fd7802bb8c47943ac1c8a7a2b0ee36ed45cde2d13cc00ecc11ca9516d9e917fa28d703566b8d5743c5aba0da662f0446768c6d0df6773d1b0c46dac6a6213aa7b5095a8bd9f34048394a8baac9ec65d740ad8acb8eb683702eaf509c30b547bf355561ca00841efdccd413295a430344d17d2d5f4f435d0a33fafe1b4f6826e9d91436b379cc46039551997e54692487562f65a406b769f2856d37c87a73e2e3738c9afdfa5e0f088bbd2799c7c722c23a7cc37266af557beecb9cc8340bc76ba85a147530f3a9bd8cfe82358c0d799f0687540d463e0f010d1e914f043027284292bf31af75301e27689910393e41f877832797dd7c184249e7b2ec0a79b0decb9a3eead5b3c82ac60fe1485829bf75b8af597b5fd9e47460ebb6d809733eb790027094b019ef2bfb76d75876a5e1e312e80e841c5e074c78b35be6a4070c99372dbb13dc27966a8d448b8e3225b11af907985f3142d41da70a682166814fce9e535cca37058bbb3a02894f6ada82c266e763f431d7e1926da2fc86805b02d6af712c82e7a36e667bd3091661be9cc0cdbd3b3cc690594cf8bac39dd9dac1f883cfb0e500759b0e5dc36721b3ed452addc26d39733a2d76d852d897298009dea9546bae66e9aac7f35277e025d440ca93fdec4bbd58970a130fc79056af96f81b0461ef0e16d4fb12014313438a4bb95b2f9cac98e24a713ed14b539ceddf55e90b6c000044a24be6597e2c5a397a772d7c493ad53a05d6076b584ee7c1615ee7f9de627ac9d7d0d4a12b5a080a9c4977da436704bc9eb9f1d25ba91498e4b575550a69aab83e9157a910c4b2907ea97bcc171dcb7ff6fa982dee16d5c5aaaf93fcc225a6c67c96e54ead190f9c6f949b8025988a46d29c86cf18623882d5aa996a3ece81881ba63e0e7d62b585a179631c7e22f924be7aad5699af389c6651c92848153007d9929683648c8a3fb102a50d9a3e9c83e6cabeae5f97d7faad7a803f8c6dbd9237fa4bec7b33db2cc4db5cd7b3baf1c4f4ddc1f16ec6484cbd1adecab06617045b2d5bac8d1bf97a37ed2780a967a678095a6849cabd87256dbe46f52c960ba8ead52e666a131abfb019d2ac7dd2b055bf91168322b23821a522d241f27a2e7ef892d589a0e55b606167e53b0725a089cae5ef65f02f8a2f32dedb370bf2dc34dac5218be294e755915b399cece7e5c3fa887909961a3d626e4a43bab7edd193a9bc0a7a764640943a635fec7722ff8b3add819b26b78c4e54ff970c15d6b27971cd135d288f081a66e792a8ee5b2d89d5945a99f4216ac21fd9a61e305b4a908f4cbe38e5ccd5eab65f5962877a570524809dffa4ca0ed90d505601d7d244273f20cc47feca7259bd1362e334be459e25a59d4873fc8ede03744c88599a5e5f2a6fb0ca08d085e40c8bd71a0777f7715153e71f4a67f6bb73bbbcd766a9dd4287671dcf6b7daacc4f4b81b32ea0d0381fc32807fe9393249e596d3d5ae4bc5a1cb3e48d63478679eb381fbe8cafd2c6890ba29c1af695f2597c6b472a163b7584dde7327933b9d5e88e0d77e3a3d526a619966dde7f82c7ab7a67a59ded2c880ee0e2f736f054b7d99cc68df48c28d76ab12762c85d07a1f3215d3d4ef2ebd65b0f7eacf62ec12997ccdada731992513263a06e063c27eccfdb3c9d1199136c1a2c3d6b5ea6b2e96c9aa6be3bfbda408b2779ad4eba91809a495c1b872e40d49b0acf4b19b4677e6ea8d07b9a621816c4c5f0e5aa364d4803567da0b2b646604563b31aaa298130576690cbab52bf1ddad7c64a7a416ceb36d6b3202f377ed003e8d74cabd4a6a7be18c95716022cc30c45157d6743785746cf8b0e21ec3208336ab0a43ad9c058fffa3021f84ca8b037dea55254ab944493ca03d025a4b42df3e5b830b81471cddf81fd14aed18e45cfed27b1ef015827942f833a0eee4cc0fcd57f0180f83f32e17d27e4784e42eb1a256404aa6e12f9daabddb907230b20693f3bc74723be6808d95c6463ef7bb6bc4a756fdc805ef4077303e5cd504e6c1754ee8303ee92b94808782984f75c0df49436d3859c092133b0545dac0d8f84fc95a1f0f38e4ecbe3f935d33e86b97bb11ca6f502a602bc7e05b4e6514ddc8ae4d8231874b350b32f96ff6cfbe03f1bf5a0fda73c15eca00afe85c026f5e34e699910ab16502b224b8f383a9a863ca351a1e87c17baadb3f7141aa1295a2a6be4d88d1347da9c356ba9b3bfcc678b58add1b224a0c9b7c3cc4c828abc56acd320e8a8ad22da90a0cf6ae40a471c150581da040297aed0e4889c5963bd8c1415acecbd932f9acda87315e3b2dade276b8324dc7d95141cdd8c4fba82c834a95f9efeb2c74c31e7fd32f96a6a68d9e9942c0bdc55bedd1617e47420877b9f640094a37ceea39656468215ebe789a277f585adc1cc0285b53e33afae1616b0806aeed78b6cc4da54e3bdfa3d49ead4e4fa3623f86a4dfa3042ed403684c62a5d148a30c99c24c3cf9a8858e02800e49e0eed84472a559c9f208f6c3310050e4c5948320b5b4eeefe583bb0bcc0bc01356e76e3465f66a7d0c56ca7abc069db5bd7ad20ec01307f391b5bc890b5034271ee31d5bd374a9422a08ce949667512c8d0bb60eb5d4d22fa0e2a5d172edc7b7386abe63222ef8fc5c676828a1441c5ed19ed5827b0d73d568efc51f46f65ea4f205ac26924d6a7f11477fe23049e0de65bd534c81756556c1cd8bc70b3ce71e4e13d44500773e0767bc735c98f0e1d06dc79e43b946a2faaf698e188cf5909e433edbc546beffcbdea76064ff9d5d56273ca05af42c541b896bc5a942665599c9a8f52db36dbd6d42e8f9bb3446df5f44e3971eb408d0c63381b4aa5997441e01a5eff9fa51d82b7d60d8c3ead784e50b562db074b19e855e8290896b808611c40ed7e0691f758103208900d69cd4c86310318d339eeb473b4bea27be94622560cf35416eea7333bb72110afe202dfcc55c755ed32ea9b4851378b554546b52ebd71b90828733ac3040daf1e3d23bfcadd20bb9248731ab11155aebd259b7e693ebad5d43e6a85f14ea317f31eca905634f9e8d5b1ff73dc5dbd2bbeef6c2965932c885969e00e1939685b472c097b4504c9e6f273e1038045e5ac4010ac232288b77de7d3433a143292f145465b6d1f9020aa4f8405bda4310059b82ad8fd41e698a7824456e11f44e577dc5d5a0eb93b98421a2867c3d40627f9061c1d5689205915c7a91da42348ad3bd12038d84175bddaee423b73c93aebf873c850ef44d66324a80ad0cf268998d71fac6988cb0b1879ebcb6c4c3bce2c45daf73db246bc55fb8221341ef760f5f5264113a437e03cbcf03bb276cdc4100138afc6a1eeb9d90e7f43ce8abbd8be6b9c5b54920f76f07d1557167292feb4c970da3f582d40c0661af8f043e01db8016e2600f655175fa7d705bda3a14d1733ccf6603b7f8709b71f2046211468460791330234fa21f417e6a68cdb1d4496808923a87d02f0ebfb09e102a7c9f7c870c082d6993d10e0de2dbe119ac811848661ab30ab8d7a528acf262bf7d21c2f235e5638be58171b61bed99ac3fef801562aabcf3feff77fe9498d09de3e9c3cf18914392433030595aa31d9c79abc29350a2a2a1d0c2f311246", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000006740)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@jqfmt_vfsold}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@nobarrier}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") utimes(&(0x7f0000000740)='./file0\x00', 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0b00000005000000000400000d0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18329726fff72a305b0000000000050018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r10}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket(0x400000000010, 0x3, 0x0) 1m42.319197516s ago: executing program 3 (id=8121): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) tgkill(r0, r0, 0x21) 1m42.302303027s ago: executing program 1 (id=8122): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000056ac0000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d30000000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x13}}}, 0x24}}, 0x0) r9 = syz_open_dev$usbfs(0x0, 0x310decfa, 0x1) ioctl$USBDEVFS_CONTROL(r9, 0x80045519, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x10) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r12) sendmsg$NLBL_CIPSOV4_C_LIST(r12, &(0x7f0000000200)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c010000", @ANYRES8=r3, @ANYRESDEC=r0], 0x17c}, 0x1, 0x0, 0x0, 0x40804}, 0xc000) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) write$nci(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="414601", @ANYRES16=r11], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) stat(&(0x7f00000022c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002040)) 1m42.240170338s ago: executing program 47 (id=8122): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000056ac0000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d30000000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x13}}}, 0x24}}, 0x0) r9 = syz_open_dev$usbfs(0x0, 0x310decfa, 0x1) ioctl$USBDEVFS_CONTROL(r9, 0x80045519, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x10) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r12) sendmsg$NLBL_CIPSOV4_C_LIST(r12, &(0x7f0000000200)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c010000", @ANYRES8=r3, @ANYRESDEC=r0], 0x17c}, 0x1, 0x0, 0x0, 0x40804}, 0xc000) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) write$nci(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="414601", @ANYRES16=r11], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) stat(&(0x7f00000022c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002040)) 1m42.197715268s ago: executing program 3 (id=8124): capset(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = syz_open_dev$mouse(&(0x7f0000000500), 0x6, 0x200000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000003000)=@ethtool_drvinfo={0x3, "fc5e21d5dcda33c0f07cffc372917526c300", "a294a456eba3fb4433599aae9fccd904b1a9e7171807edc07b8a1938ca290282", "c8a4bf5a82662356165147146bad60f6da699ba9cb3f84bc773809ce64f381d5", "23b57ee72a35ed43971e3221387af16499394995bb5d86220d8b5bc07feb7169", "0455f1d17fecf19473cddf0ad1f7e151c95ba7ae3b079e0104e2b31f1b8a3671", "c508e71d28ea1a2e8540789c", 0x7, 0x8, 0x88fd9ae, 0x7, 0x1}}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000740)={@empty, @dev={0xac, 0x14, 0x14, 0x1a}, r5}, 0xc) syz_clone(0x500, &(0x7f0000000180)="9c6dda2fecc6f0ffdca5da10ef786c773583479e46ff1c23493e89ae11ae4b31eaad51c320aaf35f79a871e66bba08aa67420fa13e1c0646d86bf7967d37f9259fa6e68bde67a3873d769e7e039383116a525f9a6d70a7d24e784f11c38d327223ce7d", 0x63, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000380)="f60011bf22ddc5ae8d86ba3b8517e0548ac9cd64bc088b756cb4564659ec771e95338c55a17446654c72b28f507682143f6096a9f38bd20211e72ebd65ce31fc747568359e8c0962a06e804404bf6fc89087ef7f4082995a00b08db180403be266e0ea6fe3737fd0812de7aa56fea100510caab5340bdbf9de0939bd44a0eb53cc749f467f0cfc35b11331c20bbe43c42c77ac0a554fe1004aafc7905565e054c655eafdec09d9c16191ee1d6998ea6d7432a7ece6e0d6cc07390b223e2b4b4fa5ecbd495526bc8961") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") prctl$PR_SET_NAME(0xf, 0x0) socket(0x1d, 0x2, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r8, 0x2007ffc) sendfile(r8, r8, 0x0, 0x800000009) socket$unix(0x1, 0x1, 0x0) r9 = timerfd_create(0x8, 0x0) timerfd_settime(r9, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m42.019722201s ago: executing program 0 (id=8126): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) dup(r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) 1m42.002921641s ago: executing program 0 (id=8127): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1}, 0x7) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x4, 0x0) syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x576, 0x0, 0x0, 0x221}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x20, 0x0, @fd=r0, 0x1, 0x0, 0x4, 0x2, 0x0, {0x0, r6}}) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='kfree\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x57, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) unshare(0x22020400) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000008800)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x800, @local, 0x10}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000480)="f9", 0x1}], 0x1}}], 0x1, 0x2000c841) 1m41.688748877s ago: executing program 0 (id=8131): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18) socket$inet(0x2, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 1m41.687245666s ago: executing program 48 (id=8131): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18) socket$inet(0x2, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 1m41.550019508s ago: executing program 3 (id=8134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8040) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x6}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68a75f7236ec205b6e4cac2a0d86c336bf07dbe861"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 1m41.392812051s ago: executing program 3 (id=8135): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) dup(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) 1m41.309274583s ago: executing program 3 (id=8137): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x7, 0x8, 0x2}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000200000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000004d60106595"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000005000000", 0xfe60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r6}, 0x18) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 1m40.621113793s ago: executing program 3 (id=8144): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) dup(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) 1m40.620914513s ago: executing program 49 (id=8144): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) dup(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) 47.555125631s ago: executing program 4 (id=9043): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009120100000005000a"], 0x6c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0xa, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000100)=[{0x1, 0x2, 0x4, 0xa}, {0x4, 0x3, 0x5, 0x6}, {0x5, 0x2, 0xf, 0xc}, {0x3, 0x4, 0xa, 0x4}, {0x3, 0x3, 0xf, 0x1}], 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000fff58500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000c8500000085000000b70000000000000395"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_create1(0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) timer_settime(r4, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x7, 0xf, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) timer_getoverrun(r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000340)={0x0, 0xffffffffffffff8e, &(0x7f0000000480)={&(0x7f0000000b40)={0x24, r9, 0xc4fc9e906872338b, 0x20, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8}]}]}]}, 0x24}}, 0x0) 46.614775126s ago: executing program 4 (id=9055): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x762f, &(0x7f0000000140)={0x0, 0x114dd, 0x10, 0xffffffff, 0x320}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRESDEC=0x0, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(r7) 46.465107528s ago: executing program 4 (id=9056): r0 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(0x0, r0, 0xdb6972e93d360997, 0xffffffffffffffff, 0xffffffffffffffff) 46.411032979s ago: executing program 4 (id=9058): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x1) chdir(&(0x7f0000000100)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 46.264600322s ago: executing program 4 (id=9062): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = mq_open(&(0x7f0000000040)='GPL\x00', 0x2, 0x20, &(0x7f0000000080)={0x3, 0x40, 0x7ff, 0xffffffff}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x40180, 0x3) lseek(r3, 0x100000000, 0x0) mq_timedreceive(r0, &(0x7f0000000140)=""/179, 0xb3, 0x2, &(0x7f0000000340)={r1, r2+10000000}) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000", @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_create(0x3ff) epoll_create1(0x80000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) r5 = semget$private(0x0, 0x6, 0x3b1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000006aea0de3c765cc4687a4fdcf3c2e6df6affdd55e7af8dd4edc91ac53ac7d41dfc368e103e316c237842577b53119227c7618c35775d5d5a98765ac9d718ecbcd"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x2}, 0x51) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) semtimedop(r5, 0x0, 0x0, 0x0) 46.035808235s ago: executing program 4 (id=9066): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x762f, &(0x7f0000000140)={0x0, 0x114dd, 0x10, 0xffffffff, 0x320}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRESDEC=0x0, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(r7) 45.988237496s ago: executing program 50 (id=9066): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x762f, &(0x7f0000000140)={0x0, 0x114dd, 0x10, 0xffffffff, 0x320}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRESDEC=0x0, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(r7) 20.287774976s ago: executing program 5 (id=9709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) listen(r1, 0x4) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x1, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r6}, &(0x7f0000000580), &(0x7f00000007c0)}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1000) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r9, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 20.139759928s ago: executing program 5 (id=9714): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f00000005c0)={[{@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}]}, 0x1, 0x7bc, &(0x7f0000001740)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000340)="b9ff0307684426", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setuid(0xee00) 20.084122409s ago: executing program 5 (id=9717): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) ioperm(0x0, 0x1, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='\x00', 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = fsmount(r0, 0x0, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x22000000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r6, 0xfffffffffffffc01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000e200000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0), 0x4000) 19.107167195s ago: executing program 5 (id=9741): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2}) fcntl$getownex(r0, 0x10, &(0x7f0000000240)) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000ec0)='./file0\x00', 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x20002, &(0x7f0000000200)) chmod(0x0, 0x0) 19.054415086s ago: executing program 5 (id=9743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="8000028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003ccf8189443e3d9f8fbc000100240001006c625f74785f6d6578686f640000"], 0x9c}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 18.565406414s ago: executing program 5 (id=9754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000340)='./file0\x00', r0, 0x4000, r3}, 0x18) 18.565218324s ago: executing program 51 (id=9754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000340)='./file0\x00', r0, 0x4000, r3}, 0x18) 2.021958848s ago: executing program 7 (id=10169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x1000008, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@aname}, {@uname={'uname', 0x3d, '9p\x00'}}, {@afid={'afid', 0x3d, 0x100}}], [{@appraise}, {@subj_role={'subj_role', 0x3d, 'l2tp\x00'}}, {@euid_lt}, {@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}}) 1.25304272s ago: executing program 2 (id=10180): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x14c) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') pread64(r3, &(0x7f000001a240)=""/102385, 0x18ff1, 0x100008) 1.24462187s ago: executing program 2 (id=10182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x410000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x25, 0x2000, @fd, 0xb, 0x5, 0x8020, 0x7, 0x0, {0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.23277917s ago: executing program 9 (id=10183): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000004a982594d32f612ddb00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1.222478841s ago: executing program 6 (id=10184): rt_sigpending(0x0, 0x0) 1.117049732s ago: executing program 9 (id=10186): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 1.047121923s ago: executing program 9 (id=10188): bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x2a060400) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x8, 0x9, 0x7fffffffffffffff) 936.841275ms ago: executing program 7 (id=10189): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x0, 0x0) 859.866066ms ago: executing program 7 (id=10190): socket$kcm(0x2, 0x200000000000001, 0x0) (async) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x1000, 0xda, 0xf7}, {0x92e, 0x80, 0x2, 0x5}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x392b8a4ff77e3f7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a"], 0x38}}, 0x40000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000001c0)=""/240) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) syz_open_dev$evdev(0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendfile(r6, r6, 0x0, 0xb) 726.692678ms ago: executing program 9 (id=10193): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x14c) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') pread64(r3, &(0x7f000001a240)=""/102385, 0x18ff1, 0x100008) 673.226999ms ago: executing program 2 (id=10194): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="b9", 0x1}], 0x1}, 0x40851) recvmsg$unix(r5, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 608.0768ms ago: executing program 9 (id=10196): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000004a982594d32f612ddb00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 601.51953ms ago: executing program 2 (id=10197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001180)={'filter\x00', 0x7, 0xa00, 0x3c8, 0x1f8, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private=0xa010100, @remote, 0xffffff00, 0xff000000, 0x6, 0xf, {@mac=@random="fe70b29cdffe", {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x6, 0xa, 0x6, 0x1, 0x200, 0x400, 'veth0_macvtap\x00', 'nr0\x00', {}, {}, 0x0, 0x464}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@rand_addr, @multicast1, 0x0, 0x0, 0x0, 0x8, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @private=0xa010102, @rand_addr=0x64010100, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 528.168161ms ago: executing program 7 (id=10200): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kcmp(0x0, 0x0, 0xdb6972e93d360997, 0xffffffffffffffff, 0xffffffffffffffff) 527.698301ms ago: executing program 9 (id=10201): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) ioperm(0x0, 0x1, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='\x00', 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = fsmount(r0, 0x0, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x22000000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r6, 0xfffffffffffffc01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000e200000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) 483.693152ms ago: executing program 2 (id=10203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x0, 0x0) 477.808082ms ago: executing program 7 (id=10205): capset(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = syz_open_dev$mouse(&(0x7f0000000500), 0x6, 0x200000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000003000)=@ethtool_drvinfo={0x3, "fc5e21d5dcda33c0f07cffc372917526c300", "a294a456eba3fb4433599aae9fccd904b1a9e7171807edc07b8a1938ca290282", "c8a4bf5a82662356165147146bad60f6da699ba9cb3f84bc773809ce64f381d5", "23b57ee72a35ed43971e3221387af16499394995bb5d86220d8b5bc07feb7169", "0455f1d17fecf19473cddf0ad1f7e151c95ba7ae3b079e0104e2b31f1b8a3671", "c508e71d28ea1a2e8540789c", 0x7, 0x8, 0x88fd9ae, 0x7, 0x1}}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x100000004}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000740)={@empty, @dev={0xac, 0x14, 0x14, 0x1a}, r5}, 0xc) syz_clone(0x500, &(0x7f0000000180)="9c6dda2fecc6f0ffdca5da10ef786c773583479e46ff1c23493e89ae11ae4b31eaad51c320aaf35f79a871e66bba08aa67420fa13e1c0646d86bf7967d37f9259fa6e68bde67a3873d769e7e039383116a525f9a6d70a7d24e784f11c38d327223ce7d", 0x63, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000380)="f60011bf22ddc5ae8d86ba3b8517e0548ac9cd64bc088b756cb4564659ec771e95338c55a17446654c72b28f507682143f6096a9f38bd20211e72ebd65ce31fc747568359e8c0962a06e804404bf6fc89087ef7f4082995a00b08db180403be266e0ea6fe3737fd0812de7aa56fea100510caab5340bdbf9de0939bd44a0eb53cc749f467f0cfc35b11331c20bbe43c42c77ac0a554fe1004aafc7905565e054c655eafdec09d9c16191ee1d6998ea6d7432a7ece6e0d6cc07390b223e2b4b4fa5ecbd495526bc8961") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") prctl$PR_SET_NAME(0xf, 0x0) socket(0x1d, 0x2, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r8, 0x2007ffc) sendfile(r8, r8, 0x0, 0x800000009) socket$unix(0x1, 0x1, 0x0) r9 = timerfd_create(0x8, 0x0) timerfd_settime(r9, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 473.264803ms ago: executing program 2 (id=10206): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x80000001]}, 0x8, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$key(0xf, 0x3, 0x2) unshare(0x28000600) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000b0000000a00000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_pidfd_open(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x7) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffffffffffff, 0x4}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0xffffffffffffffeb) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000256afd476e3af74651b09860140fc990afd8f5e9c930e807875f2945ae150634479cf6928e3a8476101412ca092e8d9074a8889741645235a1b7b90bcf97980a40d1099c1106585493ee88f95ccaaf1e7a624818d55b35f84f9abfd4afc3", @ANYRES64=r4, @ANYBLOB="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"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x37, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="48000000100039042abd7000eaffffff000003e4", @ANYRES32=r5, @ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="08000300ac1414bb06002ecc7a7a980b75e934"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r6 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) 316.368645ms ago: executing program 6 (id=10208): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="b9", 0x1}], 0x1}, 0x40851) recvmsg$unix(r5, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 311.238515ms ago: executing program 8 (id=10209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd231, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) (fail_nth: 6) 271.146296ms ago: executing program 8 (id=10210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x1000008, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@aname}, {@uname={'uname', 0x3d, '9p\x00'}}, {@afid={'afid', 0x3d, 0x100}}], [{@appraise}, {@subj_role={'subj_role', 0x3d, 'l2tp\x00'}}, {@euid_lt}, {@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}}) 245.740236ms ago: executing program 6 (id=10211): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000004a982594d32f612ddb00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 217.044947ms ago: executing program 8 (id=10212): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x0, 0x0) 174.398317ms ago: executing program 8 (id=10213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) tkill(0x0, 0x7) syz_usb_disconnect(0xffffffffffffffff) (fail_nth: 14) 152.987518ms ago: executing program 6 (id=10214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 108.970628ms ago: executing program 8 (id=10215): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kcmp(0x0, 0x0, 0xdb6972e93d360997, 0xffffffffffffffff, 0xffffffffffffffff) 108.609738ms ago: executing program 6 (id=10216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x0, 0x0) 85.058798ms ago: executing program 6 (id=10217): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d80", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0x5, &(0x7f0000000240)={@local, @loopback, 0xfffe, "66c5aff8a7eb3af1455fa81d420000008c84aea30e0100", 0x96bf, 0x6, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) r6 = socket$inet(0x2, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 84.718589ms ago: executing program 8 (id=10218): lsm_list_modules(0x0, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000800)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@mblk_io_submit}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2210020, &(0x7f0000000000)) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 0s ago: executing program 7 (id=10219): rt_sigpending(0x0, 0x0) kernel console output (not intermixed with test programs): t promiscuous mode [ 563.293385][ C1] vcan0: j1939_tp_rxtimer: 0xffff88815fb3a000: abort rx timeout. Force session deactivation [ 563.760209][T29960] FAULT_INJECTION: forcing a failure. [ 563.760209][T29960] name failslab, interval 1, probability 0, space 0, times 0 [ 563.773692][T29960] CPU: 1 UID: 0 PID: 29960 Comm: syz.5.9213 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 563.773718][T29960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 563.773729][T29960] Call Trace: [ 563.773734][T29960] [ 563.773786][T29960] __dump_stack+0x1d/0x30 [ 563.773805][T29960] dump_stack_lvl+0xe8/0x140 [ 563.773822][T29960] dump_stack+0x15/0x1b [ 563.773837][T29960] should_fail_ex+0x265/0x280 [ 563.773915][T29960] ? nfnetlink_rcv+0xa04/0x1690 [ 563.773935][T29960] should_failslab+0x8c/0xb0 [ 563.773960][T29960] __kmalloc_cache_noprof+0x4c/0x320 [ 563.773989][T29960] nfnetlink_rcv+0xa04/0x1690 [ 563.774061][T29960] netlink_unicast+0x59e/0x670 [ 563.774169][T29960] netlink_sendmsg+0x58b/0x6b0 [ 563.774201][T29960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.774237][T29960] __sock_sendmsg+0x142/0x180 [ 563.774262][T29960] ____sys_sendmsg+0x31e/0x4e0 [ 563.774357][T29960] ___sys_sendmsg+0x17b/0x1d0 [ 563.774398][T29960] __x64_sys_sendmsg+0xd4/0x160 [ 563.774423][T29960] x64_sys_call+0x2999/0x2fb0 [ 563.774449][T29960] do_syscall_64+0xd0/0x1a0 [ 563.774477][T29960] ? clear_bhb_loop+0x25/0x80 [ 563.774522][T29960] ? clear_bhb_loop+0x25/0x80 [ 563.774541][T29960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.774560][T29960] RIP: 0033:0x7f3b26bde969 [ 563.774628][T29960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.774645][T29960] RSP: 002b:00007f3b25247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.774660][T29960] RAX: ffffffffffffffda RBX: 00007f3b26e05fa0 RCX: 00007f3b26bde969 [ 563.774671][T29960] RDX: 0000000004008090 RSI: 00002000000000c0 RDI: 0000000000000004 [ 563.774743][T29960] RBP: 00007f3b25247090 R08: 0000000000000000 R09: 0000000000000000 [ 563.774754][T29960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 563.774831][T29960] R13: 0000000000000000 R14: 00007f3b26e05fa0 R15: 00007ffc155c0888 [ 563.774849][T29960] [ 564.013944][T29962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1548 sclass=netlink_tcpdiag_socket pid=29962 comm=syz.2.9214 [ 564.028075][T29963] loop2: detected capacity change from 0 to 128 [ 564.194081][T29989] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9226'. [ 564.204103][T29989] team0: Unable to change to the same mode the team is in [ 564.214807][T29997] FAULT_INJECTION: forcing a failure. [ 564.214807][T29997] name failslab, interval 1, probability 0, space 0, times 0 [ 564.228066][T29997] CPU: 1 UID: 0 PID: 29997 Comm: syz.2.9228 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 564.228094][T29997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 564.228106][T29997] Call Trace: [ 564.228112][T29997] [ 564.228120][T29997] __dump_stack+0x1d/0x30 [ 564.228222][T29997] dump_stack_lvl+0xe8/0x140 [ 564.228244][T29997] dump_stack+0x15/0x1b [ 564.228263][T29997] should_fail_ex+0x265/0x280 [ 564.228349][T29997] should_failslab+0x8c/0xb0 [ 564.228486][T29997] __kmalloc_noprof+0xa5/0x3e0 [ 564.228507][T29997] ? ___neigh_create+0x4c9/0x1290 [ 564.228594][T29997] ___neigh_create+0x4c9/0x1290 [ 564.228639][T29997] ? avc_has_perm+0xd3/0x150 [ 564.228736][T29997] ? selinux_ip_postroute+0xb07/0xb50 [ 564.228777][T29997] __neigh_create+0x54/0x70 [ 564.228806][T29997] ip_neigh_gw4+0x12e/0x170 [ 564.228838][T29997] ip_finish_output2+0x857/0x8b0 [ 564.228867][T29997] ? __rcu_read_unlock+0x4f/0x70 [ 564.228894][T29997] ip_finish_output+0x112/0x290 [ 564.228920][T29997] ip_mc_output+0x25d/0x340 [ 564.228945][T29997] ? __pfx_ip_finish_output+0x10/0x10 [ 564.229016][T29997] ? __pfx_ip_mc_output+0x10/0x10 [ 564.229036][T29997] ip_send_skb+0x136/0x140 [ 564.229062][T29997] udp_send_skb+0x6e3/0xa40 [ 564.229091][T29997] udp_sendmsg+0x48d/0x13a0 [ 564.229114][T29997] ? mntput+0x4b/0x80 [ 564.229173][T29997] ? __rcu_read_unlock+0x4f/0x70 [ 564.229198][T29997] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 564.229228][T29997] ? avc_has_perm+0xd3/0x150 [ 564.229313][T29997] ? __pfx_udp_sendmsg+0x10/0x10 [ 564.229335][T29997] inet_sendmsg+0xac/0xd0 [ 564.229372][T29997] __sock_sendmsg+0x102/0x180 [ 564.229405][T29997] __sys_sendto+0x268/0x330 [ 564.229463][T29997] __x64_sys_sendto+0x76/0x90 [ 564.229497][T29997] x64_sys_call+0x2eb6/0x2fb0 [ 564.229524][T29997] do_syscall_64+0xd0/0x1a0 [ 564.229623][T29997] ? clear_bhb_loop+0x25/0x80 [ 564.229650][T29997] ? clear_bhb_loop+0x25/0x80 [ 564.229671][T29997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.229695][T29997] RIP: 0033:0x7f8f63dfe969 [ 564.229714][T29997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.229805][T29997] RSP: 002b:00007f8f62467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 564.229824][T29997] RAX: ffffffffffffffda RBX: 00007f8f64025fa0 RCX: 00007f8f63dfe969 [ 564.229836][T29997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 564.229915][T29997] RBP: 00007f8f62467090 R08: 0000000000000000 R09: 0000000000000000 [ 564.229931][T29997] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000001 [ 564.229945][T29997] R13: 0000000000000000 R14: 00007f8f64025fa0 R15: 00007ffd5a178b68 [ 564.229968][T29997] [ 564.632756][T30019] macvlan1: entered promiscuous mode [ 564.646946][T30019] bridge0: port 1(macvlan1) entered blocking state [ 564.653551][T30019] bridge0: port 1(macvlan1) entered disabled state [ 564.678771][T30019] macvlan1: entered allmulticast mode [ 564.685346][T30019] macvlan1: left allmulticast mode [ 564.692338][T30029] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9241'. [ 564.713138][T30029] team0: Unable to change to the same mode the team is in [ 564.739877][T30036] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 564.781458][T30036] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9244'. [ 564.800895][T30036] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9244'. [ 564.867117][T30055] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9246'. [ 564.890695][T30057] FAULT_INJECTION: forcing a failure. [ 564.890695][T30057] name failslab, interval 1, probability 0, space 0, times 0 [ 564.903603][T30057] CPU: 1 UID: 0 PID: 30057 Comm: syz.7.9250 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 564.903660][T30057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 564.903673][T30057] Call Trace: [ 564.903681][T30057] [ 564.903691][T30057] __dump_stack+0x1d/0x30 [ 564.903731][T30057] dump_stack_lvl+0xe8/0x140 [ 564.903752][T30057] dump_stack+0x15/0x1b [ 564.903773][T30057] should_fail_ex+0x265/0x280 [ 564.903943][T30057] should_failslab+0x8c/0xb0 [ 564.904028][T30057] kmem_cache_alloc_node_noprof+0x57/0x320 [ 564.904187][T30057] ? __alloc_skb+0x101/0x320 [ 564.904219][T30057] __alloc_skb+0x101/0x320 [ 564.904252][T30057] send_monitor_note+0x9f/0x3c0 [ 564.904308][T30057] hci_sock_bind+0x4ec/0x990 [ 564.904339][T30057] __sys_bind+0x1ce/0x2a0 [ 564.904440][T30057] __x64_sys_bind+0x3f/0x50 [ 564.904474][T30057] x64_sys_call+0x2086/0x2fb0 [ 564.904494][T30057] do_syscall_64+0xd0/0x1a0 [ 564.904567][T30057] ? clear_bhb_loop+0x25/0x80 [ 564.904591][T30057] ? clear_bhb_loop+0x25/0x80 [ 564.904672][T30057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.904693][T30057] RIP: 0033:0x7f049559e969 [ 564.904722][T30057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.904744][T30057] RSP: 002b:00007f0493c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 564.904762][T30057] RAX: ffffffffffffffda RBX: 00007f04957c5fa0 RCX: 00007f049559e969 [ 564.904774][T30057] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000006 [ 564.904820][T30057] RBP: 00007f0493c07090 R08: 0000000000000000 R09: 0000000000000000 [ 564.904843][T30057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.904858][T30057] R13: 0000000000000000 R14: 00007f04957c5fa0 R15: 00007ffd759ea508 [ 564.904892][T30057] [ 565.111056][T30055] lo speed is unknown, defaulting to 1000 [ 565.141099][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 565.141113][ T29] audit: type=1400 audit(2000000311.447:33821): avc: denied { name_bind } for pid=30058 comm="syz.7.9251" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 565.170014][ T29] audit: type=1400 audit(2000000311.447:33822): avc: denied { node_bind } for pid=30058 comm="syz.7.9251" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 565.193617][ T29] audit: type=1400 audit(2000000311.494:33823): avc: denied { listen } for pid=30058 comm="syz.7.9251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 565.256609][ T29] audit: type=1400 audit(2000000311.559:33824): avc: denied { tracepoint } for pid=30062 comm="syz.6.9252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 565.289091][T30063] FAULT_INJECTION: forcing a failure. [ 565.289091][T30063] name failslab, interval 1, probability 0, space 0, times 0 [ 565.302454][T30063] CPU: 1 UID: 0 PID: 30063 Comm: syz.6.9252 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 565.302512][T30063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 565.302529][T30063] Call Trace: [ 565.302535][T30063] [ 565.302541][T30063] __dump_stack+0x1d/0x30 [ 565.302627][T30063] dump_stack_lvl+0xe8/0x140 [ 565.302672][T30063] dump_stack+0x15/0x1b [ 565.302688][T30063] should_fail_ex+0x265/0x280 [ 565.302719][T30063] ? alloc_netdev_mqs+0x829/0xab0 [ 565.302742][T30063] should_failslab+0x8c/0xb0 [ 565.302789][T30063] __kmalloc_cache_noprof+0x4c/0x320 [ 565.302818][T30063] alloc_netdev_mqs+0x829/0xab0 [ 565.302841][T30063] tun_set_iff+0x42c/0x890 [ 565.302866][T30063] __tun_chr_ioctl+0x5f0/0x1490 [ 565.302958][T30063] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 565.303019][T30063] tun_chr_ioctl+0x27/0x40 [ 565.303052][T30063] __se_sys_ioctl+0xcb/0x140 [ 565.303107][T30063] __x64_sys_ioctl+0x43/0x50 [ 565.303131][T30063] x64_sys_call+0x19a8/0x2fb0 [ 565.303158][T30063] do_syscall_64+0xd0/0x1a0 [ 565.303185][T30063] ? clear_bhb_loop+0x25/0x80 [ 565.303255][T30063] ? clear_bhb_loop+0x25/0x80 [ 565.303276][T30063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.303296][T30063] RIP: 0033:0x7f381080e969 [ 565.303366][T30063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.303480][T30063] RSP: 002b:00007f380ee77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.303504][T30063] RAX: ffffffffffffffda RBX: 00007f3810a35fa0 RCX: 00007f381080e969 [ 565.303520][T30063] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 565.303536][T30063] RBP: 00007f380ee77090 R08: 0000000000000000 R09: 0000000000000000 [ 565.303551][T30063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.303614][T30063] R13: 0000000000000000 R14: 00007f3810a35fa0 R15: 00007ffc63e3a518 [ 565.303636][T30063] [ 565.305907][ T29] audit: type=1400 audit(2000000311.578:33825): avc: denied { read } for pid=30062 comm="syz.6.9252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 565.530026][T30063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9252'. [ 565.746881][ T29] audit: type=1326 audit(2000000312.008:33826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30065 comm="syz.5.9253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b26bde969 code=0x7ffc0000 [ 565.775528][T30068] FAULT_INJECTION: forcing a failure. [ 565.775528][T30068] name failslab, interval 1, probability 0, space 0, times 0 [ 565.788459][T30068] CPU: 0 UID: 0 PID: 30068 Comm: syz.5.9253 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 565.788496][T30068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 565.788511][T30068] Call Trace: [ 565.788517][T30068] [ 565.788527][T30068] __dump_stack+0x1d/0x30 [ 565.788626][T30068] dump_stack_lvl+0xe8/0x140 [ 565.788705][T30068] dump_stack+0x15/0x1b [ 565.788763][T30068] should_fail_ex+0x265/0x280 [ 565.788798][T30068] should_failslab+0x8c/0xb0 [ 565.788831][T30068] kmem_cache_alloc_noprof+0x50/0x310 [ 565.788938][T30068] ? audit_log_start+0x365/0x6c0 [ 565.788972][T30068] audit_log_start+0x365/0x6c0 [ 565.789042][T30068] audit_seccomp+0x48/0x100 [ 565.789074][T30068] ? __seccomp_filter+0x68c/0x10d0 [ 565.789100][T30068] __seccomp_filter+0x69d/0x10d0 [ 565.789142][T30068] __secure_computing+0x82/0x150 [ 565.789197][T30068] syscall_trace_enter+0xcf/0x1e0 [ 565.789228][T30068] do_syscall_64+0xaa/0x1a0 [ 565.789256][T30068] ? clear_bhb_loop+0x25/0x80 [ 565.789278][T30068] ? clear_bhb_loop+0x25/0x80 [ 565.789360][T30068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.789385][T30068] RIP: 0033:0x7f3b26bdd37c [ 565.789405][T30068] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 565.789466][T30068] RSP: 002b:00007f3b25247030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 565.789565][T30068] RAX: ffffffffffffffda RBX: 00007f3b26e05fa0 RCX: 00007f3b26bdd37c [ 565.789585][T30068] RDX: 000000000000000f RSI: 00007f3b252470a0 RDI: 0000000000000007 [ 565.789666][T30068] RBP: 00007f3b25247090 R08: 0000000000000000 R09: 0000000000000000 [ 565.789679][T30068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.789695][T30068] R13: 0000000000000000 R14: 00007f3b26e05fa0 R15: 00007ffc155c0888 [ 565.789785][T30068] [ 565.980736][T30068] audit: audit_lost=40 audit_rate_limit=0 audit_backlog_limit=64 [ 565.988761][T30068] audit: out of memory in audit_log_start [ 565.994686][ T29] audit: type=1326 audit(2000000312.036:33827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30065 comm="syz.5.9253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b26bdd2d0 code=0x7ffc0000 [ 566.019099][ T29] audit: type=1326 audit(2000000312.036:33828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30065 comm="syz.5.9253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3b26bdd41f code=0x7ffc0000 [ 566.068398][T30070] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9255'. [ 566.077503][T30070] team0: Unable to change to the same mode the team is in [ 566.177604][T30078] batman_adv: batadv0: Adding interface: dummy0 [ 566.183920][T30078] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.223502][T30078] batman_adv: batadv0: Interface activated: dummy0 [ 566.254412][T30083] FAULT_INJECTION: forcing a failure. [ 566.254412][T30083] name failslab, interval 1, probability 0, space 0, times 0 [ 566.267145][T30083] CPU: 1 UID: 0 PID: 30083 Comm: syz.2.9260 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 566.267305][T30083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 566.267317][T30083] Call Trace: [ 566.267324][T30083] [ 566.267333][T30083] __dump_stack+0x1d/0x30 [ 566.267357][T30083] dump_stack_lvl+0xe8/0x140 [ 566.267381][T30083] dump_stack+0x15/0x1b [ 566.267454][T30083] should_fail_ex+0x265/0x280 [ 566.267495][T30083] ? sctp_add_bind_addr+0x71/0x1e0 [ 566.267525][T30083] should_failslab+0x8c/0xb0 [ 566.267554][T30083] __kmalloc_cache_noprof+0x4c/0x320 [ 566.267597][T30083] sctp_add_bind_addr+0x71/0x1e0 [ 566.267628][T30083] sctp_copy_local_addr_list+0x199/0x220 [ 566.267658][T30083] sctp_copy_one_addr+0x7f/0x280 [ 566.267684][T30083] sctp_bind_addr_copy+0x79/0x290 [ 566.267773][T30083] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 566.267798][T30083] sctp_connect_new_asoc+0x1c3/0x3a0 [ 566.267901][T30083] __sctp_connect+0x424/0x7a0 [ 566.267936][T30083] ? selinux_sctp_bind_connect+0x20d/0x250 [ 566.268004][T30083] sctp_getsockopt_connectx3+0x220/0x300 [ 566.268036][T30083] sctp_getsockopt+0x910/0xaa0 [ 566.268067][T30083] sock_common_getsockopt+0x5d/0x70 [ 566.268101][T30083] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 566.268212][T30083] do_sock_getsockopt+0x1fd/0x240 [ 566.268258][T30083] __x64_sys_getsockopt+0x11e/0x1a0 [ 566.268301][T30083] x64_sys_call+0x12aa/0x2fb0 [ 566.268325][T30083] do_syscall_64+0xd0/0x1a0 [ 566.268347][T30083] ? clear_bhb_loop+0x25/0x80 [ 566.268377][T30083] ? clear_bhb_loop+0x25/0x80 [ 566.268399][T30083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.268426][T30083] RIP: 0033:0x7f8f63dfe969 [ 566.268445][T30083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.268482][T30083] RSP: 002b:00007f8f62467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 566.268500][T30083] RAX: ffffffffffffffda RBX: 00007f8f64025fa0 RCX: 00007f8f63dfe969 [ 566.268512][T30083] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 566.268525][T30083] RBP: 00007f8f62467090 R08: 0000200000000440 R09: 0000000000000000 [ 566.268562][T30083] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.268573][T30083] R13: 0000000000000000 R14: 00007f8f64025fa0 R15: 00007ffd5a178b68 [ 566.268594][T30083] [ 566.639359][T30098] loop2: detected capacity change from 0 to 2048 [ 566.813305][T30098] loop2: p1 < > p4 [ 566.820139][T30098] loop2: p4 size 8388608 extends beyond EOD, truncated [ 566.906205][T30110] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9269'. [ 566.915508][T30110] team0: Unable to change to the same mode the team is in [ 566.925225][T30108] 9pnet_fd: Insufficient options for proto=fd [ 566.981636][T30112] loop2: detected capacity change from 0 to 2048 [ 567.036614][T30112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.051115][T30116] FAULT_INJECTION: forcing a failure. [ 567.051115][T30116] name failslab, interval 1, probability 0, space 0, times 0 [ 567.064524][T30116] CPU: 1 UID: 0 PID: 30116 Comm: syz.7.9273 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 567.064555][T30116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 567.064586][T30116] Call Trace: [ 567.064593][T30116] [ 567.064602][T30116] __dump_stack+0x1d/0x30 [ 567.064635][T30116] dump_stack_lvl+0xe8/0x140 [ 567.064659][T30116] dump_stack+0x15/0x1b [ 567.064701][T30116] should_fail_ex+0x265/0x280 [ 567.064789][T30116] should_failslab+0x8c/0xb0 [ 567.064826][T30116] __kmalloc_noprof+0xa5/0x3e0 [ 567.064849][T30116] ? iter_file_splice_write+0xfe/0x970 [ 567.064922][T30116] iter_file_splice_write+0xfe/0x970 [ 567.064944][T30116] ? atime_needs_update+0x3be/0x3e0 [ 567.065044][T30116] ? touch_atime+0x106/0x330 [ 567.065084][T30116] ? shmem_file_splice_read+0x593/0x5d0 [ 567.065212][T30116] ? __pfx_iter_file_splice_write+0x10/0x10 [ 567.065234][T30116] direct_splice_actor+0x153/0x2a0 [ 567.065260][T30116] ? shmem_mmap+0x21/0xb0 [ 567.065296][T30116] splice_direct_to_actor+0x30f/0x680 [ 567.065345][T30116] ? __pfx_direct_splice_actor+0x10/0x10 [ 567.065372][T30116] do_splice_direct+0xda/0x150 [ 567.065399][T30116] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 567.065452][T30116] do_sendfile+0x380/0x640 [ 567.065489][T30116] __x64_sys_sendfile64+0x105/0x150 [ 567.065520][T30116] x64_sys_call+0xb39/0x2fb0 [ 567.065562][T30116] do_syscall_64+0xd0/0x1a0 [ 567.065600][T30116] ? clear_bhb_loop+0x25/0x80 [ 567.065642][T30116] ? clear_bhb_loop+0x25/0x80 [ 567.065669][T30116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.065706][T30116] RIP: 0033:0x7f049559e969 [ 567.065725][T30116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.065747][T30116] RSP: 002b:00007f0493c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 567.065770][T30116] RAX: ffffffffffffffda RBX: 00007f04957c5fa0 RCX: 00007f049559e969 [ 567.065796][T30116] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000008 [ 567.065849][T30116] RBP: 00007f0493c07090 R08: 0000000000000000 R09: 0000000000000000 [ 567.065861][T30116] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 567.065898][T30116] R13: 0000000000000000 R14: 00007f04957c5fa0 R15: 00007ffd759ea508 [ 567.065922][T30116] [ 567.320829][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.426687][T30128] macvlan1: entered promiscuous mode [ 567.443447][T30128] bridge0: port 1(macvlan1) entered blocking state [ 567.450291][T30128] bridge0: port 1(macvlan1) entered disabled state [ 567.467907][T30128] macvlan1: entered allmulticast mode [ 567.475732][T30128] macvlan1: left allmulticast mode [ 567.563656][T30132] FAULT_INJECTION: forcing a failure. [ 567.563656][T30132] name failslab, interval 1, probability 0, space 0, times 0 [ 567.577157][T30132] CPU: 1 UID: 0 PID: 30132 Comm: syz.5.9274 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 567.577253][T30132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 567.577269][T30132] Call Trace: [ 567.577277][T30132] [ 567.577287][T30132] __dump_stack+0x1d/0x30 [ 567.577314][T30132] dump_stack_lvl+0xe8/0x140 [ 567.577335][T30132] dump_stack+0x15/0x1b [ 567.577351][T30132] should_fail_ex+0x265/0x280 [ 567.577454][T30132] should_failslab+0x8c/0xb0 [ 567.577518][T30132] kmem_cache_alloc_noprof+0x50/0x310 [ 567.577616][T30132] ? skb_clone+0x151/0x1f0 [ 567.577641][T30132] skb_clone+0x151/0x1f0 [ 567.577666][T30132] __netlink_deliver_tap+0x2c9/0x500 [ 567.577708][T30132] netlink_sendskb+0x126/0x150 [ 567.577778][T30132] netlink_unicast+0x28a/0x670 [ 567.577817][T30132] netlink_ack+0x4c8/0x500 [ 567.577875][T30132] netlink_rcv_skb+0x192/0x220 [ 567.577928][T30132] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 567.577959][T30132] rtnetlink_rcv+0x1c/0x30 [ 567.578035][T30132] netlink_unicast+0x59e/0x670 [ 567.578069][T30132] netlink_sendmsg+0x58b/0x6b0 [ 567.578103][T30132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.578204][T30132] __sock_sendmsg+0x142/0x180 [ 567.578230][T30132] __sys_sendto+0x268/0x330 [ 567.578317][T30132] __x64_sys_sendto+0x76/0x90 [ 567.578397][T30132] x64_sys_call+0x2eb6/0x2fb0 [ 567.578500][T30132] do_syscall_64+0xd0/0x1a0 [ 567.578548][T30132] ? clear_bhb_loop+0x25/0x80 [ 567.578574][T30132] ? clear_bhb_loop+0x25/0x80 [ 567.578598][T30132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.578625][T30132] RIP: 0033:0x7f3b26bde969 [ 567.578688][T30132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.578711][T30132] RSP: 002b:00007f3b25247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 567.578730][T30132] RAX: ffffffffffffffda RBX: 00007f3b26e05fa0 RCX: 00007f3b26bde969 [ 567.578742][T30132] RDX: 0000000000000078 RSI: 0000200000000000 RDI: 0000000000000006 [ 567.578753][T30132] RBP: 00007f3b25247090 R08: 0000000000000000 R09: 0000000000000000 [ 567.578765][T30132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 567.578812][T30132] R13: 0000000000000000 R14: 00007f3b26e05fa0 R15: 00007ffc155c0888 [ 567.578855][T30132] [ 567.966394][T30161] net_ratelimit: 30 callbacks suppressed [ 567.966414][T30161] openvswitch: netlink: Message has 6 unknown bytes. [ 568.105601][T30183] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 568.114697][T30183] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 568.136334][T30186] __nla_validate_parse: 1 callbacks suppressed [ 568.136350][T30186] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9296'. [ 568.973605][T30225] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9318'. [ 569.006209][T30249] bridge0: entered promiscuous mode [ 569.012419][T30249] macvlan2: entered promiscuous mode [ 569.022033][T30249] bridge0: port 3(macvlan2) entered blocking state [ 569.028650][T30249] bridge0: port 3(macvlan2) entered disabled state [ 569.039224][T30249] macvlan2: entered allmulticast mode [ 569.044768][T30249] bridge0: entered allmulticast mode [ 569.057196][T30249] macvlan2: left allmulticast mode [ 569.063153][T30249] bridge0: left allmulticast mode [ 569.069400][T30249] bridge0: left promiscuous mode [ 569.260326][T30277] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9341'. [ 569.279452][T30277] team0: Unable to change to the same mode the team is in [ 569.326958][T30269] futex_wake_op: syz.5.9337 tries to shift op by -1; fix this program [ 569.369905][T30295] loop2: detected capacity change from 0 to 512 [ 569.376906][T30295] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 569.390399][T30294] netlink: 35 bytes leftover after parsing attributes in process `syz.8.9347'. [ 569.400140][T30294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9347'. [ 569.588689][T30297] lo speed is unknown, defaulting to 1000 [ 569.611886][T30303] loop2: detected capacity change from 0 to 2048 [ 569.668764][T30303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.755723][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.774545][T30316] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9355'. [ 569.784372][T30316] team0: No ports can be present during mode change [ 569.853955][T30328] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 569.875234][T30324] loop2: detected capacity change from 0 to 2048 [ 569.910175][T30324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.938466][T30336] netlink: 52 bytes leftover after parsing attributes in process `syz.8.9363'. [ 569.955988][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.036867][T30340] SELinux: failed to load policy [ 570.073442][T30348] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9368'. [ 570.169467][T30354] loop2: detected capacity change from 0 to 512 [ 570.202259][T30354] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 570.269573][T30354] EXT4-fs (loop2): mount failed [ 570.321651][T30374] 9pnet_fd: Insufficient options for proto=fd [ 570.502694][T30395] loop2: detected capacity change from 0 to 2048 [ 570.525870][T30397] netlink: 256 bytes leftover after parsing attributes in process `syz.6.9388'. [ 570.550559][T30395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.589513][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 570.589539][ T29] audit: type=1326 audit(2000000316.526:34058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30394 comm="syz.2.9387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63dfe969 code=0x7ffc0000 [ 570.620133][ T29] audit: type=1326 audit(2000000316.526:34059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30394 comm="syz.2.9387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f8f63dfe969 code=0x7ffc0000 [ 570.644557][ T29] audit: type=1326 audit(2000000316.526:34060): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30394 comm="syz.2.9387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63dfe969 code=0x7ffc0000 [ 570.654975][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.714923][ T29] audit: type=1326 audit(2000000316.657:34061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30404 comm="syz.6.9390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381080e969 code=0x7ffc0000 [ 570.738787][ T29] audit: type=1326 audit(2000000316.657:34062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30404 comm="syz.6.9390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f381080e969 code=0x7ffc0000 [ 570.763364][ T29] audit: type=1326 audit(2000000316.657:34063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30404 comm="syz.6.9390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381080e969 code=0x7ffc0000 [ 570.883010][T30419] serio: Serial port ptm0 [ 570.945522][T30425] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 33273 - 0 [ 570.954785][T30425] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 33273 - 0 [ 570.963227][T30425] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 33273 - 0 [ 570.971800][T30425] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 33273 - 0 [ 570.980353][ T29] audit: type=1326 audit(2000000316.863:34064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30424 comm="syz.8.9401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34abde969 code=0x7ffc0000 [ 571.004838][ T29] audit: type=1326 audit(2000000316.863:34065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30424 comm="syz.8.9401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe34abde969 code=0x7ffc0000 [ 571.028571][ T29] audit: type=1326 audit(2000000316.863:34066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30424 comm="syz.8.9401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34abde969 code=0x7ffc0000 [ 571.053225][ T29] audit: type=1326 audit(2000000316.863:34067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30424 comm="syz.8.9401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe34abde969 code=0x7ffc0000 [ 571.077616][T30425] netdevsim netdevsim8 eth0: set [1, 2] type 2 family 0 port 58183 - 0 [ 571.086667][T30425] netdevsim netdevsim8 eth1: set [1, 2] type 2 family 0 port 58183 - 0 [ 571.095045][T30425] netdevsim netdevsim8 eth2: set [1, 2] type 2 family 0 port 58183 - 0 [ 571.103545][T30425] netdevsim netdevsim8 eth3: set [1, 2] type 2 family 0 port 58183 - 0 [ 571.112204][T30425] geneve2: entered promiscuous mode [ 571.118191][T30425] geneve2: entered allmulticast mode [ 571.364954][T30457] netlink: 132 bytes leftover after parsing attributes in process `syz.7.9415'. [ 571.396686][T30460] loop2: detected capacity change from 0 to 2048 [ 571.440194][T30467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30467 comm=syz.7.9415 [ 571.455633][T30460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.494342][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.534007][T30476] futex_wake_op: syz.8.9421 tries to shift op by -1; fix this program [ 571.573694][T30478] loop2: detected capacity change from 0 to 512 [ 571.586556][T30478] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 571.649917][T30492] 9pnet_fd: Insufficient options for proto=fd [ 571.721841][T30499] netlink: 'syz.5.9432': attribute type 6 has an invalid length. [ 571.823469][T30508] batman_adv: batadv0: Adding interface: dummy0 [ 571.829793][T30508] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.858408][T30508] batman_adv: batadv0: Interface activated: dummy0 [ 571.866590][T30504] team0: Unable to change to the same mode the team is in [ 571.873937][T30506] 0ªX¹¦À: renamed from caif0 [ 571.880996][T30506] 0ªX¹¦À: entered allmulticast mode [ 571.886999][T30506] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 571.908183][T30508] batadv0: mtu less than device minimum [ 571.914253][T30508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 571.925111][T30508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 571.936099][T30508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 571.947116][T30508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 571.957974][T30508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 571.968704][T30508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 571.980402][T30514] futex_wake_op: syz.2.9436 tries to shift op by -1; fix this program [ 571.992438][T30506] rdma_rxe: rxe_newlink: failed to add lo [ 572.019754][T30520] FAULT_INJECTION: forcing a failure. [ 572.019754][T30520] name failslab, interval 1, probability 0, space 0, times 0 [ 572.032642][T30520] CPU: 0 UID: 0 PID: 30520 Comm: syz.6.9441 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 572.032671][T30520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 572.032683][T30520] Call Trace: [ 572.032733][T30520] [ 572.032743][T30520] __dump_stack+0x1d/0x30 [ 572.032770][T30520] dump_stack_lvl+0xe8/0x140 [ 572.032792][T30520] dump_stack+0x15/0x1b [ 572.032809][T30520] should_fail_ex+0x265/0x280 [ 572.032840][T30520] should_failslab+0x8c/0xb0 [ 572.032927][T30520] kmem_cache_alloc_noprof+0x50/0x310 [ 572.032971][T30520] ? skb_clone+0x151/0x1f0 [ 572.032998][T30520] skb_clone+0x151/0x1f0 [ 572.033044][T30520] nfnetlink_rcv+0x305/0x1690 [ 572.033073][T30520] ? __kfree_skb+0x109/0x150 [ 572.033111][T30520] ? nlmon_xmit+0x4f/0x60 [ 572.033198][T30520] ? nlmon_xmit+0x4f/0x60 [ 572.033221][T30520] ? dev_hard_start_xmit+0x39e/0x3d0 [ 572.033262][T30520] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 572.033284][T30520] ? __dev_queue_xmit+0x182/0x1fb0 [ 572.033307][T30520] ? skb_clone+0x151/0x1f0 [ 572.033332][T30520] ? ref_tracker_free+0x37d/0x3e0 [ 572.033429][T30520] netlink_unicast+0x59e/0x670 [ 572.033469][T30520] netlink_sendmsg+0x58b/0x6b0 [ 572.033577][T30520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.033656][T30520] __sock_sendmsg+0x142/0x180 [ 572.033763][T30520] ____sys_sendmsg+0x31e/0x4e0 [ 572.033793][T30520] ___sys_sendmsg+0x17b/0x1d0 [ 572.033835][T30520] __x64_sys_sendmsg+0xd4/0x160 [ 572.033865][T30520] x64_sys_call+0x2999/0x2fb0 [ 572.033891][T30520] do_syscall_64+0xd0/0x1a0 [ 572.033985][T30520] ? clear_bhb_loop+0x25/0x80 [ 572.034011][T30520] ? clear_bhb_loop+0x25/0x80 [ 572.034036][T30520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.034099][T30520] RIP: 0033:0x7f381080e969 [ 572.034114][T30520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.034132][T30520] RSP: 002b:00007f380ee77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.034172][T30520] RAX: ffffffffffffffda RBX: 00007f3810a35fa0 RCX: 00007f381080e969 [ 572.034186][T30520] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 572.034263][T30520] RBP: 00007f380ee77090 R08: 0000000000000000 R09: 0000000000000000 [ 572.034277][T30520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.034291][T30520] R13: 0000000000000000 R14: 00007f3810a35fa0 R15: 00007ffc63e3a518 [ 572.034313][T30520] [ 572.628559][T30551] futex_wake_op: syz.8.9455 tries to shift op by -1; fix this program [ 572.638834][T30549] FAULT_INJECTION: forcing a failure. [ 572.638834][T30549] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 572.652232][T30549] CPU: 1 UID: 0 PID: 30549 Comm: syz.5.9454 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 572.652265][T30549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 572.652356][T30549] Call Trace: [ 572.652361][T30549] [ 572.652369][T30549] __dump_stack+0x1d/0x30 [ 572.652390][T30549] dump_stack_lvl+0xe8/0x140 [ 572.652475][T30549] dump_stack+0x15/0x1b [ 572.652494][T30549] should_fail_ex+0x265/0x280 [ 572.652604][T30549] should_fail_alloc_page+0xf2/0x100 [ 572.652669][T30549] __alloc_frozen_pages_noprof+0xff/0x360 [ 572.652706][T30549] alloc_pages_mpol+0xb3/0x250 [ 572.652729][T30549] vma_alloc_folio_noprof+0x1aa/0x300 [ 572.652753][T30549] do_wp_page+0x673/0x23e0 [ 572.652842][T30549] ? __rcu_read_lock+0x37/0x50 [ 572.652945][T30549] handle_mm_fault+0x6dc/0x2ae0 [ 572.653046][T30549] ? mas_walk+0xf2/0x120 [ 572.653072][T30549] do_user_addr_fault+0x636/0x1090 [ 572.653187][T30549] ? fpregs_assert_state_consistent+0x84/0xa0 [ 572.653224][T30549] exc_page_fault+0x54/0xc0 [ 572.653344][T30549] asm_exc_page_fault+0x26/0x30 [ 572.653382][T30549] RIP: 0033:0x7f3b26aa0d70 [ 572.653400][T30549] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 572.653422][T30549] RSP: 002b:00007f3b252464a0 EFLAGS: 00010202 [ 572.653441][T30549] RAX: 0000000000005005 RBX: 00007f3b25246540 RCX: 0000000000000013 [ 572.653457][T30549] RDX: 00000000000001ff RSI: 0000000000000400 RDI: 00007f3b252465e0 [ 572.653470][T30549] RBP: 0000000000000014 R08: 00007f3b1ce27000 R09: 0000000000000004 [ 572.653484][T30549] R10: 0000200000001b42 R11: 00000000000004cb R12: 0000000000000301 [ 572.653589][T30549] R13: 00007f3b26c7bfc0 R14: 0000000000000013 R15: 00007f3b252465e0 [ 572.653612][T30549] [ 572.834669][T30549] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 573.303724][T30590] netlink: 'syz.6.9474': attribute type 4 has an invalid length. [ 573.478699][T30608] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 573.485308][T30608] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 573.493679][T30608] vhci_hcd vhci_hcd.0: Device attached [ 573.540871][T30612] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(7) [ 573.547442][T30612] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 573.555717][T30612] vhci_hcd vhci_hcd.0: Device attached [ 573.625124][T30626] 9pnet_fd: Insufficient options for proto=fd [ 573.631616][T30609] vhci_hcd: connection closed [ 573.631765][T21998] vhci_hcd: stop threads [ 573.640783][T21998] vhci_hcd: release socket [ 573.645205][T21998] vhci_hcd: disconnect device [ 573.652407][T30615] vhci_hcd: connection closed [ 573.652606][T21998] vhci_hcd: stop threads [ 573.661601][T21998] vhci_hcd: release socket [ 573.666086][T21998] vhci_hcd: disconnect device [ 573.690306][ T3390] vhci_hcd: vhci_device speed not set [ 573.744759][T30632] __nla_validate_parse: 6 callbacks suppressed [ 573.744777][T30632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9472'. [ 573.801332][T30638] xt_hashlimit: size too large, truncated to 1048576 [ 573.808915][T30638] xt_hashlimit: max too large, truncated to 1048576 [ 574.021728][T30662] FAULT_INJECTION: forcing a failure. [ 574.021728][T30662] name failslab, interval 1, probability 0, space 0, times 0 [ 574.034547][T30662] CPU: 0 UID: 0 PID: 30662 Comm: syz.2.9506 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 574.034628][T30662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 574.034707][T30662] Call Trace: [ 574.034715][T30662] [ 574.034723][T30662] __dump_stack+0x1d/0x30 [ 574.034757][T30662] dump_stack_lvl+0xe8/0x140 [ 574.034775][T30662] dump_stack+0x15/0x1b [ 574.034794][T30662] should_fail_ex+0x265/0x280 [ 574.034834][T30662] should_failslab+0x8c/0xb0 [ 574.034909][T30662] __kvmalloc_node_noprof+0x126/0x4d0 [ 574.034935][T30662] ? xt_alloc_entry_offsets+0x48/0x50 [ 574.034980][T30662] ? __rcu_read_unlock+0x4f/0x70 [ 574.035005][T30662] xt_alloc_entry_offsets+0x48/0x50 [ 574.035039][T30662] translate_table+0xa9/0x1070 [ 574.035074][T30662] ? __memcg_slab_post_alloc_hook+0x464/0x5a0 [ 574.035107][T30662] ? should_fail_ex+0xdb/0x280 [ 574.035147][T30662] ? _copy_from_user+0x89/0xb0 [ 574.035175][T30662] do_ip6t_set_ctl+0x678/0x840 [ 574.035323][T30662] nf_setsockopt+0x196/0x1b0 [ 574.035398][T30662] ipv6_setsockopt+0x11a/0x130 [ 574.035425][T30662] udpv6_setsockopt+0x99/0xb0 [ 574.035455][T30662] sock_common_setsockopt+0x66/0x80 [ 574.035560][T30662] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 574.035587][T30662] __sys_setsockopt+0x181/0x200 [ 574.035625][T30662] __x64_sys_setsockopt+0x64/0x80 [ 574.035695][T30662] x64_sys_call+0x2bd5/0x2fb0 [ 574.035852][T30662] do_syscall_64+0xd0/0x1a0 [ 574.035919][T30662] ? clear_bhb_loop+0x25/0x80 [ 574.035946][T30662] ? clear_bhb_loop+0x25/0x80 [ 574.035974][T30662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.036071][T30662] RIP: 0033:0x7f8f63dfe969 [ 574.036090][T30662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.036160][T30662] RSP: 002b:00007f8f62467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 574.036177][T30662] RAX: ffffffffffffffda RBX: 00007f8f64025fa0 RCX: 00007f8f63dfe969 [ 574.036191][T30662] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 574.036269][T30662] RBP: 00007f8f62467090 R08: 0000000000000458 R09: 0000000000000000 [ 574.036284][T30662] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 574.036306][T30662] R13: 0000000000000000 R14: 00007f8f64025fa0 R15: 00007ffd5a178b68 [ 574.036324][T30662] [ 574.404887][T30667] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 574.411468][T30667] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 574.419650][T30667] vhci_hcd vhci_hcd.0: Device attached [ 574.425970][T30678] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9512'. [ 574.432727][T30667] xt_hashlimit: max too large, truncated to 1048576 [ 574.438622][T30678] team0: Unable to change to the same mode the team is in [ 574.452521][T30667] FAULT_INJECTION: forcing a failure. [ 574.452521][T30667] name failslab, interval 1, probability 0, space 0, times 0 [ 574.465395][T30667] CPU: 0 UID: 0 PID: 30667 Comm: syz.2.9508 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 574.465431][T30667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 574.465444][T30667] Call Trace: [ 574.465449][T30667] [ 574.465456][T30667] __dump_stack+0x1d/0x30 [ 574.465540][T30667] dump_stack_lvl+0xe8/0x140 [ 574.465565][T30667] dump_stack+0x15/0x1b [ 574.465583][T30667] should_fail_ex+0x265/0x280 [ 574.465624][T30667] should_failslab+0x8c/0xb0 [ 574.465662][T30667] __kmalloc_noprof+0xa5/0x3e0 [ 574.465783][T30667] ? bpf_prepare_filter+0x476/0xbd0 [ 574.465825][T30667] bpf_prepare_filter+0x476/0xbd0 [ 574.465866][T30667] bpf_prog_create+0xd4/0x130 [ 574.465897][T30667] bpf_mt_check+0x8d/0x110 [ 574.465979][T30667] xt_check_match+0x2aa/0x4f0 [ 574.466015][T30667] ? xt_find_match+0x1d1/0x210 [ 574.466057][T30667] ? xt_find_match+0x1b5/0x210 [ 574.466137][T30667] translate_table+0xa9c/0xf90 [ 574.466180][T30667] ? _copy_from_user+0x89/0xb0 [ 574.466210][T30667] do_ipt_set_ctl+0x66f/0x820 [ 574.466242][T30667] ? _raw_spin_unlock_bh+0x36/0x40 [ 574.466338][T30667] ? lock_sock_nested+0x112/0x140 [ 574.466370][T30667] ? __rcu_read_unlock+0x4f/0x70 [ 574.466403][T30667] nf_setsockopt+0x196/0x1b0 [ 574.466446][T30667] ip_setsockopt+0x102/0x110 [ 574.466511][T30667] udp_setsockopt+0x99/0xb0 [ 574.466540][T30667] sock_common_setsockopt+0x66/0x80 [ 574.466595][T30667] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 574.466630][T30667] __sys_setsockopt+0x181/0x200 [ 574.466748][T30667] __x64_sys_setsockopt+0x64/0x80 [ 574.466790][T30667] x64_sys_call+0x2bd5/0x2fb0 [ 574.466819][T30667] do_syscall_64+0xd0/0x1a0 [ 574.466846][T30667] ? clear_bhb_loop+0x25/0x80 [ 574.466873][T30667] ? clear_bhb_loop+0x25/0x80 [ 574.466900][T30667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.466965][T30667] RIP: 0033:0x7f8f63dfe969 [ 574.466984][T30667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.467007][T30667] RSP: 002b:00007f8f62467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 574.467030][T30667] RAX: ffffffffffffffda RBX: 00007f8f64025fa0 RCX: 00007f8f63dfe969 [ 574.467087][T30667] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000b [ 574.467103][T30667] RBP: 00007f8f62467090 R08: 0000000000000580 R09: 0000000000000000 [ 574.467185][T30667] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002 [ 574.467200][T30667] R13: 0000000000000000 R14: 00007f8f64025fa0 R15: 00007ffd5a178b68 [ 574.467224][T30667] [ 574.467241][T30667] xt_bpf: check failed: parse error [ 574.743739][T30675] vhci_hcd: connection closed [ 574.747715][T22007] vhci_hcd: stop threads [ 574.756849][T22007] vhci_hcd: release socket [ 574.761947][T22007] vhci_hcd: disconnect device [ 574.802740][ T3392] vhci_hcd: vhci_device speed not set [ 574.823149][T30699] FAULT_INJECTION: forcing a failure. [ 574.823149][T30699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.837021][T30699] CPU: 1 UID: 0 PID: 30699 Comm: syz.6.9523 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 574.837127][T30699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 574.837139][T30699] Call Trace: [ 574.837145][T30699] [ 574.837153][T30699] __dump_stack+0x1d/0x30 [ 574.837173][T30699] dump_stack_lvl+0xe8/0x140 [ 574.837195][T30699] dump_stack+0x15/0x1b [ 574.837216][T30699] should_fail_ex+0x265/0x280 [ 574.837304][T30699] should_fail+0xb/0x20 [ 574.837331][T30699] should_fail_usercopy+0x1a/0x20 [ 574.837378][T30699] copy_fpstate_to_sigframe+0x62b/0x7d0 [ 574.837460][T30699] ? copy_fpstate_to_sigframe+0xe5/0x7d0 [ 574.837495][T30699] get_sigframe+0x34d/0x490 [ 574.837533][T30699] ? get_signal+0xdc8/0xf70 [ 574.837603][T30699] x64_setup_rt_frame+0xa8/0x580 [ 574.837643][T30699] arch_do_signal_or_restart+0x26e/0x480 [ 574.837749][T30699] syscall_exit_to_user_mode+0x68/0xb0 [ 574.837774][T30699] do_syscall_64+0xdd/0x1a0 [ 574.837802][T30699] ? clear_bhb_loop+0x25/0x80 [ 574.837828][T30699] ? clear_bhb_loop+0x25/0x80 [ 574.837875][T30699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.837896][T30699] RIP: 0033:0x7f381080e967 [ 574.837990][T30699] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 574.838009][T30699] RSP: 002b:00007f380ee77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 574.838029][T30699] RAX: 0000000000000116 RBX: 00007f3810a35fa0 RCX: 00007f381080e969 [ 574.838042][T30699] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 574.838054][T30699] RBP: 00007f380ee77090 R08: 0000000000000000 R09: 0000000000000000 [ 574.838066][T30699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.838078][T30699] R13: 0000000000000000 R14: 00007f3810a35fa0 R15: 00007ffc63e3a518 [ 574.838165][T30699] [ 575.046540][T30702] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9524'. [ 575.055835][T30702] team0: Unable to change to the same mode the team is in [ 575.120976][T30710] netlink: 'syz.7.9529': attribute type 3 has an invalid length. [ 575.235863][T30726] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9535'. [ 575.264543][T30728] net_ratelimit: 13 callbacks suppressed [ 575.264564][T30728] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 575.305310][T30728] futex_wake_op: syz.5.9537 tries to shift op by -1; fix this program [ 575.542053][T30762] serio: Serial port ptm0 [ 575.581557][T30766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9553'. [ 575.640496][T30769] loop2: detected capacity change from 0 to 512 [ 575.657124][T30769] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 575.682033][T30769] EXT4-fs (loop2): 1 truncate cleaned up [ 575.695065][T30769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.847249][T30789] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9563'. [ 575.867048][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.891410][T30791] FAULT_INJECTION: forcing a failure. [ 575.891410][T30791] name failslab, interval 1, probability 0, space 0, times 0 [ 575.904839][T30791] CPU: 0 UID: 0 PID: 30791 Comm: syz.2.9564 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 575.904868][T30791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 575.904885][T30791] Call Trace: [ 575.904893][T30791] [ 575.904902][T30791] __dump_stack+0x1d/0x30 [ 575.904990][T30791] dump_stack_lvl+0xe8/0x140 [ 575.905009][T30791] dump_stack+0x15/0x1b [ 575.905025][T30791] should_fail_ex+0x265/0x280 [ 575.905079][T30791] should_failslab+0x8c/0xb0 [ 575.905110][T30791] kmem_cache_alloc_node_noprof+0x57/0x320 [ 575.905229][T30791] ? __alloc_skb+0x101/0x320 [ 575.905263][T30791] __alloc_skb+0x101/0x320 [ 575.905317][T30791] batadv_netlink_tp_meter_start+0xa2/0x260 [ 575.905356][T30791] ? batadv_meshif_is_valid+0x23/0x40 [ 575.905387][T30791] genl_family_rcv_msg_doit+0x140/0x1b0 [ 575.905504][T30791] genl_rcv_msg+0x422/0x460 [ 575.905533][T30791] ? __pfx_batadv_pre_doit+0x10/0x10 [ 575.905634][T30791] ? __pfx_batadv_netlink_tp_meter_start+0x10/0x10 [ 575.905664][T30791] ? __pfx_batadv_post_doit+0x10/0x10 [ 575.905696][T30791] netlink_rcv_skb+0x120/0x220 [ 575.905760][T30791] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.905798][T30791] genl_rcv+0x28/0x40 [ 575.905821][T30791] netlink_unicast+0x59e/0x670 [ 575.905919][T30791] netlink_sendmsg+0x58b/0x6b0 [ 575.905953][T30791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.906015][T30791] __sock_sendmsg+0x142/0x180 [ 575.906046][T30791] ____sys_sendmsg+0x31e/0x4e0 [ 575.906076][T30791] ___sys_sendmsg+0x17b/0x1d0 [ 575.906109][T30791] __x64_sys_sendmsg+0xd4/0x160 [ 575.906152][T30791] x64_sys_call+0x2999/0x2fb0 [ 575.906179][T30791] do_syscall_64+0xd0/0x1a0 [ 575.906206][T30791] ? clear_bhb_loop+0x25/0x80 [ 575.906227][T30791] ? clear_bhb_loop+0x25/0x80 [ 575.906266][T30791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.906292][T30791] RIP: 0033:0x7f8f63dfe969 [ 575.906311][T30791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.906334][T30791] RSP: 002b:00007f8f62467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.906379][T30791] RAX: ffffffffffffffda RBX: 00007f8f64025fa0 RCX: 00007f8f63dfe969 [ 575.906391][T30791] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 575.906448][T30791] RBP: 00007f8f62467090 R08: 0000000000000000 R09: 0000000000000000 [ 575.906464][T30791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.906479][T30791] R13: 0000000000000000 R14: 00007f8f64025fa0 R15: 00007ffd5a178b68 [ 575.906554][T30791] [ 576.293968][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 576.293986][ T29] audit: type=1326 audit(2000000321.877:34299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30801 comm="syz.7.9568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049559e969 code=0x7ffc0000 [ 576.355623][ T29] audit: type=1326 audit(2000000321.914:34300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30801 comm="syz.7.9568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f049559e969 code=0x7ffc0000 [ 576.379360][ T29] audit: type=1326 audit(2000000321.914:34301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30801 comm="syz.7.9568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049559e969 code=0x7ffc0000 [ 576.403823][ T29] audit: type=1326 audit(2000000321.914:34302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30801 comm="syz.7.9568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f049559e969 code=0x7ffc0000 [ 576.428495][ T29] audit: type=1326 audit(2000000321.914:34303): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30801 comm="syz.7.9568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049559e969 code=0x7ffc0000 [ 576.492412][ T29] audit: type=1326 audit(2000000322.064:34304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30810 comm="syz.5.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b26bde969 code=0x7ffc0000 [ 576.519131][ T29] audit: type=1326 audit(2000000322.082:34305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30810 comm="syz.5.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f3b26bde969 code=0x7ffc0000 [ 576.519171][ T29] audit: type=1326 audit(2000000322.082:34306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30810 comm="syz.5.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b26bde969 code=0x7ffc0000 [ 576.598847][T30816] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9575'. [ 576.598878][T30816] team0: Unable to change to the same mode the team is in [ 576.830221][ T29] audit: type=1400 audit(2000000322.372:34307): avc: denied { setopt } for pid=30830 comm="syz.6.9580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 576.920352][T30840] serio: Serial port ptm0 [ 576.997541][ T29] audit: type=1326 audit(2000000322.541:34308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30838 comm="syz.8.9586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34abde969 code=0x7ffc0000 [ 577.060460][T30847] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9587'. [ 577.080357][T30847] team0: Unable to change to the same mode the team is in [ 577.683998][T30861] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 577.690644][T30861] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 577.698208][T30861] vhci_hcd vhci_hcd.0: Device attached [ 577.754593][T30861] xt_hashlimit: max too large, truncated to 1048576 [ 577.762007][T30861] Cannot find set identified by id 0 to match [ 577.778065][T30863] vhci_hcd: connection closed [ 577.788321][T30831] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 577.825465][T22007] vhci_hcd: stop threads [ 577.829861][T22007] vhci_hcd: release socket [ 577.834285][T22007] vhci_hcd: disconnect device [ 577.993939][T30879] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9599'. [ 578.015620][T30879] team0: Unable to change to the same mode the team is in [ 578.088432][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810e7c7e00: rx timeout, send abort [ 578.124829][T30885] loop2: detected capacity change from 0 to 2048 [ 578.171877][T30885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.213688][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.234919][T30893] serio: Serial port ptm0 [ 578.250807][T30895] loop2: detected capacity change from 0 to 2048 [ 578.298138][T30895] loop2: p1 < > p4 [ 578.302693][T30895] loop2: p4 size 8388608 extends beyond EOD, truncated [ 578.334037][T30897] lo speed is unknown, defaulting to 1000 [ 578.378597][T30905] loop2: detected capacity change from 0 to 512 [ 578.399895][T30905] EXT4-fs: Ignoring removed mblk_io_submit option [ 578.416057][T30905] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 578.424298][T30905] EXT4-fs (loop2): orphan cleanup on readonly fs [ 578.433081][T30905] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 578.450879][T30905] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 578.458393][T30905] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9610: bg 0: block 40: padding at end of block bitmap is not set [ 578.474996][T30905] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 578.475458][T30911] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9612'. [ 578.485159][T30905] EXT4-fs (loop2): 1 truncate cleaned up [ 578.496004][T30911] team0: No ports can be present during mode change [ 578.505023][T30905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 578.535240][T30905] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.9610: corrupted xattr block 31: invalid header [ 578.558651][T30905] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 578.570064][T30905] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.9610: corrupted xattr block 31: invalid header [ 578.583548][T30905] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 578.602688][T30905] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.9610: bad symlink. [ 578.622482][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810e7c7000: rx timeout, send abort [ 578.631311][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810e7c7e00: abort rx timeout. Force session deactivation [ 578.689933][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.800266][T30920] serio: Serial port ptm1 [ 579.012112][T30948] lo speed is unknown, defaulting to 1000 [ 579.165254][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810e7c7000: abort rx timeout. Force session deactivation [ 579.202925][T30953] lo speed is unknown, defaulting to 1000 [ 579.471702][T30992] SELinux: policydb version 179262298 does not match my version range 15-34 [ 579.490031][T30992] SELinux: failed to load policy [ 579.690212][T30998] FAULT_INJECTION: forcing a failure. [ 579.690212][T30998] name failslab, interval 1, probability 0, space 0, times 0 [ 579.703059][T30998] CPU: 0 UID: 0 PID: 30998 Comm: syz.2.9647 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 579.703159][T30998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 579.703176][T30998] Call Trace: [ 579.703184][T30998] [ 579.703195][T30998] __dump_stack+0x1d/0x30 [ 579.703221][T30998] dump_stack_lvl+0xe8/0x140 [ 579.703247][T30998] dump_stack+0x15/0x1b [ 579.703268][T30998] should_fail_ex+0x265/0x280 [ 579.703330][T30998] should_failslab+0x8c/0xb0 [ 579.703423][T30998] kmem_cache_alloc_noprof+0x50/0x310 [ 579.703456][T30998] ? skb_clone+0x151/0x1f0 [ 579.703485][T30998] skb_clone+0x151/0x1f0 [ 579.703550][T30998] __netlink_deliver_tap+0x2c9/0x500 [ 579.703588][T30998] netlink_unicast+0x64c/0x670 [ 579.703626][T30998] netlink_sendmsg+0x58b/0x6b0 [ 579.703671][T30998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.703734][T30998] __sock_sendmsg+0x142/0x180 [ 579.703789][T30998] ____sys_sendmsg+0x31e/0x4e0 [ 579.703818][T30998] ___sys_sendmsg+0x17b/0x1d0 [ 579.703861][T30998] __x64_sys_sendmsg+0xd4/0x160 [ 579.703890][T30998] x64_sys_call+0x2999/0x2fb0 [ 579.703911][T30998] do_syscall_64+0xd0/0x1a0 [ 579.703932][T30998] ? clear_bhb_loop+0x25/0x80 [ 579.703992][T30998] ? clear_bhb_loop+0x25/0x80 [ 579.704091][T30998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.704115][T30998] RIP: 0033:0x7f8f63dfe969 [ 579.704134][T30998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.704157][T30998] RSP: 002b:00007f8f62467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.704257][T30998] RAX: ffffffffffffffda RBX: 00007f8f64025fa0 RCX: 00007f8f63dfe969 [ 579.704273][T30998] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 579.704289][T30998] RBP: 00007f8f62467090 R08: 0000000000000000 R09: 0000000000000000 [ 579.704305][T30998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.704377][T30998] R13: 0000000000000000 R14: 00007f8f64025fa0 R15: 00007ffd5a178b68 [ 579.704436][T30998] [ 579.914759][T30998] netlink: 'syz.2.9647': attribute type 10 has an invalid length. [ 579.926850][T30998] team0: Device veth1_macvtap failed to register rx_handler [ 579.962333][T31000] loop2: detected capacity change from 0 to 128 [ 579.975008][T31000] EXT4-fs: Ignoring removed nobh option [ 579.985322][T31000] EXT4-fs: test_dummy_encryption option not supported [ 580.279211][T31022] loop2: detected capacity change from 0 to 1024 [ 580.320954][T31022] EXT4-fs: Ignoring removed nobh option [ 580.355250][T31030] program syz.7.9661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 580.365233][T31022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.404702][T31030] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 580.611205][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.697701][T31066] futex_wake_op: syz.8.9672 tries to shift op by -1; fix this program [ 581.367973][T31099] loop2: detected capacity change from 0 to 2048 [ 581.410666][T31099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.466718][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.679584][T31116] FAULT_INJECTION: forcing a failure. [ 581.679584][T31116] name failslab, interval 1, probability 0, space 0, times 0 [ 581.692344][T31116] CPU: 1 UID: 0 PID: 31116 Comm: syz.2.9691 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 581.692374][T31116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 581.692443][T31116] Call Trace: [ 581.692451][T31116] [ 581.692461][T31116] __dump_stack+0x1d/0x30 [ 581.692482][T31116] dump_stack_lvl+0xe8/0x140 [ 581.692586][T31116] dump_stack+0x15/0x1b [ 581.692623][T31116] should_fail_ex+0x265/0x280 [ 581.692657][T31116] should_failslab+0x8c/0xb0 [ 581.692685][T31116] __kmalloc_noprof+0xa5/0x3e0 [ 581.692702][T31116] ? ethnl_default_start+0xe6/0x330 [ 581.692821][T31116] ethnl_default_start+0xe6/0x330 [ 581.692856][T31116] ? __pfx_ethnl_default_start+0x10/0x10 [ 581.692897][T31116] genl_start+0x2e0/0x390 [ 581.692985][T31116] __netlink_dump_start+0x331/0x520 [ 581.693046][T31116] genl_family_rcv_msg_dumpit+0x115/0x180 [ 581.693077][T31116] ? __pfx_genl_start+0x10/0x10 [ 581.693177][T31116] ? __pfx_genl_dumpit+0x10/0x10 [ 581.693206][T31116] ? __pfx_genl_done+0x10/0x10 [ 581.693278][T31116] genl_rcv_msg+0x3f0/0x460 [ 581.693325][T31116] ? __pfx_ethnl_default_start+0x10/0x10 [ 581.693432][T31116] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 581.693469][T31116] ? __pfx_ethnl_default_done+0x10/0x10 [ 581.693544][T31116] netlink_rcv_skb+0x120/0x220 [ 581.693583][T31116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 581.693679][T31116] genl_rcv+0x28/0x40 [ 581.693705][T31116] netlink_unicast+0x59e/0x670 [ 581.693741][T31116] netlink_sendmsg+0x58b/0x6b0 [ 581.693845][T31116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.693884][T31116] __sock_sendmsg+0x142/0x180 [ 581.693918][T31116] ____sys_sendmsg+0x31e/0x4e0 [ 581.693973][T31116] ___sys_sendmsg+0x17b/0x1d0 [ 581.694007][T31116] __x64_sys_sendmsg+0xd4/0x160 [ 581.694030][T31116] x64_sys_call+0x2999/0x2fb0 [ 581.694052][T31116] do_syscall_64+0xd0/0x1a0 [ 581.694080][T31116] ? clear_bhb_loop+0x25/0x80 [ 581.694177][T31116] ? clear_bhb_loop+0x25/0x80 [ 581.694201][T31116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.694222][T31116] RIP: 0033:0x7f8f63dfe969 [ 581.694236][T31116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.694327][T31116] RSP: 002b:00007f8f62467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.694350][T31116] RAX: ffffffffffffffda RBX: 00007f8f64025fa0 RCX: 00007f8f63dfe969 [ 581.694365][T31116] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 581.694381][T31116] RBP: 00007f8f62467090 R08: 0000000000000000 R09: 0000000000000000 [ 581.694404][T31116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.694470][T31116] R13: 0000000000000000 R14: 00007f8f64025fa0 R15: 00007ffd5a178b68 [ 581.694490][T31116] [ 581.752068][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 581.752088][ T29] audit: type=1326 audit(2000000326.937:34669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.5.9689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b26bde969 code=0x7ffc0000 [ 581.876621][T31118] loop2: detected capacity change from 0 to 2048 [ 581.881188][ T29] audit: type=1326 audit(2000000326.937:34670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.5.9689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b26bde969 code=0x7ffc0000 [ 581.982081][T31118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.005437][ T29] audit: type=1326 audit(2000000326.937:34671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.5.9689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f3b26bde969 code=0x7ffc0000 [ 582.072406][ T29] audit: type=1326 audit(2000000326.937:34672): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.5.9689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b26bde969 code=0x7ffc0000 [ 582.072844][T31125] futex_wake_op: syz.5.9693 tries to shift op by -1; fix this program [ 582.255600][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.264829][ T29] audit: type=1400 audit(2000000327.349:34673): avc: denied { setcheckreqprot } for pid=31126 comm="syz.7.9694" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 582.264886][ T29] audit: type=1400 audit(2000000327.349:34674): avc: denied { read } for pid=31126 comm="syz.7.9694" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 582.264922][ T29] audit: type=1400 audit(2000000327.349:34675): avc: denied { open } for pid=31126 comm="syz.7.9694" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 582.264956][ T29] audit: type=1400 audit(2000000327.349:34676): avc: denied { ioctl } for pid=31126 comm="syz.7.9694" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 582.264989][ T29] audit: type=1326 audit(2000000327.349:34677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31126 comm="syz.7.9694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049559e969 code=0x7ffc0000 [ 582.265100][ T29] audit: type=1326 audit(2000000327.349:34678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31126 comm="syz.7.9694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f049559e969 code=0x7ffc0000 [ 582.368017][T31124] lo speed is unknown, defaulting to 1000 [ 582.511167][T31140] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9698'. [ 582.614657][T31149] loop2: detected capacity change from 0 to 512 [ 582.679412][T31149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.726786][T31149] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.000010][T31162] netlink: 'syz.8.9706': attribute type 21 has an invalid length. [ 583.018740][T31162] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9706'. [ 583.028101][T31162] netlink: 'syz.8.9706': attribute type 1 has an invalid length. [ 583.036001][T31162] netlink: 'syz.8.9706': attribute type 2 has an invalid length. [ 583.043848][T31162] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9706'. [ 583.148683][T31176] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9710'. [ 583.211219][T31184] serio: Serial port ptm0 [ 583.325730][T31196] 9pnet_fd: Insufficient options for proto=fd [ 583.390111][T31202] syz_tun: tun_net_xmit 42 [ 583.466652][T31211] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9726'. [ 583.609265][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.658650][T31216] loop2: detected capacity change from 0 to 512 [ 583.665386][T31214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=31214 comm=syz.8.9727 [ 583.694549][T31216] vhci_hcd: invalid port number 96 [ 583.699939][T31216] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 583.723787][T31213] lo speed is unknown, defaulting to 1000 [ 583.738696][T31218] loop2: detected capacity change from 0 to 512 [ 583.745452][T31218] EXT4-fs: Ignoring removed oldalloc option [ 583.752169][T31218] EXT4-fs: Ignoring removed mblk_io_submit option [ 583.759086][T31218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 583.771850][T31218] EXT4-fs (loop2): orphan cleanup on readonly fs [ 583.783571][T31218] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.9729: Failed to acquire dquot type 1 [ 583.796784][T31218] EXT4-fs (loop2): 1 truncate cleaned up [ 583.803059][T31218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 583.824200][T31218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 583.834140][T31218] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 583.847983][T31218] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.9729: Abort forced by user [ 583.867571][T31218] EXT4-fs (loop2): Remounting filesystem read-only [ 583.872059][T31226] netlink: 3 bytes leftover after parsing attributes in process `syz.8.9732'. [ 583.874165][T31218] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 583.875057][T31218] ext4 filesystem being remounted at /311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 583.906241][T31226] 0ªX¹¦À: renamed from caif0 [ 583.912254][T31226] 0ªX¹¦À: entered allmulticast mode [ 583.917499][T31226] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 583.963269][T31218] syzkaller0: entered promiscuous mode [ 583.969457][T31218] syzkaller0: entered allmulticast mode [ 583.979487][T31228] wireguard1: entered promiscuous mode [ 583.985012][T31228] wireguard1: entered allmulticast mode [ 584.141733][T31239] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9737'. [ 584.151832][T31239] team0: Unable to change to the same mode the team is in [ 584.242871][T31251] futex_wake_op: syz.7.9742 tries to shift op by -1; fix this program [ 584.378507][T31255] serio: Serial port ptm0 [ 584.435194][T22000] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.466243][ C1] syz_tun: tun_net_xmit 42 [ 584.491497][T22000] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.533189][T31265] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9750'. [ 584.546451][T22000] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.598899][T22000] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.740716][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.812522][T31284] futex_wake_op: syz.8.9753 tries to shift op by -1; fix this program [ 584.836860][T31272] syzkaller0: entered promiscuous mode [ 584.852119][T31272] syzkaller0: entered allmulticast mode [ 584.871274][T31275] batman_adv: batadv0: Interface deactivated: dummy0 [ 584.878177][T31275] batman_adv: batadv0: Removing interface: dummy0 [ 584.929850][T22000] bridge_slave_1: left allmulticast mode [ 584.935614][T22000] bridge_slave_1: left promiscuous mode [ 584.941408][T22000] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.948850][T31280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9756'. [ 584.971202][T22000] bridge_slave_0: left allmulticast mode [ 584.976905][T22000] bridge_slave_0: left promiscuous mode [ 584.983361][T22000] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.073136][T31298] futex_wake_op: syz.7.9759 tries to shift op by -1; fix this program [ 585.084136][T22000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.094682][T22000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.104953][T22000] bond0 (unregistering): Released all slaves [ 585.107453][T31303] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9761'. [ 585.126245][T31303] team0: Unable to change to the same mode the team is in [ 585.195695][T31281] lo speed is unknown, defaulting to 1000 [ 585.299754][T22000] hsr_slave_0: left promiscuous mode [ 585.319178][T22000] hsr_slave_1: left promiscuous mode [ 585.328837][T22000] batman_adv: batadv0: Interface deactivated: dummy0 [ 585.335651][T22000] batman_adv: batadv0: Removing interface: dummy0 [ 585.350347][T22000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.358530][T22000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.388895][T31319] loop2: detected capacity change from 0 to 128 [ 585.397529][T31319] EXT4-fs: Ignoring removed oldalloc option [ 585.407345][T31324] 9pnet_fd: Insufficient options for proto=fd [ 585.423781][T22000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.431971][T22000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.446609][T31319] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 585.459057][T22000] veth1_macvtap: left promiscuous mode [ 585.467182][T22000] veth0_macvtap: left promiscuous mode [ 585.473374][T22000] veth1_vlan: left promiscuous mode [ 585.478654][T22000] veth0_vlan: left promiscuous mode [ 585.486461][T31319] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.519887][T31319] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.9768: bg 0: bad block bitmap checksum [ 585.578063][ C1] syz_tun: tun_net_xmit 42 [ 585.649586][T26797] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 585.662190][T22000] team0 (unregistering): Port device team_slave_1 removed [ 585.673059][T22000] team0 (unregistering): Port device team_slave_0 removed [ 585.826180][T31349] 9pnet_fd: Insufficient options for proto=fd [ 585.926141][T31281] chnl_net:caif_netlink_parms(): no params data found [ 586.110037][T31281] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.117873][T31281] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.128208][T31281] bridge_slave_0: entered allmulticast mode [ 586.136746][T31281] bridge_slave_0: entered promiscuous mode [ 586.143675][T31281] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.151601][T31281] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.175506][T31281] bridge_slave_1: entered allmulticast mode [ 586.186396][T31281] bridge_slave_1: entered promiscuous mode [ 586.207090][T31373] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.272770][T31281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.285349][T31373] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.306652][T31281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.329762][T31373] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.347993][T31281] team0: Port device team_slave_0 added [ 586.354767][T31281] team0: Port device team_slave_1 added [ 586.369397][T31382] 9pnet_fd: Insufficient options for proto=fd [ 586.376696][T31281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.383886][T31281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.410614][T31281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.422509][T31281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.429558][T31281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.456279][T31281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.488570][T31281] hsr_slave_0: entered promiscuous mode [ 586.494876][T31281] hsr_slave_1: entered promiscuous mode [ 586.504787][T31373] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.569575][T31373] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.581566][T31373] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.601459][T31373] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.615022][T31373] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.719705][T31400] serio: Serial port ptm0 [ 586.873551][T31281] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 586.885753][T31281] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 586.894789][T31281] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 586.903809][T31281] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 586.943037][T31281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.956957][T31281] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.972200][T22001] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.976859][T31413] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 586.979365][T22001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.004296][T31413] futex_wake_op: syz.2.9804 tries to shift op by -1; fix this program [ 587.013745][T21998] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.020903][T21998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.058537][T31281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 587.069420][T31417] FAULT_INJECTION: forcing a failure. [ 587.069420][T31417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.083274][T31417] CPU: 1 UID: 0 PID: 31417 Comm: syz.2.9806 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 587.083310][T31417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 587.083340][T31417] Call Trace: [ 587.083348][T31417] [ 587.083357][T31417] __dump_stack+0x1d/0x30 [ 587.083384][T31417] dump_stack_lvl+0xe8/0x140 [ 587.083408][T31417] dump_stack+0x15/0x1b [ 587.083505][T31417] should_fail_ex+0x265/0x280 [ 587.083545][T31417] should_fail+0xb/0x20 [ 587.083582][T31417] should_fail_usercopy+0x1a/0x20 [ 587.083605][T31417] strncpy_from_user+0x25/0x230 [ 587.083711][T31417] ? kmem_cache_alloc_noprof+0x186/0x310 [ 587.083752][T31417] ? getname_flags+0x80/0x3b0 [ 587.083791][T31417] getname_flags+0xae/0x3b0 [ 587.083836][T31417] user_path_at+0x28/0x130 [ 587.083867][T31417] __se_sys_mount+0x25b/0x2e0 [ 587.083896][T31417] ? fput+0x8f/0xc0 [ 587.083971][T31417] __x64_sys_mount+0x67/0x80 [ 587.084003][T31417] x64_sys_call+0xd36/0x2fb0 [ 587.084097][T31417] do_syscall_64+0xd0/0x1a0 [ 587.084125][T31417] ? clear_bhb_loop+0x25/0x80 [ 587.084203][T31417] ? clear_bhb_loop+0x25/0x80 [ 587.084245][T31417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.084269][T31417] RIP: 0033:0x7f8f63dfe969 [ 587.084288][T31417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.084310][T31417] RSP: 002b:00007f8f62467038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 587.084328][T31417] RAX: ffffffffffffffda RBX: 00007f8f64025fa0 RCX: 00007f8f63dfe969 [ 587.084342][T31417] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 587.084386][T31417] RBP: 00007f8f62467090 R08: 00002000000004c0 R09: 0000000000000000 [ 587.084399][T31417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.084411][T31417] R13: 0000000000000000 R14: 00007f8f64025fa0 R15: 00007ffd5a178b68 [ 587.084435][T31417] [ 587.142755][T31281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.381025][T31438] loop2: detected capacity change from 0 to 2048 [ 587.400973][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 587.401000][ T29] audit: type=1400 audit(2000000332.269:35099): avc: denied { create } for pid=31443 comm="syz.6.9811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 587.429255][ T29] audit: type=1400 audit(2000000332.269:35100): avc: denied { bind } for pid=31443 comm="syz.6.9811" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 587.431365][T31438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.449608][ T29] audit: type=1400 audit(2000000332.269:35101): avc: denied { name_bind } for pid=31443 comm="syz.6.9811" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 587.449645][ T29] audit: type=1400 audit(2000000332.269:35102): avc: denied { node_bind } for pid=31443 comm="syz.6.9811" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 587.545036][ T29] audit: type=1326 audit(2000000332.400:35103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31450 comm="syz.8.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34abde969 code=0x7ffc0000 [ 587.569527][ T29] audit: type=1326 audit(2000000332.400:35104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31450 comm="syz.8.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34abde969 code=0x7ffc0000 [ 587.593305][ T29] audit: type=1326 audit(2000000332.400:35105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31450 comm="syz.8.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe34abde969 code=0x7ffc0000 [ 587.617526][ T29] audit: type=1326 audit(2000000332.400:35106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31450 comm="syz.8.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34abde969 code=0x7ffc0000 [ 587.641181][ T29] audit: type=1326 audit(2000000332.400:35107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31450 comm="syz.8.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe34abde969 code=0x7ffc0000 [ 587.665499][ T29] audit: type=1326 audit(2000000332.400:35108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31450 comm="syz.8.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34abde969 code=0x7ffc0000 [ 587.709686][T31281] veth0_vlan: entered promiscuous mode [ 587.726227][T31281] veth1_vlan: entered promiscuous mode [ 587.736218][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.762797][T31281] veth0_macvtap: entered promiscuous mode [ 587.771205][T31281] veth1_macvtap: entered promiscuous mode [ 587.788173][T31281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.799595][T31281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.822100][T31281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.851784][T31281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.862550][T31465] FAULT_INJECTION: forcing a failure. [ 587.862550][T31465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.862582][T31465] CPU: 1 UID: 0 PID: 31465 Comm: syz.2.9818 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 587.862678][T31465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 587.862691][T31465] Call Trace: [ 587.862699][T31465] [ 587.862708][T31465] __dump_stack+0x1d/0x30 [ 587.862732][T31465] dump_stack_lvl+0xe8/0x140 [ 587.862752][T31465] dump_stack+0x15/0x1b [ 587.862773][T31465] should_fail_ex+0x265/0x280 [ 587.862842][T31465] should_fail+0xb/0x20 [ 587.862873][T31465] should_fail_usercopy+0x1a/0x20 [ 587.862895][T31465] _copy_from_user+0x1c/0xb0 [ 587.862922][T31465] __ia32_sys_rt_sigreturn+0x128/0x350 [ 587.862993][T31465] x64_sys_call+0x2e8a/0x2fb0 [ 587.863056][T31465] do_syscall_64+0xd0/0x1a0 [ 587.863088][T31465] ? clear_bhb_loop+0x25/0x80 [ 587.863120][T31465] ? clear_bhb_loop+0x25/0x80 [ 587.863159][T31465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.863188][T31465] RIP: 0033:0x7f8f63d9ab39 [ 587.863207][T31465] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 587.863232][T31465] RSP: 002b:00007f8f62466a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 587.863256][T31465] RAX: ffffffffffffffda RBX: 00007f8f64025fa0 RCX: 00007f8f63d9ab39 [ 587.863274][T31465] RDX: 00007f8f62466a80 RSI: 00007f8f62466bb0 RDI: 0000000000000021 [ 587.863290][T31465] RBP: 00007f8f62467090 R08: 0000200000048000 R09: 0000000000000300 [ 587.863306][T31465] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 587.863322][T31465] R13: 0000000000000000 R14: 00007f8f64025fa0 R15: 00007ffd5a178b68 [ 587.863355][T31465] [ 587.863976][T31465] netlink: 'syz.2.9818': attribute type 9 has an invalid length. [ 587.876155][T31281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.876174][T31281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.876192][T31281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.879808][T31281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.889339][T31465] netlink: 'syz.2.9818': attribute type 7 has an invalid length. [ 587.889434][T31465] netlink: 'syz.2.9818': attribute type 8 has an invalid length. [ 588.118480][T31281] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.128141][T31281] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.137010][T31281] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.145946][T31281] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.161183][T31471] loop2: detected capacity change from 0 to 128 [ 588.168703][T31471] EXT4-fs: Ignoring removed oldalloc option [ 588.180425][T31471] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 588.192853][T31471] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.208493][T31471] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.9820: bg 0: bad block bitmap checksum [ 588.318812][T31481] loop9: detected capacity change from 0 to 2048 [ 588.351778][T31481] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.428159][T26797] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 588.435561][T31483] syzkaller0: entered promiscuous mode [ 588.442745][T31483] syzkaller0: entered allmulticast mode [ 588.453128][T31281] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.492619][T31492] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 588.501664][T31496] FAULT_INJECTION: forcing a failure. [ 588.501664][T31496] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 588.517027][T31496] CPU: 0 UID: 0 PID: 31496 Comm: syz.9.9828 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 588.517070][T31496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 588.517084][T31496] Call Trace: [ 588.517093][T31496] [ 588.517102][T31496] __dump_stack+0x1d/0x30 [ 588.517127][T31496] dump_stack_lvl+0xe8/0x140 [ 588.517218][T31496] dump_stack+0x15/0x1b [ 588.517233][T31496] should_fail_ex+0x265/0x280 [ 588.517267][T31496] should_fail_alloc_page+0xf2/0x100 [ 588.517306][T31496] __alloc_frozen_pages_noprof+0xff/0x360 [ 588.517338][T31496] alloc_pages_mpol+0xb3/0x250 [ 588.517365][T31496] vma_alloc_folio_noprof+0x1aa/0x300 [ 588.517397][T31496] do_wp_page+0x673/0x23e0 [ 588.517434][T31496] ? __rcu_read_lock+0x37/0x50 [ 588.517461][T31496] handle_mm_fault+0x6dc/0x2ae0 [ 588.517576][T31496] ? __rcu_read_unlock+0x4f/0x70 [ 588.517624][T31496] do_user_addr_fault+0x3fe/0x1090 [ 588.517694][T31496] exc_page_fault+0x54/0xc0 [ 588.517750][T31496] asm_exc_page_fault+0x26/0x30 [ 588.517775][T31496] RIP: 0010:__put_user_4+0xd/0x20 [ 588.517805][T31496] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 588.517900][T31496] RSP: 0018:ffffc9000687fd28 EFLAGS: 00050206 [ 588.517920][T31496] RAX: 00000000fffffff2 RBX: 0000000000000000 RCX: 0000200000006000 [ 588.517936][T31496] RDX: ffff888102cc9080 RSI: 00000000fffffff2 RDI: 0000000000000000 [ 588.517950][T31496] RBP: ffffc9000687fed0 R08: 0001888104fab507 R09: 0000000000000000 [ 588.517965][T31496] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 588.517981][T31496] R13: 0000000000001800 R14: 0000000000000000 R15: 00000000fffffff2 [ 588.518004][T31496] __se_sys_move_pages+0xa1c/0x1330 [ 588.518103][T31496] ? get_pid_task+0x96/0xd0 [ 588.518130][T31496] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 588.518165][T31496] ? __fget_files+0x184/0x1c0 [ 588.518199][T31496] ? fput+0x8f/0xc0 [ 588.518218][T31496] ? ksys_write+0x16e/0x1a0 [ 588.518283][T31496] __x64_sys_move_pages+0x78/0x90 [ 588.518324][T31496] x64_sys_call+0x2eab/0x2fb0 [ 588.518351][T31496] do_syscall_64+0xd0/0x1a0 [ 588.518444][T31496] ? clear_bhb_loop+0x25/0x80 [ 588.518469][T31496] ? clear_bhb_loop+0x25/0x80 [ 588.518496][T31496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.518522][T31496] RIP: 0033:0x7f260665e969 [ 588.518539][T31496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.518562][T31496] RSP: 002b:00007f2604cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 588.518583][T31496] RAX: ffffffffffffffda RBX: 00007f2606885fa0 RCX: 00007f260665e969 [ 588.518598][T31496] RDX: 0000200000000040 RSI: 0000000000002064 RDI: 0000000000000000 [ 588.518612][T31496] RBP: 00007f2604cc7090 R08: 0000200000000000 R09: 0000000000000000 [ 588.518627][T31496] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001 [ 588.518659][T31496] R13: 0000000000000001 R14: 00007f2606885fa0 R15: 00007ffd3ba608f8 [ 588.518682][T31496] [ 588.829695][T31499] syz_tun: tun_net_xmit 86 [ 588.960578][T31509] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 588.982301][T31509] __nla_validate_parse: 3 callbacks suppressed [ 588.982377][T31509] netlink: 12 bytes leftover after parsing attributes in process `gtp'. [ 589.046532][T31517] loop2: detected capacity change from 0 to 2048 [ 589.066493][T31521] loop9: detected capacity change from 0 to 128 [ 589.073706][T31521] EXT4-fs: Ignoring removed oldalloc option [ 589.074635][T31517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.094417][T31521] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 589.108808][T31521] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.143244][T31528] futex_wake_op: syz.8.9841 tries to shift op by -1; fix this program [ 589.153876][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.255339][T31535] loop2: detected capacity change from 0 to 2048 [ 589.305179][T31535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.352200][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.377578][T31281] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 589.402992][T31554] netlink: 96 bytes leftover after parsing attributes in process `syz.7.9851'. [ 589.443401][T31556] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1088) [ 589.453946][T31556] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 589.468271][T31552] loop2: detected capacity change from 0 to 512 [ 589.475066][T31552] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 589.497253][T31559] IPv6: Can't replace route, no match found [ 589.527856][T31556] SELinux: failed to load policy [ 589.533096][T31560] loop9: detected capacity change from 0 to 2048 [ 589.607071][T31560] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.622450][T31574] loop2: detected capacity change from 0 to 128 [ 589.628994][T31574] EXT4-fs: Ignoring removed oldalloc option [ 589.654736][T31281] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.665975][T31574] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 589.696775][T31574] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.799401][T31596] loop9: detected capacity change from 0 to 2048 [ 589.858923][T31592] lo speed is unknown, defaulting to 1000 [ 589.890028][T31596] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.939872][ C1] syz_tun: tun_net_xmit 86 [ 589.969808][T31281] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.015137][T26797] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 590.018411][T31614] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9877'. [ 590.052386][T31618] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 590.074145][T31618] futex_wake_op: syz.2.9878 tries to shift op by -1; fix this program [ 590.277475][T31646] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 590.439262][T31677] loop9: detected capacity change from 0 to 128 [ 590.453513][T31677] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 590.469063][T31677] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 590.486842][T31682] loop2: detected capacity change from 0 to 128 [ 590.554836][T31691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9911'. [ 590.595195][T31695] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9914'. [ 590.604163][T31695] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9914'. [ 590.616462][T31695] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9914'. [ 590.643371][T31695] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9914'. [ 590.652384][T31695] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9914'. [ 590.654415][T31704] blktrace: Concurrent blktraces are not allowed on loop14 [ 590.667252][T31695] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9914'. [ 590.722179][T31703] lo speed is unknown, defaulting to 1000 [ 590.769073][T31708] loop2: detected capacity change from 0 to 4096 [ 590.782355][T31708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.825500][T31714] loop9: detected capacity change from 0 to 2048 [ 590.863507][T31714] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.887577][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.940532][T31281] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.032208][T31745] FAULT_INJECTION: forcing a failure. [ 591.032208][T31745] name failslab, interval 1, probability 0, space 0, times 0 [ 591.045697][T31745] CPU: 1 UID: 0 PID: 31745 Comm: syz.2.9930 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 591.045730][T31745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 591.045819][T31745] Call Trace: [ 591.045826][T31745] [ 591.045837][T31745] __dump_stack+0x1d/0x30 [ 591.045870][T31745] dump_stack_lvl+0xe8/0x140 [ 591.045949][T31745] dump_stack+0x15/0x1b [ 591.045990][T31745] should_fail_ex+0x265/0x280 [ 591.046024][T31745] ? alloc_bprm+0x62/0x660 [ 591.046047][T31745] should_failslab+0x8c/0xb0 [ 591.046083][T31745] __kmalloc_cache_noprof+0x4c/0x320 [ 591.046146][T31745] alloc_bprm+0x62/0x660 [ 591.046167][T31745] ? should_fail+0xb/0x20 [ 591.046215][T31745] do_execveat_common+0x12e/0x750 [ 591.046240][T31745] ? getname_flags+0x154/0x3b0 [ 591.046281][T31745] __x64_sys_execveat+0x73/0x90 [ 591.046390][T31745] x64_sys_call+0x2dae/0x2fb0 [ 591.046418][T31745] do_syscall_64+0xd0/0x1a0 [ 591.046447][T31745] ? clear_bhb_loop+0x25/0x80 [ 591.046474][T31745] ? clear_bhb_loop+0x25/0x80 [ 591.046561][T31745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.046588][T31745] RIP: 0033:0x7f8f63dfe969 [ 591.046633][T31745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.046675][T31745] RSP: 002b:00007f8f62467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 591.046694][T31745] RAX: ffffffffffffffda RBX: 00007f8f64025fa0 RCX: 00007f8f63dfe969 [ 591.046710][T31745] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 591.046725][T31745] RBP: 00007f8f62467090 R08: 0000000000001000 R09: 0000000000000000 [ 591.046741][T31745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.046810][T31745] R13: 0000000000000000 R14: 00007f8f64025fa0 R15: 00007ffd5a178b68 [ 591.046835][T31745] [ 591.048471][T31735] loop9: detected capacity change from 0 to 512 [ 591.062389][ C1] syz_tun: tun_net_xmit 86 [ 591.079828][T31735] vhci_hcd: invalid port number 96 [ 591.253494][T31735] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 591.365445][T31764] futex_wake_op: syz.8.9938 tries to shift op by -1; fix this program [ 591.426273][T31767] loop9: detected capacity change from 0 to 512 [ 591.434383][T31767] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 591.446195][T31767] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002] [ 591.459984][T31767] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #11: comm ,*-: missing EA_INODE flag [ 591.472928][T31767] EXT4-fs (loop9): Remounting filesystem read-only [ 591.480401][T31767] EXT4-fs (loop9): 1 orphan inode deleted [ 591.486715][T31767] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.499757][T31767] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.524003][T31785] lo: entered promiscuous mode [ 591.528891][T31785] lo: entered allmulticast mode [ 591.540263][T31788] FAULT_INJECTION: forcing a failure. [ 591.540263][T31788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.554166][T31788] CPU: 1 UID: 0 PID: 31788 Comm: syz.6.9947 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 591.554202][T31788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 591.554218][T31788] Call Trace: [ 591.554226][T31788] [ 591.554235][T31788] __dump_stack+0x1d/0x30 [ 591.554321][T31788] dump_stack_lvl+0xe8/0x140 [ 591.554345][T31788] dump_stack+0x15/0x1b [ 591.554366][T31788] should_fail_ex+0x265/0x280 [ 591.554401][T31788] should_fail+0xb/0x20 [ 591.554476][T31788] should_fail_usercopy+0x1a/0x20 [ 591.554497][T31788] copy_fpstate_to_sigframe+0x62b/0x7d0 [ 591.554533][T31788] ? copy_fpstate_to_sigframe+0xe5/0x7d0 [ 591.554573][T31788] get_sigframe+0x34d/0x490 [ 591.554603][T31788] ? get_signal+0xdc8/0xf70 [ 591.554734][T31788] x64_setup_rt_frame+0xa8/0x580 [ 591.554794][T31788] arch_do_signal_or_restart+0x26e/0x480 [ 591.554840][T31788] syscall_exit_to_user_mode+0x68/0xb0 [ 591.554936][T31788] do_syscall_64+0xdd/0x1a0 [ 591.554965][T31788] ? clear_bhb_loop+0x25/0x80 [ 591.554992][T31788] ? clear_bhb_loop+0x25/0x80 [ 591.555013][T31788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.555067][T31788] RIP: 0033:0x7f381080e967 [ 591.555104][T31788] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 591.555147][T31788] RSP: 002b:00007f380ee77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 591.555164][T31788] RAX: 0000000000000000 RBX: 00007f3810a35fa0 RCX: 00007f381080e969 [ 591.555177][T31788] RDX: 0000000000000ff9 RSI: 00002000000013c0 RDI: 0000000000000003 [ 591.555193][T31788] RBP: 00007f380ee77090 R08: 0000000000000000 R09: 0000000000000000 [ 591.555205][T31788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.555219][T31788] R13: 0000000000000000 R14: 00007f3810a35fa0 R15: 00007ffc63e3a518 [ 591.555243][T31788] [ 591.760433][T31785] infiniband syo1: set active [ 591.765216][T31785] infiniband syo1: added veth0_to_bridge [ 591.797833][T31785] RDS/IB: syo1: added [ 591.802694][T31785] smc: adding ib device syo1 with port count 1 [ 591.808949][T31785] smc: ib device syo1 port 1 has pnetid [ 592.269882][T31824] FAULT_INJECTION: forcing a failure. [ 592.269882][T31824] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 592.283277][T31824] CPU: 1 UID: 0 PID: 31824 Comm: syz.7.9961 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 592.283311][T31824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 592.283328][T31824] Call Trace: [ 592.283335][T31824] [ 592.283396][T31824] __dump_stack+0x1d/0x30 [ 592.283422][T31824] dump_stack_lvl+0xe8/0x140 [ 592.283441][T31824] dump_stack+0x15/0x1b [ 592.283459][T31824] should_fail_ex+0x265/0x280 [ 592.283591][T31824] should_fail_alloc_page+0xf2/0x100 [ 592.283625][T31824] __alloc_frozen_pages_noprof+0xff/0x360 [ 592.283660][T31824] alloc_pages_mpol+0xb3/0x250 [ 592.283687][T31824] vma_alloc_folio_noprof+0x1aa/0x300 [ 592.283731][T31824] handle_mm_fault+0x1056/0x2ae0 [ 592.283766][T31824] ? mas_walk+0xf2/0x120 [ 592.283791][T31824] do_user_addr_fault+0x636/0x1090 [ 592.283908][T31824] ? fpregs_assert_state_consistent+0x84/0xa0 [ 592.284078][T31824] exc_page_fault+0x54/0xc0 [ 592.284179][T31824] asm_exc_page_fault+0x26/0x30 [ 592.284197][T31824] RIP: 0033:0x7f0495460cc3 [ 592.284281][T31824] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 592.284297][T31824] RSP: 002b:00007f0493c064a0 EFLAGS: 00010202 [ 592.284310][T31824] RAX: 0000000000008000 RBX: 00007f0493c06540 RCX: 00007f048b7e7000 [ 592.284369][T31824] RDX: 00007f0493c066e0 RSI: 0000000000000001 RDI: 00007f0493c065e0 [ 592.284380][T31824] RBP: 00000000000000c5 R08: 0000000000000006 R09: 000000000000001f [ 592.284391][T31824] R10: 0000000000000024 R11: 00007f0493c06540 R12: 0000000000000001 [ 592.284402][T31824] R13: 00007f049563bfc0 R14: 0000000000000002 R15: 00007f0493c065e0 [ 592.284420][T31824] [ 592.284429][T31824] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 592.874038][ T29] kauditd_printk_skb: 570 callbacks suppressed [ 592.874056][ T29] audit: type=1326 audit(2000000337.385:35679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31853 comm="syz.8.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34abde969 code=0x7ffc0000 [ 592.904817][ T29] audit: type=1326 audit(2000000337.385:35680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31853 comm="syz.8.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34abde969 code=0x7ffc0000 [ 592.930727][ T29] audit: type=1326 audit(2000000337.385:35681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31853 comm="syz.8.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fe34abde969 code=0x7ffc0000 [ 592.955208][ T29] audit: type=1326 audit(2000000337.385:35682): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31853 comm="syz.8.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34abde969 code=0x7ffc0000 [ 592.979222][ T29] audit: type=1326 audit(2000000337.385:35683): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31853 comm="syz.8.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34abde969 code=0x7ffc0000 [ 593.028716][ T29] audit: type=1326 audit(2000000337.516:35684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31855 comm="syz.2.9973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63dfe969 code=0x7ffc0000 [ 593.053408][ T29] audit: type=1326 audit(2000000337.516:35685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31855 comm="syz.2.9973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f8f63dfe969 code=0x7ffc0000 [ 593.078004][ T29] audit: type=1326 audit(2000000337.516:35686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31855 comm="syz.2.9973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63dfe969 code=0x7ffc0000 [ 593.102271][ T29] audit: type=1400 audit(2000000337.526:35687): avc: denied { read write } for pid=31857 comm="syz.2.9975" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 593.127593][ T29] audit: type=1400 audit(2000000337.526:35688): avc: denied { open } for pid=31857 comm="syz.2.9975" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 593.194137][T31864] futex_wake_op: syz.6.9977 tries to shift op by -1; fix this program [ 593.294148][T31875] loop9: detected capacity change from 0 to 1024 [ 593.301834][T31875] EXT4-fs: Ignoring removed nobh option [ 593.321268][T31875] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.347824][T31879] vhci_hcd: invalid port number 96 [ 593.354304][T31879] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 593.354332][T31865] lo speed is unknown, defaulting to 1000 [ 593.459871][T31281] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.798596][T31903] syzkaller0: entered promiscuous mode [ 593.805317][T31903] syzkaller0: entered allmulticast mode [ 594.030079][T31913] loop2: detected capacity change from 0 to 1024 [ 594.037285][T31913] EXT4-fs: Ignoring removed nobh option [ 594.047509][T31913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.164809][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.215465][T31932] loop2: detected capacity change from 0 to 1024 [ 594.241132][T31932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.254212][T31932] FAULT_INJECTION: forcing a failure. [ 594.254212][T31932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.267357][T31932] CPU: 1 UID: 0 PID: 31932 Comm: syz.2.10002 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 594.267433][T31932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 594.267447][T31932] Call Trace: [ 594.267455][T31932] [ 594.267465][T31932] __dump_stack+0x1d/0x30 [ 594.267489][T31932] dump_stack_lvl+0xe8/0x140 [ 594.267548][T31932] dump_stack+0x15/0x1b [ 594.267568][T31932] should_fail_ex+0x265/0x280 [ 594.267674][T31932] should_fail+0xb/0x20 [ 594.267860][T31932] should_fail_usercopy+0x1a/0x20 [ 594.268027][T31932] _copy_from_user+0x1c/0xb0 [ 594.268053][T31932] ___sys_sendmsg+0xc1/0x1d0 [ 594.268096][T31932] __x64_sys_sendmsg+0xd4/0x160 [ 594.268125][T31932] x64_sys_call+0x2999/0x2fb0 [ 594.268151][T31932] do_syscall_64+0xd0/0x1a0 [ 594.268211][T31932] ? clear_bhb_loop+0x25/0x80 [ 594.268236][T31932] ? clear_bhb_loop+0x25/0x80 [ 594.268270][T31932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.268352][T31932] RIP: 0033:0x7f8f63dfe969 [ 594.268369][T31932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.268391][T31932] RSP: 002b:00007f8f62467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.268413][T31932] RAX: ffffffffffffffda RBX: 00007f8f64025fa0 RCX: 00007f8f63dfe969 [ 594.268429][T31932] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000b [ 594.268443][T31932] RBP: 00007f8f62467090 R08: 0000000000000000 R09: 0000000000000000 [ 594.268458][T31932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.268473][T31932] R13: 0000000000000000 R14: 00007f8f64025fa0 R15: 00007ffd5a178b68 [ 594.268545][T31932] [ 594.460382][T31936] __nla_validate_parse: 8 callbacks suppressed [ 594.460415][T31936] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10003'. [ 594.507537][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.639247][T31951] loop9: detected capacity change from 0 to 1024 [ 594.646097][T31951] EXT4-fs: Ignoring removed nobh option [ 594.670257][T31951] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.784790][T31281] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.976491][T31982] netlink: 'syz.8.10023': attribute type 21 has an invalid length. [ 595.427273][T31993] netlink: 14 bytes leftover after parsing attributes in process `syz.8.10026'. [ 595.479203][T31993] bond0 (unregistering): Released all slaves [ 595.523398][T31997] netlink: 'syz.2.10027': attribute type 29 has an invalid length. [ 595.535787][T31997] netlink: 'syz.2.10027': attribute type 29 has an invalid length. [ 595.544336][T31997] netlink: 500 bytes leftover after parsing attributes in process `syz.2.10027'. [ 595.653685][T32002] loop2: detected capacity change from 0 to 512 [ 595.664625][T32002] vhci_hcd: invalid port number 96 [ 595.669799][T32002] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 595.741295][T32008] futex_wake_op: syz.7.10032 tries to shift op by -1; fix this program [ 595.753108][T32005] IPv6: Can't replace route, no match found [ 595.810372][T32011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.822096][T32011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.854541][T32016] loop2: detected capacity change from 0 to 512 [ 595.863505][T32016] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 595.916060][T32016] EXT4-fs (loop2): 1 truncate cleaned up [ 595.933199][T32016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.983588][T32029] vhci_hcd: invalid port number 96 [ 595.988790][T32029] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 596.054427][T32032] futex_wake_op: syz.8.10042 tries to shift op by -1; fix this program [ 596.118817][T32039] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10045'. [ 596.136646][T32039] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10045'. [ 596.163257][T32039] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10045'. [ 596.185532][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.240972][T32052] IPv6: Can't replace route, no match found [ 596.372072][T32059] vhci_hcd: invalid port number 96 [ 596.377400][T32059] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 596.410581][ T3390] IPVS: starting estimator thread 0... [ 596.459836][T32063] vhci_hcd: invalid port number 96 [ 596.465717][T32063] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 596.502440][T32075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10060'. [ 596.514574][T32066] IPVS: using max 2640 ests per chain, 132000 per kthread [ 596.520075][T32075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10060'. [ 596.546948][T32075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10060'. [ 597.123396][T32091] futex_wake_op: syz.8.10067 tries to shift op by -1; fix this program [ 597.390203][T32114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10076'. [ 597.642812][T32143] futex_wake_op: syz.7.10080 tries to shift op by -1; fix this program [ 597.670918][T32146] loop2: detected capacity change from 0 to 512 [ 597.689227][T32146] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 597.727173][T32146] EXT4-fs (loop2): 1 truncate cleaned up [ 597.733476][T32146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.818202][T32152] loop9: detected capacity change from 0 to 512 [ 597.832593][T32152] EXT4-fs: Ignoring removed mblk_io_submit option [ 597.839501][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.842625][T32152] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 597.871001][T32152] EXT4-fs (loop9): 1 truncate cleaned up [ 597.880033][T32152] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.925338][T32152] SELinux: Context /usr/sbin/ntpd is not valid (left unmapped). [ 597.957455][T31281] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.167916][T32163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 598.233020][ T29] kauditd_printk_skb: 703 callbacks suppressed [ 598.233038][ T29] audit: type=1326 audit(2000000342.399:36392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32158 comm="syz.9.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2606655927 code=0x7ffc0000 [ 598.263620][ T29] audit: type=1326 audit(2000000342.399:36393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32158 comm="syz.9.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26065fab39 code=0x7ffc0000 [ 598.287236][ T29] audit: type=1326 audit(2000000342.399:36394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32158 comm="syz.9.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f260665e969 code=0x7ffc0000 [ 598.325609][ T29] audit: type=1326 audit(2000000342.474:36395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32158 comm="syz.9.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2606655927 code=0x7ffc0000 [ 598.350075][ T29] audit: type=1326 audit(2000000342.474:36396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32158 comm="syz.9.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26065fab39 code=0x7ffc0000 [ 598.373797][ T29] audit: type=1326 audit(2000000342.474:36397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32158 comm="syz.9.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f260665e969 code=0x7ffc0000 [ 598.398205][ T29] audit: type=1326 audit(2000000342.483:36398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32158 comm="syz.9.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2606655927 code=0x7ffc0000 [ 598.421957][ T29] audit: type=1326 audit(2000000342.483:36399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32158 comm="syz.9.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26065fab39 code=0x7ffc0000 [ 598.446253][ T29] audit: type=1326 audit(2000000342.483:36400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32158 comm="syz.9.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f260665e969 code=0x7ffc0000 [ 598.508528][ T29] audit: type=1326 audit(2000000342.614:36401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32158 comm="syz.9.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2606655927 code=0x7ffc0000 [ 598.750489][T32202] futex_wake_op: syz.8.10112 tries to shift op by -1; fix this program [ 599.006604][T32220] loop9: detected capacity change from 0 to 2048 [ 599.041383][T32230] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 599.072183][T32230] futex_wake_op: syz.2.10125 tries to shift op by -1; fix this program [ 599.109411][T32234] batman_adv: batadv0: Adding interface: dummy0 [ 599.115779][T32234] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.167418][T32234] batman_adv: batadv0: Interface activated: dummy0 [ 599.187379][T32234] batadv0: mtu less than device minimum [ 599.193459][T32234] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 599.204421][T32234] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 599.215322][T32234] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 599.226165][T32234] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 599.236880][T32234] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 599.247777][T32234] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 599.258545][T32234] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 599.269217][T32234] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 599.304992][T32234] futex_wake_op: syz.9.10126 tries to shift op by -1; fix this program [ 599.382595][T32251] loop9: detected capacity change from 0 to 512 [ 599.404604][T32251] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 599.441212][T32251] EXT4-fs (loop9): 1 truncate cleaned up [ 599.458606][T32251] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.728358][T31281] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.940624][T32279] __nla_validate_parse: 6 callbacks suppressed [ 599.940643][T32279] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10144'. [ 600.084907][T32281] loop9: detected capacity change from 0 to 512 [ 600.191210][T32281] EXT4-fs warning (device loop9): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 600.283832][T32281] EXT4-fs (loop9): mount failed [ 600.311948][T32292] 9pnet_fd: Insufficient options for proto=fd [ 600.329026][T32293] loop2: detected capacity change from 0 to 512 [ 600.339004][T32293] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 600.364725][T32293] EXT4-fs (loop2): 1 truncate cleaned up [ 600.378290][T32281] netlink: 44 bytes leftover after parsing attributes in process `syz.9.10145'. [ 600.411400][T32293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.718977][T32309] futex_wake_op: syz.7.10156 tries to shift op by -1; fix this program [ 600.766684][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.881069][T32317] loop2: detected capacity change from 0 to 512 [ 600.934531][T32317] EXT4-fs (loop2): 1 orphan inode deleted [ 600.955734][T22001] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:53: Failed to release dquot type 1 [ 601.022105][T32325] Unsupported ieee802154 address type: 0 [ 601.029970][T32317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.135193][T32317] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.313863][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.882757][T32349] loop2: detected capacity change from 0 to 128 [ 601.913536][T32349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 601.941097][T32349] EXT4-fs error (device loop2): __ext4_fill_super:5502: inode #2: comm syz.2.10170: iget: checksum invalid [ 601.954427][T32349] EXT4-fs (loop2): get root inode failed [ 601.960921][T32349] EXT4-fs (loop2): mount failed [ 602.072784][T32367] netlink: 'syz.8.10181': attribute type 6 has an invalid length. [ 602.663206][T32391] syz.7.10190: attempt to access beyond end of device [ 602.663206][T32391] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 602.689871][T32405] futex_wake_op: syz.2.10194 tries to shift op by -1; fix this program [ 602.858167][T32426] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10204'. [ 603.047461][T32438] futex_wake_op: syz.6.10208 tries to shift op by -1; fix this program [ 603.255704][T32461] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10217'. [ 603.270393][T32461] netlink: 5 bytes leftover after parsing attributes in process `syz.6.10217'. [ 603.280176][T32461] netlink: 5 bytes leftover after parsing attributes in process `syz.6.10217'. [ 603.289218][T32461] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10217'. [ 603.304189][T32461] netlink: 'syz.6.10217': attribute type 39 has an invalid length. [ 603.415281][T26768] ================================================================== [ 603.423428][T26768] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 603.431383][T26768] [ 603.433761][T26768] read-write to 0xffff88810472d0d0 of 8 bytes by task 32431 on cpu 1: [ 603.441934][T26768] shmem_add_to_page_cache+0x37f/0x490 [ 603.447444][T26768] shmem_get_folio_gfp+0x4e8/0xd40 [ 603.452584][T26768] shmem_write_begin+0xa8/0x190 [ 603.457466][T26768] generic_perform_write+0x181/0x490 [ 603.462792][T26768] shmem_file_write_iter+0xc5/0xf0 [ 603.467951][T26768] __kernel_write_iter+0x253/0x4c0 [ 603.473099][T26768] dump_user_range+0x5f4/0x8d0 [ 603.477891][T26768] elf_core_dump+0x1dc2/0x1f80 [ 603.482680][T26768] do_coredump+0x1836/0x1f40 [ 603.487282][T26768] get_signal+0xd85/0xf70 [ 603.491638][T26768] arch_do_signal_or_restart+0x97/0x480 [ 603.497210][T26768] irqentry_exit_to_user_mode+0x5e/0xa0 [ 603.502769][T26768] irqentry_exit+0x12/0x50 [ 603.507198][T26768] asm_exc_page_fault+0x26/0x30 [ 603.512059][T26768] [ 603.514389][T26768] read to 0xffff88810472d0d0 of 8 bytes by task 26768 on cpu 0: [ 603.522027][T26768] shmem_getattr+0x68/0x200 [ 603.526555][T26768] vfs_getattr_nosec+0x143/0x1e0 [ 603.531514][T26768] vfs_statx+0x11a/0x380 [ 603.535776][T26768] vfs_fstatat+0xe1/0x160 [ 603.540126][T26768] __se_sys_newfstatat+0x55/0x260 [ 603.545174][T26768] __x64_sys_newfstatat+0x55/0x70 [ 603.550220][T26768] x64_sys_call+0x2c22/0x2fb0 [ 603.554921][T26768] do_syscall_64+0xd0/0x1a0 [ 603.559445][T26768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.565352][T26768] [ 603.567679][T26768] value changed: 0x0000000000001c8f -> 0x0000000000001c91 [ 603.574790][T26768] [ 603.577116][T26768] Reported by Kernel Concurrency Sanitizer on: [ 603.583361][T26768] CPU: 0 UID: 0 PID: 26768 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 603.596058][T26768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 603.606124][T26768] ================================================================== [ 603.615135][ T29] kauditd_printk_skb: 1345 callbacks suppressed [ 603.615191][ T29] audit: type=1326 audit(2000000347.245:37745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.9.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2606655927 code=0x7ffc0000 [ 603.645271][ T29] audit: type=1326 audit(2000000347.245:37746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.9.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26065fab39 code=0x7ffc0000 [ 603.669605][ T29] audit: type=1326 audit(2000000347.245:37747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.9.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f260665e969 code=0x7ffc0000 [ 603.693308][ T29] audit: type=1326 audit(2000000347.245:37748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.9.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2606655927 code=0x7ffc0000 [ 603.717840][ T29] audit: type=1326 audit(2000000347.245:37749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.9.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26065fab39 code=0x7ffc0000 [ 603.742147][ T29] audit: type=1326 audit(2000000347.245:37750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.9.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f260665e969 code=0x7ffc0000 [ 603.766086][ T29] audit: type=1326 audit(2000000347.245:37751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.9.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2606655927 code=0x7ffc0000 [ 603.790414][ T29] audit: type=1326 audit(2000000347.245:37752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.9.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26065fab39 code=0x7ffc0000 [ 603.814043][ T29] audit: type=1326 audit(2000000347.245:37753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.9.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f260665e969 code=0x7ffc0000 [ 603.838445][ T29] audit: type=1326 audit(2000000347.245:37754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.9.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2606655927 code=0x7ffc0000