last executing test programs: 10.901683914s ago: executing program 2 (id=55): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) acct(0x0) 10.901469334s ago: executing program 2 (id=56): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) 10.890388425s ago: executing program 2 (id=58): socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) syz_open_dev$usbfs(&(0x7f0000000380), 0x1, 0x10200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_io_uring_setup(0x55fb, &(0x7f0000000180)={0x0, 0x2fb3, 0xc6, 0x2, 0xe6}, &(0x7f0000000040), &(0x7f0000000100)) 10.860396497s ago: executing program 2 (id=59): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000be731", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="e4", 0x1}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}], 0x20}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 10.010522385s ago: executing program 2 (id=83): io_uring_setup(0x2c4d, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000008500000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003b00090000000000cd00000001000000180003"], 0x2c}}, 0x0) 9.984437197s ago: executing program 2 (id=84): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) ioctl$KDSKBLED(r0, 0x4b65, 0xa0000000) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x1, 0xfffff034}, {0x80000006}]}, 0x10) mremap(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000480)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, @vsock={0x28, 0x0, 0x0, @local}, @generic={0x0, "eed1cebaac20fc5b93a2c0eb1ed7"}}) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000640)={{0x1, 0x0, 0x0, 0x3, 0xfff}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000024c0)={'macvlan0\x00', &(0x7f0000000040)=@ethtool_sset_info}) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003b80)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000008}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="200000000000000029000000370000000100000000000000c20400000007000024000000000000002900000032000000000000000000ac1414bb000000000000", @ANYRES32=0x0, @ANYBLOB="0000000088000000000000002900000039000000330e020300000000ff0100000000000000000000000000012001000000000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000000000000000001fe8000000000000000000000000000bbff0200000000000000000000000000011400000000000000290000003e00000002000000000000001400000000000000290000000800000003000000000000001400000000000000290000003e000000010001"], 0x130}}, {{&(0x7f0000000ac0)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000b00)="055d5e0dbf5b49e48912adfbcb39ba0bb92384536c21ed81a94836ac3292ffff9511ecfae8b1b9b00b49b215a57acabf74ca0a2779aa0ddb17470f7ab2e4790b32f45752032b95c9bea80a480cbc180d7ec6327b53f571ea8ca9882fafa84c3406cc78ec9f5c927fdff180bb994b0b5c58fcb77b9e3fbb2f1f387ac3ad147a0c65d559165c26f1121d12e20e4ae7a94a54", 0x91}, {&(0x7f0000000bc0)="fc6b09acee3c9b724b03fa827bd0a5dd533e2121c7f6074e936b15ce236e86be9dfeac79e7bad0142b4d284283e694f8e51f96e206020fe2f305c8d8ff86be17d46ccaf81ec3fa5ea9b36289cf0866d763d34d1293627d41795eb940759fb662638b651f93956ae09ba76176ef4449ffa25387cf568e2dcaa4b5c07a32201f334ab847fb97839a2a2357aafb421c96b28322e5cceb52d1903aec4e2faba3f5aefbb8c79242d72213fe970f34447fe2f306372da6a187d60ae34f23be43b573194bf6d98ebb20f1f2957f60a0bea54ff1eb26e94a474fc77d66dac05cb4a6622d6222cccf", 0xe4}, {&(0x7f0000000d80)="0a2bb1a2c36f6c8cbd119dbe5bb73d90fa752d7841c49a07761db72d028536372b4a009900e1281ca1c3327495da62a1681cbd2c508b19c342f9bb13d9a792927efbfa1066da566da0a04bde1cd3d718652e61d6fa617451ed46dd65811dd83d8d194ca770826c103790cc948b5802f98b4c8e92d07c758c34ffc64edbc31aad3c852dc3d2b315b925ac9c0d6017b8bad679a7c2667899209e323fd550fb13e4bf536de9d777", 0xa6}, {&(0x7f0000000e80)="dab81c67656e78d09aa8f2bbb004dd317fef08442efe2ed5790b23311e8d85ac5b1cd0d3f58615cd9c16614ca5105c04e50c421f7528247b4ad2fadb10d4dab7b4de5075c00bb4d2dcc465f6eeb5597a13493cd40eebbc9172e63b924014d64bcd3659f47cddf8a593e5640e35e65f9585fa624f9c03a5ae16af3b792df8e52ea5f434e04c159227be5f1498fd9cca2ec5228350dbc26d1a1323ea7ee20df2703a1adb25ebec37260a6a75baec08842e68", 0xb1}, {&(0x7f0000000f40)}, {&(0x7f0000000fc0)="bb695704bb88b08c90c040d15fa3911424ae0f", 0x13}], 0x6, &(0x7f0000000500)=ANY=[@ANYRES64=r3], 0x18}}, {{&(0x7f00000010c0)={0xa, 0x4e20, 0x7, @local, 0x80000000}, 0x1c, &(0x7f00000023c0)=[{&(0x7f0000001100)="132ddef60d54802bab40235e9f57ad9f5ab4b481640b4635c3c441a3ce38eb4604ba455b16b5639feab6cac80cbd36e7ac899d1116b1f955cb22420cff0df8bae23f102568f16f", 0x47}, {&(0x7f0000001180)="94cab989656fca52e2db9c095c67302b92b1482f00d708a4a9363f48fe62be269e6e8406cccb2aba6790048f5b79324e4b91a519a33c8e213c7068d65dba365f7be5f0206d5eedbc0cc61c29d165cbb9bf461cce907e8ae66b590b823fec283cc54e5fd20fd740db321695c05d248b2c6bf5bc3bbcfe143da7635cb7cdb014b8e3345855ce7163234bdd4c2096e9fbe5166fb0669730f4c6d29805f8d36ad00d9797bdb085456df53205645c8bc30dcf7e3902a66f3269e878b4b2cc86d2", 0xbe}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="4939d0819b3f05ba52be0e239a33a79ec63dffd477c8673d31684c26def7cde6e3b0b89776d54b8fd5e2505bb5f4f78f87ced48360c6be92918ff626b6db419c1a0886b298c5f5cdc08e6f05b7365776b6b284a649cfd89f862349744e91d048e35c86191089c9dbe7a81602f79fc70fe770b67febbcfa8684d187bd0079f35eb46c63ee821e0f85186ddceba36fef4a4c8d94196d2a7b2a03ca252de417adbd8e81f8a5073786fd6829d65b829ebb429595cc0d12c073fa28bdcc22c614d97a7458d8383704f47907184cb593791ac0a8d4", 0xd2}], 0x4, &(0x7f0000002b80)=ANY=[@ANYBLOB="500000000000000029000000360000005d060000000000000502000405020020c20400000000c20400000005040100c910fe88000000000000000000000000010104013f0103000000000000000000001400000000000000290000000800000006000000000000002400000000000000290000003200"/136, @ANYRES32=0x0, @ANYBLOB="000000005000000000000000290000003600000029060000000000000730000000030a0004040000000000000000090000000000000007000000000000000000000000000000070000000000000000000000000078000000390000001d0c010000000000fc020000000000de0000000000000000fc0000000000000000000000000000030000000000000000000000000000000100000000000000000000000000000000fc00007400000000000000000000000001ff02000000000000000000a85c6e6f0000000000000000"], 0x158}}, {{&(0x7f0000002440)={0xa, 0x4e24, 0xd1, @loopback}, 0x1c, &(0x7f0000002ac0)=[{&(0x7f0000002700)}, {&(0x7f0000002780)="01d6107a0922920b9d42f943399a5c27ca31c83299172e4899dbfa5fd7ceb13abf14fc32dc237041403ae391328ab62619fe739f4a6fb03ea878655ac2549ee35dfe22ab9ae8f4e4eebf26527492848240ef002e36b685981c98a0a919043c74d43e10a211f0953e54a0", 0x6a}, {&(0x7f0000002800)="26339ab94895f927e9058274f946858b5e479ab6086b4974364e413512cbf0591a66517e316ebf963061113c7af167d8127ea778ab0aba45f8a95a79fd3ed5d3d51a1a7e90dafb7937f7cecc0cd98a2f6db058011f77bcac95b7db2329917fdf76ce30faed865f98eea1e23b10bf8b96c6bafaa73a62bf7cb480aa447cf137bf0e2447d93e4c0b808c1d659f446485311539f6d4a976262c0087a30d0b7f8fdb174a027e7e9a8661fbdb3d55bf4d960ff329bf5602b9dee2028605ea4e15f56f7fe85bdcd06e0771207f4fd9adf1f1cba0823d4c6c122202c31f4cf2fb0ee85895df9f", 0xe3}, {&(0x7f0000002480)="62ed4acf42e5a270f3db18fcee8ce0f7876658998551df5565d4a12c8b7b395aa6a34e7998ca6f1ddc3163f66236b90ce161", 0x32}, {&(0x7f0000002900)}, {&(0x7f0000002a00)="32614b3e2c3386dceca0776c37ca138fbad2ad015066e88a0f60aa5956511231ec647ddf9a933c3808bb153357941b3b1b2dc6cb138042dfb08957541a09420a68185d31f88e7cd239dcb939b77e08d6ff7b732e77fea7eedb80c947dde3e1503bd2ae18941521bfd38aa995a1ba82d27d3db6c247318073606f987ef0295598a082eb8f4c8bb0ac800d1aa3be", 0x8d}], 0x6, &(0x7f0000002b40)=ANY=[@ANYBLOB="280000000000000029000000360000000004010205bc000500"/40], 0x28}}], 0x4, 0x24008081) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f00000000c0), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) pipe(0x0) r8 = openat$cgroup_procs(r6, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000040), 0x12) write$cgroup_freezer_state(r7, &(0x7f0000000400)='FROZEN\x00', 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000140), 0x12) 4.929501993s ago: executing program 3 (id=164): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 4.929072443s ago: executing program 3 (id=165): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setitimer(0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x2710}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x284, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r5, r6}, 0xc) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r2) r7 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x2c00) r8 = gettid() fcntl$setown(r2, 0x8, r8) fcntl$setsig(r7, 0xa, 0xe) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 4.045565264s ago: executing program 3 (id=172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="00100000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000001800058008000100756470000c00028008000400ff0f0000"], 0x2c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x8000, 0xff9a659bd530a6ac, 0x400, 0x1ff, {{0x8, 0x4, 0x1, 0x25, 0x20, 0x67, 0x0, 0x3, 0x2f, 0x0, @local, @loopback, {[@timestamp_prespec={0x44, 0xc, 0xdc, 0x3, 0xb, [{@multicast2, 0x800}]}]}}}}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000006000000010000000500000000000000a307b470b8bec4bb7717ace7d3646bc2dbb7d43276c1586ce8380e34acc55a67990a82af6810bd118bbaa596b723c16b1de04c641490e7c95d1346b0696b3b84d59aba82e4cf5abe1d5a58f6e92aa610614faaaa83802e6315547261bb755df3c3feb780190ac86887bf5f6f6822ce346d4207ab", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xa, 0x4, 0x8, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000200), &(0x7f0000000280)=r6}, 0x20) syz_clone(0x240c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_da_reserve_space\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="00f90000dd00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='ext4_da_reserve_space\x00', r11}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000000), 0xfea7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r3, 0x29, 0x50, 0x7, 0x9, 0x2, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x700, 0x5, 0x8}}) 4.007083507s ago: executing program 3 (id=173): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000be731", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="e4", 0x1}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}], 0x20}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3.06644887s ago: executing program 3 (id=190): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) syz_usb_connect$cdc_ecm(0x6, 0x152, &(0x7f0000000e00)=ANY=[], 0x0) gettid() r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r5, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x400002, 0x0) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r6, @ANYBLOB="00000000c378310ffd0000010000000000000000", @ANYBLOB="81541955b74a31d7d44bbafcb51583e8903754597704732cd32576e3050c5a499a26d10fdb5f2d3356bb3ca5f371732e96e5e47bc5697173847f57e3847d161aa11d4b00c9ad6a4e51ad1442becb6f6e13a66dfdf51ec0030df06d286e11d268acb1031552c6f882698b080365816159df70a9df36af7f8532825cdd40095a5978a05d312099d38e41f479e7d175dd2a811ffe014e114dfdee3fbe6010fa176c31a885fe93e8d59884deb9065e95a4d9c44a3b3f47ebf8230777d8e3c119ea3c63a0bf740472898b16d5ea794d8750b0847854832fbcf5d431696e3fd7", @ANYRES32, @ANYBLOB='\x00'/13], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb932"], 0xfdef) 1.772689859s ago: executing program 1 (id=215): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000500000000000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff000000000000000000006c79d149dfb2a4dfd9a900000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='~\x00\x00\n', @ANYRES16=0x0, @ANYBLOB="0000f33bdc97a8d29ebcae76e05f43000000", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000800a500000000000400a6804000a6800a00060008021100000100000a00060008021100000100000a00060008021100000000000a00060008021100000100000a00060008021100000000000800a50001"], 0x7c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003308030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) 1.752674261s ago: executing program 1 (id=216): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000005, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000fe850000002300000095"], &(0x7f0000001500)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.696378105s ago: executing program 1 (id=219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000005740), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) epoll_create1(0x0) statfs(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000005800)={0x0, 0x0, &(0x7f00000057c0)={&(0x7f0000005780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) 847.520313ms ago: executing program 1 (id=225): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, 0x0) 817.139695ms ago: executing program 1 (id=227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000300000024000180060005004e230000060001000200000008000300ac81feaa080006"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x1, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0001000000000000000080000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, &(0x7f0000000600)=""/170, 0x0, 0xaa, 0x0, 0x8, 0x0, @void, @value}, 0x28) close(0xffffffffffffffff) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000580), 0x12) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="090000000000000052d72bd51c1f519e33050000004603"], 0xffdd) 781.323567ms ago: executing program 0 (id=230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) 705.275942ms ago: executing program 0 (id=231): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_io_uring_setup(0x55fb, &(0x7f0000000180)={0x0, 0x2fb3, 0xc6, 0x2, 0xe6}, &(0x7f0000000040), &(0x7f0000000100)) 693.727123ms ago: executing program 0 (id=232): openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) ppoll(0x0, 0x0, &(0x7f0000000b40), &(0x7f0000000b80)={[0x8000000000000001]}, 0x8) 664.758215ms ago: executing program 1 (id=233): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x84}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000002000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001811000a", @ANYRES32=r2, @ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000190a0102000000000000000000000000ff00010073797a3000000000"], 0x20}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETS2(r7, 0x5457, 0x0) ioctl$TCFLSH(r6, 0x5608, 0x0) recvmmsg(r0, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}, 0x765c}], 0x1, 0x2, 0x0) r8 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x458, 0x228, 0x2e8, 0x0, 0x228, 0x228, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2e8}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'vcan0\x00', 'veth1_to_team\x00'}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "d1a1"}}, @common=@addrtype={{0x30}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x6}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_macvtap\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 664.601765ms ago: executing program 0 (id=234): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0, r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='mpol=interleave']) 664.102745ms ago: executing program 0 (id=235): getrlimit(0xf, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4008, 0x3, 0x240, 0xd8, 0x500b, 0x148, 0xd8, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x2f}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 646.222487ms ago: executing program 0 (id=236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000005740), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) epoll_create1(0x0) statfs(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000005800)={0x0, 0x0, &(0x7f00000057c0)={&(0x7f0000005780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) 450.10067ms ago: executing program 4 (id=239): io_uring_setup(0x2c4d, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) sendmsg$nl_generic(r0, 0x0, 0x0) 426.395442ms ago: executing program 4 (id=240): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x3, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8d4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 425.961462ms ago: executing program 4 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x7, 0x5, 0x809, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000049000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) 399.754263ms ago: executing program 4 (id=242): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_io_uring_setup(0x55fb, &(0x7f0000000180)={0x0, 0x2fb3, 0xc6, 0x2, 0xe6}, &(0x7f0000000040), &(0x7f0000000100)) 399.227593ms ago: executing program 4 (id=243): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0, r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) 386.737784ms ago: executing program 4 (id=244): io_uring_setup(0x2c4d, &(0x7f0000000380)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804000, &(0x7f0000000200), 0x3, 0x4ae, &(0x7f0000000a00)="$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") lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r5, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x400002, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) unshare(0x22020600) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003b00090000000000cd00000001000000180003"], 0x2c}}, 0x0) 0s ago: executing program 3 (id=245): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_emit_ethernet(0x176, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) kernel console output (not intermixed with test programs): [ 17.871461][ T29] audit: type=1400 audit(1726337631.132:81): avc: denied { read } for pid=2941 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts. [ 20.861555][ T29] audit: type=1400 audit(1726337634.122:82): avc: denied { mounton } for pid=3244 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.871622][ T3244] cgroup: Unknown subsys name 'net' [ 20.884259][ T29] audit: type=1400 audit(1726337634.122:83): avc: denied { mount } for pid=3244 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.911611][ T29] audit: type=1400 audit(1726337634.152:84): avc: denied { unmount } for pid=3244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.047671][ T3244] cgroup: Unknown subsys name 'rlimit' [ 21.199607][ T29] audit: type=1400 audit(1726337634.462:85): avc: denied { setattr } for pid=3244 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.222936][ T29] audit: type=1400 audit(1726337634.462:86): avc: denied { create } for pid=3244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.243409][ T29] audit: type=1400 audit(1726337634.462:87): avc: denied { write } for pid=3244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.250467][ T3249] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.263926][ T29] audit: type=1400 audit(1726337634.462:88): avc: denied { read } for pid=3244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.293231][ T29] audit: type=1400 audit(1726337634.462:89): avc: denied { mounton } for pid=3244 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.318028][ T29] audit: type=1400 audit(1726337634.462:90): avc: denied { mount } for pid=3244 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.341263][ T29] audit: type=1400 audit(1726337634.532:91): avc: denied { relabelto } for pid=3249 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.370518][ T3244] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.461389][ T3256] chnl_net:caif_netlink_parms(): no params data found [ 22.544950][ T3262] chnl_net:caif_netlink_parms(): no params data found [ 22.557506][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 22.600316][ T3256] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.607418][ T3256] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.614733][ T3256] bridge_slave_0: entered allmulticast mode [ 22.621296][ T3256] bridge_slave_0: entered promiscuous mode [ 22.640652][ T3257] chnl_net:caif_netlink_parms(): no params data found [ 22.651580][ T3256] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.658701][ T3256] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.665805][ T3256] bridge_slave_1: entered allmulticast mode [ 22.672320][ T3256] bridge_slave_1: entered promiscuous mode [ 22.688072][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 22.726968][ T3256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.746473][ T3262] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.753646][ T3262] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.761006][ T3262] bridge_slave_0: entered allmulticast mode [ 22.767447][ T3262] bridge_slave_0: entered promiscuous mode [ 22.774682][ T3256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.783871][ T3262] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.791050][ T3262] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.798313][ T3262] bridge_slave_1: entered allmulticast mode [ 22.804674][ T3262] bridge_slave_1: entered promiscuous mode [ 22.839708][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.846925][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.854134][ T3264] bridge_slave_0: entered allmulticast mode [ 22.860729][ T3264] bridge_slave_0: entered promiscuous mode [ 22.867796][ T3256] team0: Port device team_slave_0 added [ 22.873493][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.880641][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.887795][ T3264] bridge_slave_1: entered allmulticast mode [ 22.894081][ T3264] bridge_slave_1: entered promiscuous mode [ 22.907004][ T3257] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.914155][ T3257] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.921294][ T3257] bridge_slave_0: entered allmulticast mode [ 22.927743][ T3257] bridge_slave_0: entered promiscuous mode [ 22.934592][ T3256] team0: Port device team_slave_1 added [ 22.950401][ T3262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.963816][ T3257] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.970970][ T3257] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.978276][ T3257] bridge_slave_1: entered allmulticast mode [ 22.984551][ T3257] bridge_slave_1: entered promiscuous mode [ 23.000231][ T3262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.010406][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.032011][ T3256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.039011][ T3256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.064902][ T3256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.080329][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.094246][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.101500][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.109155][ T3260] bridge_slave_0: entered allmulticast mode [ 23.115498][ T3260] bridge_slave_0: entered promiscuous mode [ 23.121856][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.128987][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.136299][ T3260] bridge_slave_1: entered allmulticast mode [ 23.142657][ T3260] bridge_slave_1: entered promiscuous mode [ 23.149844][ T3257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.159249][ T3256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.166212][ T3256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.192185][ T3256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.208098][ T3262] team0: Port device team_slave_0 added [ 23.223643][ T3257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.240537][ T3262] team0: Port device team_slave_1 added [ 23.246769][ T3264] team0: Port device team_slave_0 added [ 23.262963][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.277199][ T3257] team0: Port device team_slave_0 added [ 23.287777][ T3264] team0: Port device team_slave_1 added [ 23.293606][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.300601][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.326562][ T3262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.343885][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.357579][ T3257] team0: Port device team_slave_1 added [ 23.371975][ T3260] team0: Port device team_slave_0 added [ 23.377877][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.384808][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.410816][ T3262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.435061][ T3260] team0: Port device team_slave_1 added [ 23.453234][ T3256] hsr_slave_0: entered promiscuous mode [ 23.459508][ T3256] hsr_slave_1: entered promiscuous mode [ 23.470526][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.477532][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.503471][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.519546][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.526631][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.552607][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.563804][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.570864][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.596856][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.608006][ T3257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.614945][ T3257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.640938][ T3257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.652134][ T3257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.659110][ T3257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.685206][ T3257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.696283][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.703243][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.729259][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.793553][ T3262] hsr_slave_0: entered promiscuous mode [ 23.799605][ T3262] hsr_slave_1: entered promiscuous mode [ 23.805325][ T3262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.813009][ T3262] Cannot create hsr debugfs directory [ 23.820535][ T3264] hsr_slave_0: entered promiscuous mode [ 23.826620][ T3264] hsr_slave_1: entered promiscuous mode [ 23.832413][ T3264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.839965][ T3264] Cannot create hsr debugfs directory [ 23.849791][ T3257] hsr_slave_0: entered promiscuous mode [ 23.855849][ T3257] hsr_slave_1: entered promiscuous mode [ 23.861693][ T3257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.869247][ T3257] Cannot create hsr debugfs directory [ 23.885174][ T3260] hsr_slave_0: entered promiscuous mode [ 23.891294][ T3260] hsr_slave_1: entered promiscuous mode [ 23.897228][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.904760][ T3260] Cannot create hsr debugfs directory [ 24.070121][ T3256] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.078597][ T3256] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.098170][ T3256] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.108949][ T3256] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.130865][ T3264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.139349][ T3264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.148217][ T3264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.164832][ T3264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.175321][ T3257] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.192276][ T3257] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.200829][ T3257] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.211245][ T3257] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.228506][ T3262] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.237829][ T3262] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.246070][ T3262] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.254521][ T3262] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.286843][ T3260] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.306834][ T3260] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.315333][ T3260] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.328922][ T3260] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.393741][ T3256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.403949][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.413816][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.424333][ T3257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.448018][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.455087][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.464197][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.471380][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.482396][ T3256] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.494232][ T3262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.505442][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.512534][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.526169][ T3257] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.536892][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.544166][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.561832][ T3262] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.580509][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.587665][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.597162][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.604195][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.628742][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.635797][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.647347][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.654477][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.696168][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.732637][ T3257] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.743283][ T3257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.756944][ T3262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.780554][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.792709][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.810356][ T3256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.819361][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.826444][ T3267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.837148][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.844317][ T3267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.888641][ T3262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.931513][ T3257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.002513][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.024666][ T3264] veth0_vlan: entered promiscuous mode [ 25.038508][ T3256] veth0_vlan: entered promiscuous mode [ 25.060531][ T3256] veth1_vlan: entered promiscuous mode [ 25.070715][ T3264] veth1_vlan: entered promiscuous mode [ 25.091384][ T3262] veth0_vlan: entered promiscuous mode [ 25.110670][ T3262] veth1_vlan: entered promiscuous mode [ 25.119789][ T3264] veth0_macvtap: entered promiscuous mode [ 25.135664][ T3264] veth1_macvtap: entered promiscuous mode [ 25.143315][ T3256] veth0_macvtap: entered promiscuous mode [ 25.158541][ T3262] veth0_macvtap: entered promiscuous mode [ 25.166968][ T3262] veth1_macvtap: entered promiscuous mode [ 25.174216][ T3256] veth1_macvtap: entered promiscuous mode [ 25.184628][ T3256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.199125][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.209638][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.220508][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.229825][ T3256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.240222][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.250776][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.260676][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.271187][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.282583][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.304756][ T3256] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.313741][ T3256] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.322441][ T3256] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.331238][ T3256] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.341974][ T3260] veth0_vlan: entered promiscuous mode [ 25.349852][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.360427][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.371514][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.380959][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.391425][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.401379][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.411850][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.422435][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.430599][ T3260] veth1_vlan: entered promiscuous mode [ 25.442004][ T3257] veth0_vlan: entered promiscuous mode [ 25.452326][ T3262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.461191][ T3262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.469927][ T3262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.478629][ T3262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.489326][ T3264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.498104][ T3264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.506851][ T3264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.515533][ T3264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.529587][ T3257] veth1_vlan: entered promiscuous mode [ 25.560304][ T3260] veth0_macvtap: entered promiscuous mode [ 25.573942][ T3260] veth1_macvtap: entered promiscuous mode [ 25.585504][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.596041][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.605859][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.616445][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.626323][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.636888][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.651234][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.662338][ T3257] veth0_macvtap: entered promiscuous mode [ 25.684606][ T3257] veth1_macvtap: entered promiscuous mode [ 25.698031][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.708606][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.718452][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.728895][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.732397][ T3408] loop1: detected capacity change from 0 to 512 [ 25.738710][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.738726][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.746644][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.779610][ T3408] EXT4-fs: Ignoring removed orlov option [ 25.787834][ T3260] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.796797][ T3260] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.805638][ T3260] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.814590][ T3260] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.826074][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.826947][ T3408] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.836649][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.849600][ T3408] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 25.869708][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.880268][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.890286][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.900844][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.910743][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.921174][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.932905][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.934910][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 25.934921][ T29] audit: type=1400 audit(1726337639.192:130): avc: denied { append } for pid=2941 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 25.944902][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.965914][ T29] audit: type=1400 audit(1726337639.212:131): avc: denied { ioctl } for pid=3402 comm="syz.0.6" path="/dev/mISDNtimer" dev="devtmpfs" ino=224 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.968894][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.979256][ T29] audit: type=1400 audit(1726337639.212:132): avc: denied { read } for pid=3402 comm="syz.0.6" path="/dev/mISDNtimer" dev="devtmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.002024][ T3408] EXT4-fs (loop1): 1 orphan inode deleted [ 26.003778][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.013602][ T3408] EXT4-fs (loop1): 1 truncate cleaned up [ 26.024760][ T29] audit: type=1400 audit(1726337639.242:133): avc: denied { read } for pid=3402 comm="syz.0.6" dev="nsfs" ino=4026532396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.036626][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.042321][ T29] audit: type=1400 audit(1726337639.242:134): avc: denied { open } for pid=3402 comm="syz.0.6" path="net:[4026532396]" dev="nsfs" ino=4026532396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.052904][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.052923][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.052931][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.058595][ T29] audit: type=1400 audit(1726337639.242:135): avc: denied { create } for pid=3402 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.079314][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.089142][ T29] audit: type=1400 audit(1726337639.242:136): avc: denied { bind } for pid=3402 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.089164][ T29] audit: type=1400 audit(1726337639.242:137): avc: denied { prog_load } for pid=3402 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.113814][ T3408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.122368][ T29] audit: type=1400 audit(1726337639.242:138): avc: denied { bpf } for pid=3402 comm="syz.0.6" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.171640][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.172345][ T29] audit: type=1400 audit(1726337639.242:139): avc: denied { perfmon } for pid=3402 comm="syz.0.6" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.288737][ T3257] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.297526][ T3257] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.306312][ T3257] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.315043][ T3257] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.324636][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.346996][ T3414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 26.443796][ T3431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9'. [ 26.509719][ T3441] No such timeout policy "syz0" [ 26.541262][ T3445] loop4: detected capacity change from 0 to 512 [ 26.558278][ T3445] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.571095][ T3445] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.128500][ T3413] syz.0.9 (3413) used greatest stack depth: 11368 bytes left [ 27.136516][ T3414] syz.0.9 (3414) used greatest stack depth: 11248 bytes left [ 27.152670][ T3452] loop0: detected capacity change from 0 to 128 [ 27.220833][ T3461] FAULT_INJECTION: forcing a failure. [ 27.220833][ T3461] name failslab, interval 1, probability 0, space 0, times 1 [ 27.233533][ T3461] CPU: 0 UID: 0 PID: 3461 Comm: syz.1.22 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 27.244100][ T3461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 27.254172][ T3461] Call Trace: [ 27.257522][ T3461] [ 27.260441][ T3461] dump_stack_lvl+0xf2/0x150 [ 27.265059][ T3461] dump_stack+0x15/0x20 [ 27.269204][ T3461] should_fail_ex+0x229/0x230 [ 27.273905][ T3461] ? alloc_fs_context+0x44/0x4e0 [ 27.278836][ T3461] should_failslab+0x8f/0xb0 [ 27.283423][ T3461] __kmalloc_cache_noprof+0x4b/0x2a0 [ 27.288738][ T3461] alloc_fs_context+0x44/0x4e0 [ 27.293617][ T3461] ? try_module_get+0xae/0x1a0 [ 27.298381][ T3461] fs_context_for_mount+0x21/0x30 [ 27.303451][ T3461] do_new_mount+0xf3/0x690 [ 27.307906][ T3461] path_mount+0x49b/0xb30 [ 27.312229][ T3461] __se_sys_mount+0x27c/0x2d0 [ 27.316994][ T3461] __x64_sys_mount+0x67/0x80 [ 27.321577][ T3461] x64_sys_call+0x203e/0x2d60 [ 27.326388][ T3461] do_syscall_64+0xc9/0x1c0 [ 27.330881][ T3461] ? clear_bhb_loop+0x55/0xb0 [ 27.335678][ T3461] ? clear_bhb_loop+0x55/0xb0 [ 27.340378][ T3461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 27.346277][ T3461] RIP: 0033:0x7fa8b7d7def9 [ 27.350691][ T3461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 27.370289][ T3461] RSP: 002b:00007fa8b69f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 27.378705][ T3461] RAX: ffffffffffffffda RBX: 00007fa8b7f35f80 RCX: 00007fa8b7d7def9 [ 27.386663][ T3461] RDX: 0000000020000080 RSI: 0000000020000280 RDI: 0000000000000000 [ 27.394621][ T3461] RBP: 00007fa8b69f1090 R08: 0000000020000740 R09: 0000000000000000 [ 27.402580][ T3461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 27.410537][ T3461] R13: 0000000000000000 R14: 00007fa8b7f35f80 R15: 00007ffc43860aa8 [ 27.418500][ T3461] [ 27.481855][ T3257] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 27.635554][ T3491] loop0: detected capacity change from 0 to 512 [ 27.644528][ T3493] loop2: detected capacity change from 0 to 128 [ 27.653708][ T3491] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 27.659626][ T3493] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 27.676448][ T3493] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 27.692738][ T3491] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.36: iget: bad extended attribute block 19 [ 27.705414][ T3491] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.36: couldn't read orphan inode 15 (err -117) [ 27.705744][ T3260] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 27.718795][ T3491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.755483][ T3491] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.36: bg 0: block 65: padding at end of block bitmap is not set [ 27.772621][ T3491] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.36: Failed to acquire dquot type 0 [ 27.805452][ T3491] syz.0.36 (3491) used greatest stack depth: 9976 bytes left [ 27.830234][ T3256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.964753][ T3519] bridge0: entered promiscuous mode [ 27.972380][ T3519] bridge0: left promiscuous mode [ 28.102683][ T3538] loop1: detected capacity change from 0 to 512 [ 28.128151][ T3538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.147399][ T3538] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 28.659005][ T3582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 28.740617][ T3585] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 28.805616][ T3591] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.831826][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.858834][ T3593] loop1: detected capacity change from 0 to 128 [ 28.868496][ T3593] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 28.882698][ T3593] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.911867][ T3264] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 29.093631][ T3620] syz.1.85[3620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.093687][ T3620] syz.1.85[3620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.145487][ T3623] loop4: detected capacity change from 0 to 128 [ 29.166274][ T3620] Driver unsupported XDP return value 0 on prog (id 50) dev N/A, expect packet loss! [ 29.192492][ T3623] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.210044][ T3623] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.231593][ T3257] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 29.302569][ T3620] netlink: 256 bytes leftover after parsing attributes in process `syz.1.85'. [ 29.311908][ T3620] unsupported nlmsg_type 40 [ 29.383700][ C1] hrtimer: interrupt took 28926 ns [ 29.432859][ T3629] FAULT_INJECTION: forcing a failure. [ 29.432859][ T3629] name failslab, interval 1, probability 0, space 0, times 0 [ 29.445603][ T3629] CPU: 1 UID: 0 PID: 3629 Comm: syz.4.88 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 29.456185][ T3629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 29.466307][ T3629] Call Trace: [ 29.469584][ T3629] [ 29.472519][ T3629] dump_stack_lvl+0xf2/0x150 [ 29.477174][ T3629] dump_stack+0x15/0x20 [ 29.481334][ T3629] should_fail_ex+0x229/0x230 [ 29.486112][ T3629] ? audit_log_start+0x34c/0x6b0 [ 29.491134][ T3629] should_failslab+0x8f/0xb0 [ 29.495736][ T3629] kmem_cache_alloc_noprof+0x4c/0x290 [ 29.501122][ T3629] audit_log_start+0x34c/0x6b0 [ 29.505980][ T3629] audit_seccomp+0x4b/0x130 [ 29.510476][ T3629] __seccomp_filter+0x6fa/0x1180 [ 29.515408][ T3629] ? kernel_wait4+0x1bb/0x1d0 [ 29.520136][ T3629] ? __pfx_child_wait_callback+0x10/0x10 [ 29.525767][ T3629] __secure_computing+0x9f/0x1c0 [ 29.530779][ T3629] syscall_trace_enter+0xd1/0x1f0 [ 29.535868][ T3629] do_syscall_64+0xaa/0x1c0 [ 29.540371][ T3629] ? clear_bhb_loop+0x55/0xb0 [ 29.545085][ T3629] ? clear_bhb_loop+0x55/0xb0 [ 29.549750][ T3629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.555642][ T3629] RIP: 0033:0x7fb95cb2c93c [ 29.560046][ T3629] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 29.579668][ T3629] RSP: 002b:00007fb95b7a1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 29.588070][ T3629] RAX: ffffffffffffffda RBX: 00007fb95cce5f80 RCX: 00007fb95cb2c93c [ 29.596031][ T3629] RDX: 000000000000000f RSI: 00007fb95b7a10a0 RDI: 0000000000000007 [ 29.604007][ T3629] RBP: 00007fb95b7a1090 R08: 0000000000000000 R09: 0000000000000000 [ 29.611975][ T3629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.620217][ T3629] R13: 0000000000000000 R14: 00007fb95cce5f80 R15: 00007ffefaff3128 [ 29.628188][ T3629] [ 29.643775][ T3636] netlink: 14 bytes leftover after parsing attributes in process `syz.1.89'. [ 29.777305][ T3650] loop0: detected capacity change from 0 to 128 [ 29.813650][ T3650] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.826906][ T3650] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 29.919524][ T3256] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.012913][ T3667] loop0: detected capacity change from 0 to 256 [ 30.020602][ T3667] msdos: Bad value for 'gid' [ 30.025213][ T3667] msdos: Bad value for 'gid' [ 30.034699][ T3667] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.065048][ T3667] loop0: detected capacity change from 0 to 512 [ 30.072856][ T3667] ======================================================= [ 30.072856][ T3667] WARNING: The mand mount option has been deprecated and [ 30.072856][ T3667] and is ignored by this kernel. Remove the mand [ 30.072856][ T3667] option from the mount to silence this warning. [ 30.072856][ T3667] ======================================================= [ 30.116704][ T3667] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 30.124892][ T3667] EXT4-fs (loop0): orphan cleanup on readonly fs [ 30.132610][ T3667] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 30.148866][ T3667] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 30.156417][ T3667] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.102: bg 0: block 40: padding at end of block bitmap is not set [ 30.172183][ T3667] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 30.181542][ T3667] EXT4-fs (loop0): 1 truncate cleaned up [ 30.189377][ T3667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 30.324444][ T3673] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 30.734572][ T3675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 30.814177][ T3256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.913182][ T3691] loop3: detected capacity change from 0 to 1024 [ 30.937270][ T3691] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 30.972799][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 30.972812][ T29] audit: type=1400 audit(1726337644.232:382): avc: denied { create } for pid=3695 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 31.013496][ T29] audit: type=1326 audit(1726337644.232:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10eaf3def9 code=0x7ffc0000 [ 31.036978][ T29] audit: type=1326 audit(1726337644.232:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10eaf3def9 code=0x7ffc0000 [ 31.060341][ T29] audit: type=1326 audit(1726337644.232:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10eaf3def9 code=0x7ffc0000 [ 31.083645][ T29] audit: type=1326 audit(1726337644.232:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10eaf3def9 code=0x7ffc0000 [ 31.106960][ T29] audit: type=1326 audit(1726337644.232:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10eaf3def9 code=0x7ffc0000 [ 31.130404][ T29] audit: type=1326 audit(1726337644.232:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10eaf3def9 code=0x7ffc0000 [ 31.153690][ T29] audit: type=1326 audit(1726337644.232:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10eaf3def9 code=0x7ffc0000 [ 31.176929][ T29] audit: type=1326 audit(1726337644.232:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10eaf3def9 code=0x7ffc0000 [ 31.200167][ T29] audit: type=1326 audit(1726337644.232:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10eaf3def9 code=0x7ffc0000 [ 31.216094][ T3700] No such timeout policy "syz0" [ 31.408731][ T3711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 31.472234][ T3713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.119'. [ 31.701940][ T3726] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 31.808465][ T3732] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 32.101693][ T3734] loop0: detected capacity change from 0 to 512 [ 32.109200][ T3734] EXT4-fs: Ignoring removed orlov option [ 32.115302][ T3734] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.127516][ T3734] EXT4-fs (loop0): 1 orphan inode deleted [ 32.133276][ T3734] EXT4-fs (loop0): 1 truncate cleaned up [ 32.139572][ T3734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.159902][ T3256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.312730][ T3742] tmpfs: Bad value for 'nr_inodes' [ 32.441915][ T3749] infiniband syz1: set active [ 32.446656][ T3749] infiniband syz1: added team_slave_0 [ 32.457194][ T3749] RDS/IB: syz1: added [ 32.461279][ T3749] smc: adding ib device syz1 with port count 1 [ 32.467474][ T3749] smc: ib device syz1 port 1 has pnetid [ 32.659726][ T3763] loop1: detected capacity change from 0 to 512 [ 32.666480][ T3763] EXT4-fs: Ignoring removed orlov option [ 32.672430][ T3763] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.683687][ T3763] EXT4-fs (loop1): 1 orphan inode deleted [ 32.689592][ T3763] EXT4-fs (loop1): 1 truncate cleaned up [ 32.695679][ T3763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.719633][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.876430][ T3783] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 33.084916][ T3788] loop0: detected capacity change from 0 to 512 [ 33.092770][ T3788] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.103785][ T3788] EXT4-fs (loop0): 1 truncate cleaned up [ 33.110008][ T3788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.134436][ T3256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.807605][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 33.818624][ T3807] FAULT_INJECTION: forcing a failure. [ 33.818624][ T3807] name failslab, interval 1, probability 0, space 0, times 0 [ 33.831290][ T3807] CPU: 1 UID: 0 PID: 3807 Comm: syz.1.155 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 33.841983][ T3807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 33.852047][ T3807] Call Trace: [ 33.855340][ T3807] [ 33.858262][ T3807] dump_stack_lvl+0xf2/0x150 [ 33.862868][ T3807] dump_stack+0x15/0x20 [ 33.867013][ T3807] should_fail_ex+0x229/0x230 [ 33.871700][ T3807] ? alloc_empty_file+0xd0/0x310 [ 33.876689][ T3807] should_failslab+0x8f/0xb0 [ 33.881361][ T3807] kmem_cache_alloc_noprof+0x4c/0x290 [ 33.886734][ T3807] alloc_empty_file+0xd0/0x310 [ 33.891557][ T3807] alloc_file_pseudo+0xc3/0x140 [ 33.896482][ T3807] sock_alloc_file+0x9b/0x1d0 [ 33.901312][ T3807] do_accept+0x225/0x3a0 [ 33.905698][ T3807] __sys_accept4+0xc4/0x150 [ 33.910187][ T3807] __x64_sys_accept+0x44/0x50 [ 33.914942][ T3807] x64_sys_call+0x294f/0x2d60 [ 33.919642][ T3807] do_syscall_64+0xc9/0x1c0 [ 33.924169][ T3807] ? clear_bhb_loop+0x55/0xb0 [ 33.928976][ T3807] ? clear_bhb_loop+0x55/0xb0 [ 33.933645][ T3807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.939621][ T3807] RIP: 0033:0x7fa8b7d7def9 [ 33.944023][ T3807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.963674][ T3807] RSP: 002b:00007fa8b69f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 33.972075][ T3807] RAX: ffffffffffffffda RBX: 00007fa8b7f35f80 RCX: 00007fa8b7d7def9 [ 33.980116][ T3807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 33.988149][ T3807] RBP: 00007fa8b69f1090 R08: 0000000000000000 R09: 0000000000000000 [ 33.996204][ T3807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.004160][ T3807] R13: 0000000000000000 R14: 00007fa8b7f35f80 R15: 00007ffc43860aa8 [ 34.012124][ T3807] [ 34.046762][ T3812] No such timeout policy "syz0" [ 34.151580][ T3831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'. [ 34.162686][ T3831] gretap0: entered promiscuous mode [ 34.168065][ T3831] macvtap1: entered promiscuous mode [ 34.173414][ T3831] macvtap1: entered allmulticast mode [ 34.178840][ T3831] gretap0: entered allmulticast mode [ 34.601672][ T3839] loop0: detected capacity change from 0 to 4096 [ 34.928403][ T3848] No such timeout policy "syz0" [ 34.981935][ T3852] loop3: detected capacity change from 0 to 1024 [ 34.998195][ T3852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.036108][ T3855] loop1: detected capacity change from 0 to 164 [ 35.052379][ T40] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 35.067606][ T40] EXT4-fs (loop3): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 64 with error 28 [ 35.079936][ T40] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.079936][ T40] [ 35.089593][ T40] EXT4-fs (loop3): Total free blocks count 0 [ 35.095655][ T40] EXT4-fs (loop3): Free/Dirty block details [ 35.101559][ T40] EXT4-fs (loop3): free_blocks=68451041280 [ 35.107417][ T40] EXT4-fs (loop3): dirty_blocks=64 [ 35.112503][ T40] EXT4-fs (loop3): Block reservation details [ 35.118507][ T40] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 35.125634][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.377980][ T3873] loop0: detected capacity change from 0 to 512 [ 35.384553][ T3873] EXT4-fs: Ignoring removed orlov option [ 35.390982][ T3873] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.402546][ T3873] EXT4-fs (loop0): 1 orphan inode deleted [ 35.408371][ T3873] EXT4-fs (loop0): 1 truncate cleaned up [ 35.414341][ T3873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.436612][ T3256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.583139][ T3877] xt_hashlimit: max too large, truncated to 1048576 [ 35.594480][ T3877] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 35.811219][ T3882] No such timeout policy "syz0" [ 35.929743][ T3892] capability: warning: `syz.4.186' uses deprecated v2 capabilities in a way that may be insecure [ 36.196844][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 36.196857][ T29] audit: type=1400 audit(1726337649.462:497): avc: denied { write } for pid=3914 comm="syz.1.194" name="vlan0" dev="proc" ino=4026533262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 36.372263][ T3925] loop0: detected capacity change from 0 to 512 [ 36.380257][ T3925] EXT4-fs: Ignoring removed orlov option [ 36.387592][ T29] audit: type=1326 audit(1726337649.642:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b7d7def9 code=0x7ffc0000 [ 36.390817][ T3925] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.410871][ T29] audit: type=1326 audit(1726337649.642:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b7d7def9 code=0x7ffc0000 [ 36.423879][ T3925] EXT4-fs (loop0): 1 orphan inode deleted [ 36.444158][ T29] audit: type=1326 audit(1726337649.642:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b7d7def9 code=0x7ffc0000 [ 36.449735][ T3925] EXT4-fs (loop0): 1 truncate cleaned up [ 36.450681][ T3925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.473007][ T29] audit: type=1326 audit(1726337649.642:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b7d7def9 code=0x7ffc0000 [ 36.514150][ T29] audit: type=1326 audit(1726337649.642:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b7d7def9 code=0x7ffc0000 [ 36.537458][ T29] audit: type=1326 audit(1726337649.652:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b7d7def9 code=0x7ffc0000 [ 36.560871][ T29] audit: type=1326 audit(1726337649.652:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b7d7def9 code=0x7ffc0000 [ 36.584156][ T29] audit: type=1326 audit(1726337649.652:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b7d7def9 code=0x7ffc0000 [ 36.607470][ T29] audit: type=1326 audit(1726337649.652:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa8b7d7def9 code=0x7ffc0000 [ 36.631728][ T3256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.660312][ T3934] FAULT_INJECTION: forcing a failure. [ 36.660312][ T3934] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.673479][ T3934] CPU: 0 UID: 0 PID: 3934 Comm: syz.0.202 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 36.684121][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 36.694184][ T3934] Call Trace: [ 36.697449][ T3934] [ 36.700367][ T3934] dump_stack_lvl+0xf2/0x150 [ 36.704999][ T3934] dump_stack+0x15/0x20 [ 36.709169][ T3934] should_fail_ex+0x229/0x230 [ 36.713976][ T3934] should_fail+0xb/0x10 [ 36.718116][ T3934] should_fail_usercopy+0x1a/0x20 [ 36.723181][ T3934] _copy_from_user+0x1e/0xd0 [ 36.727793][ T3934] __se_sys_add_key+0x1ec/0x320 [ 36.732628][ T3934] ? fput+0x13b/0x180 [ 36.736633][ T3934] __x64_sys_add_key+0x67/0x80 [ 36.741403][ T3934] x64_sys_call+0x157d/0x2d60 [ 36.746087][ T3934] do_syscall_64+0xc9/0x1c0 [ 36.750576][ T3934] ? clear_bhb_loop+0x55/0xb0 [ 36.755264][ T3934] ? clear_bhb_loop+0x55/0xb0 [ 36.759920][ T3934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.765798][ T3934] RIP: 0033:0x7f10eaf3def9 [ 36.770229][ T3934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.789857][ T3934] RSP: 002b:00007f10e9bb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 36.798255][ T3934] RAX: ffffffffffffffda RBX: 00007f10eb0f5f80 RCX: 00007f10eaf3def9 [ 36.806215][ T3934] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000020000100 [ 36.814225][ T3934] RBP: 00007f10e9bb7090 R08: 000000001e6d7da2 R09: 0000000000000000 [ 36.822239][ T3934] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 36.830192][ T3934] R13: 0000000000000000 R14: 00007f10eb0f5f80 R15: 00007ffdfe470ee8 [ 36.838168][ T3934] [ 36.929099][ T3942] loop0: detected capacity change from 0 to 512 [ 36.947249][ T3942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.959769][ T3942] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.973240][ T3942] IPv6: Can't replace route, no match found [ 36.986097][ T3256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.066203][ T3946] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 37.200032][ T3952] No such timeout policy "syz0" [ 37.263369][ T3962] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 37.315952][ T3969] syz.1.216[3969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.316077][ T3969] syz.1.216[3969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.181719][ T3984] No such timeout policy "syz0" [ 38.279058][ T3992] syzkaller0: entered promiscuous mode [ 38.284638][ T3992] syzkaller0: entered allmulticast mode [ 38.400846][ T4008] No such timeout policy "syz0" [ 38.443624][ T4011] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 38.681723][ T4028] loop4: detected capacity change from 0 to 512 [ 38.699040][ T4028] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.711831][ T4028] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.250472][ T3338] ================================================================== [ 39.258576][ T3338] BUG: KCSAN: data-race in p9_conn_cancel / p9_poll_workfn [ 39.265762][ T3338] [ 39.268066][ T3338] write to 0xffff8881152eae28 of 4 bytes by task 3335 on cpu 0: [ 39.275702][ T3338] p9_conn_cancel+0x89/0x400 [ 39.280297][ T3338] p9_write_work+0x3ac/0x750 [ 39.284864][ T3338] process_scheduled_works+0x483/0x9a0 [ 39.290325][ T3338] worker_thread+0x51d/0x6f0 [ 39.294904][ T3338] kthread+0x1d1/0x210 [ 39.298953][ T3338] ret_from_fork+0x4b/0x60 [ 39.303349][ T3338] ret_from_fork_asm+0x1a/0x30 [ 39.308107][ T3338] [ 39.310434][ T3338] read to 0xffff8881152eae28 of 4 bytes by task 3338 on cpu 1: [ 39.317955][ T3338] p9_poll_workfn+0xc0/0x420 [ 39.322551][ T3338] process_scheduled_works+0x483/0x9a0 [ 39.328080][ T3338] worker_thread+0x51d/0x6f0 [ 39.332655][ T3338] kthread+0x1d1/0x210 [ 39.336702][ T3338] ret_from_fork+0x4b/0x60 [ 39.341096][ T3338] ret_from_fork_asm+0x1a/0x30 [ 39.345844][ T3338] [ 39.348146][ T3338] value changed: 0x00000000 -> 0xffffffe0 [ 39.353854][ T3338] [ 39.356159][ T3338] Reported by Kernel Concurrency Sanitizer on: [ 39.362297][ T3338] CPU: 1 UID: 0 PID: 3338 Comm: kworker/1:4 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 39.373318][ T3338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 39.383369][ T3338] Workqueue: events p9_poll_workfn [ 39.388470][ T3338] ================================================================== [ 39.516708][ T3257] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000.