last executing test programs: 8.687709011s ago: executing program 3 (id=26): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 8.596318327s ago: executing program 2 (id=27): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x9) syz_emit_ethernet(0x7f, &(0x7f0000000500)={@multicast, @remote, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, '$', "247ef4", 0xf6, "945d88168ef01a598e2fbff7ba6447d752048de2c91acca80fb1454714d2d3a29ea40e88ae9c7621f2af7eeb5dfd4afd0c8100791cd22861b388e0650885042270b376c86890b106bebc599c58881dd34849a729d9d562d16202d41919b7f630bca354184288712611"}}}}}, 0x0) 8.404778669s ago: executing program 3 (id=28): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x3, 0x10000, 0xe3, r1}) chdir(&(0x7f0000000100)='./file0\x00') 8.048819093s ago: executing program 1 (id=30): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001100010000000000000000198a32a0be", @ANYRES32=r2], 0x34}}, 0x0) 7.999791786s ago: executing program 2 (id=31): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) munlockall() 7.819954168s ago: executing program 0 (id=32): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1848000000d3ac3a92f597462900000018910000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000008c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0x40000f5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x140, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x55b, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0xc, 0x10000, 0x400, 0x8001, 0x10000003, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x7fc, 0xffff, 0x106, 0x100096, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x10003, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0xa, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x9, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) 7.17050736s ago: executing program 2 (id=33): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00') 6.841145602s ago: executing program 3 (id=34): r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c00070c27bd700000ebffff01000000", @ANYRES32, @ANYBLOB="4000a200080001"], 0x30}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.495898145s ago: executing program 0 (id=35): fchmodat(0xffffffffffffff9c, 0x0, 0x300) r0 = gettid() timer_create(0x1, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r3, 0x407, 0x0) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x9, 0x0, 0x0, 0x10}}, 0x50) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000) 4.130266149s ago: executing program 3 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mkdir(0x0, 0x4) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) 4.107434481s ago: executing program 1 (id=37): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r2, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 3.667878249s ago: executing program 2 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r7, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000800)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00@\x00', 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @loopback={0xfc}}, @hao={0xc9, 0x10, @private1}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x40}}}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) clock_adjtime(0x2, &(0x7f0000000480)={0x2, 0x2, 0x9, 0x2, 0x0, 0xfffffffffffffffb, 0x4, 0x4, 0xe5, 0xffffffff, 0x2, 0x81, 0x0, 0x4, 0xfffffffffffffff7, 0xffffffff00000001, 0x1b1, 0x4, 0x7, 0x7, 0x26eb, 0xd136, 0x3, 0x10000, 0x9, 0x8}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1233, &(0x7f0000000740)="$eJzs28FrHFUcB/BfkqapW5ONWqstiA+9VJChycGLvQRJQbqgtI3QCsLUbHTJuBsyS2BFjJ68+neIIKI3QbzpJRf/A8FbLh4riCPJatvIrrJm7Zby+VzyI+99Z3+Pt7swy5v9S5++t7lRZht5N6anpmJ6KyLdTpFiOv7yUbzw8vc/PHPtxs0rK43G6tWULq9cX3oppbTw7LdvfvD5c991T7/x9cI3c7G3+Nb+L8s/753dO7f/+/V3W2Vqland6aY83ep0uvmtopnWW+VmltLrRTMvm6nVLpvbR8Y3is7WVi/l7fX52tZ2syxT3u6lzWYvdTupu91L+Tt5q52yLEvztWB0J+5Ua5/drqoqoqpm42RUVVU9ErU4HY/GfCxEPRbjsXg8nogz8WScjafi6fjypy96BwkAAAAAAAAAAAAAAAAAAABgfEZ9/v/c4axJdw0AAAAAAAAAAAAAAAAAAAAPl2s3bl5ZaTRWr6Z0KqL4ZGdtZ63/tz++shGtKKIZF6Mev8Xh0/99/fryq43Vi+nQYnxc7P6Z391ZmzmaX4p6vDg4v9TPp6P5uajdm1+OepwZlJ+N5YH5U3Hh+XvyWdTjx7ejE0Wsx0H27ut/uJTSK681/pY/fzhvuJn7sT0AAAAwFlm6Y+D9e5YNG+/nR/h94Mj99UH2/ImJLp2IKHvvb+ZF0dx+SIvZY17nwvHbuBQRY1nOyWFD1W5/M0e54GxEjNbGr1VVPRB7euyiNnpq+CdlLiL+cz9T43pvjL+Y9DcT98PdTR86Zf2rwf+f/v+6AgAAAAAAAAAA4N8MPQY4908nBGdGOk446TUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCrAAAA///SHczP") 3.667648799s ago: executing program 0 (id=39): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) 3.628456682s ago: executing program 1 (id=40): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = eventfd(0x1) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xffffffffffffffda, 0x0, {0x9, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0x6c3000000, 0xb, 0x200000, 0xb0, 0x0, 0x2000, 0x8, 0x0, 0x0, 0x3000000, 0x1000}}}, 0x78) writev(r2, &(0x7f0000002480)=[{&(0x7f0000002400)="3151549062641a31", 0x8}], 0x1) 2.648121456s ago: executing program 3 (id=41): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) pause() 2.599687739s ago: executing program 0 (id=42): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) ioprio_set$pid(0x2, 0x0, 0x6000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x71f43, 0x20b}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40000) 2.404840482s ago: executing program 2 (id=43): pipe2$9p(&(0x7f0000000080), 0x800) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f0000000040)=0x4, 0x5, 0x1, 0x0, &(0x7f0000004000)=0x1, 0xb1024000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000100000"], 0x0, 0xfa50, 0x0, 0x0, 0x0, 0x48}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) getpeername$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d}) 1.83411444s ago: executing program 1 (id=44): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4400, 0x0, 0x0, 0x11, 0x0, @empty, @loopback}, {0x4e21, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "93c9691928972925723d55c712e63c92b492a3c50c9c3d27093a79585e8b73b3", "8aa4c506a2ba17a29171ce08a1e0f09d", {"c952a7f1f0443ce3114cee3518bfb345"}}}}}}}, 0x0) 976.011656ms ago: executing program 3 (id=45): r0 = gettid() ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1c) tkill(r0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 975.787836ms ago: executing program 0 (id=46): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 973.489336ms ago: executing program 2 (id=47): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 853.606724ms ago: executing program 1 (id=48): socket(0x0, 0x9f5faa811eea84c5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setpriority(0x0, 0x0, 0xacf0165) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsync(r2) ioctl$NS_GET_OWNER_UID(r2, 0xb704, 0x0) fstat(r1, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/237, 0xed, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0xf4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x301, &(0x7f0000000640)={'\x00', 0x40, 0x200000a, 0x2, 0x8, 0xfffffffffffffffd}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r3, 0xe0ffff, 0x19, 0x3) 544.060814ms ago: executing program 0 (id=49): setxattr$trusted_overlay_origin(0x0, &(0x7f0000000000), 0x0, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000", @ANYBLOB="0000000000b401002400128009000100626f6e640000000014000280050011790000000005000d"], 0x44}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=50): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x101) statx(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x100, 0x1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x60008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@volatile}, {@volatile}], [{@dont_measure}, {@uid_lt={'uid<', r0}}, {@smackfsdef={'smackfsdef', 0x3d, 'lowerdir'}}], 0x2c}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2f) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) timerfd_create(0x7, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@mh={{0x28}, {"df07"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x4, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x2, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. [ 92.785240][ T5776] cgroup: Unknown subsys name 'net' [ 92.927986][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.921575][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.879313][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.892068][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.928700][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.942601][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.946496][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.952988][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.961203][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.970154][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.973999][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.991195][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.991318][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.999876][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.009745][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.015191][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.022390][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.027898][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.043108][ T5800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.051891][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.057924][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.069243][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.077963][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.085893][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.095631][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.122109][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.840694][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 97.859132][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 97.930546][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 98.000468][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 98.161648][ T786] cfg80211: failed to load regulatory.db [ 98.241298][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.249257][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.260112][ T5787] bridge_slave_0: entered allmulticast mode [ 98.268044][ T5787] bridge_slave_0: entered promiscuous mode [ 98.278114][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.285966][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.294313][ T5785] bridge_slave_0: entered allmulticast mode [ 98.301997][ T5785] bridge_slave_0: entered promiscuous mode [ 98.312533][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.320083][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.327552][ T5785] bridge_slave_1: entered allmulticast mode [ 98.334944][ T5785] bridge_slave_1: entered promiscuous mode [ 98.361691][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.369202][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.376510][ T5801] bridge_slave_0: entered allmulticast mode [ 98.385010][ T5801] bridge_slave_0: entered promiscuous mode [ 98.422485][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.430220][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.437701][ T5787] bridge_slave_1: entered allmulticast mode [ 98.445128][ T5787] bridge_slave_1: entered promiscuous mode [ 98.484141][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.491641][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.499339][ T5801] bridge_slave_1: entered allmulticast mode [ 98.507192][ T5801] bridge_slave_1: entered promiscuous mode [ 98.582745][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.590791][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.598686][ T5788] bridge_slave_0: entered allmulticast mode [ 98.606062][ T5788] bridge_slave_0: entered promiscuous mode [ 98.618341][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.631878][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.647292][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.671264][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.679048][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.687369][ T5788] bridge_slave_1: entered allmulticast mode [ 98.694707][ T5788] bridge_slave_1: entered promiscuous mode [ 98.704572][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.751898][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.767766][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.814616][ T5787] team0: Port device team_slave_0 added [ 98.871751][ T5787] team0: Port device team_slave_1 added [ 98.899917][ T5785] team0: Port device team_slave_0 added [ 98.927404][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.956363][ T5785] team0: Port device team_slave_1 added [ 98.969204][ T5801] team0: Port device team_slave_0 added [ 98.978417][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.004406][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.012074][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.039026][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.053669][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.061087][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.087896][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.117704][ T5794] Bluetooth: hci1: command tx timeout [ 99.118342][ T5801] team0: Port device team_slave_1 added [ 99.190828][ T5788] team0: Port device team_slave_0 added [ 99.203495][ T5788] team0: Port device team_slave_1 added [ 99.204432][ T5794] Bluetooth: hci2: command tx timeout [ 99.209560][ T5789] Bluetooth: hci3: command tx timeout [ 99.215936][ T5800] Bluetooth: hci0: command tx timeout [ 99.226237][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.235192][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.263650][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.277212][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.284264][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.312557][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.379173][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.386233][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.413307][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.443432][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.450920][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.477904][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.492042][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.499269][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.526768][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.553784][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.561355][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.589075][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.647906][ T5787] hsr_slave_0: entered promiscuous mode [ 99.655139][ T5787] hsr_slave_1: entered promiscuous mode [ 99.677597][ T5785] hsr_slave_0: entered promiscuous mode [ 99.684693][ T5785] hsr_slave_1: entered promiscuous mode [ 99.691848][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.700222][ T5785] Cannot create hsr debugfs directory [ 99.820576][ T5788] hsr_slave_0: entered promiscuous mode [ 99.829478][ T5788] hsr_slave_1: entered promiscuous mode [ 99.835978][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.844317][ T5788] Cannot create hsr debugfs directory [ 99.936389][ T5801] hsr_slave_0: entered promiscuous mode [ 99.944510][ T5801] hsr_slave_1: entered promiscuous mode [ 99.953117][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.960982][ T5801] Cannot create hsr debugfs directory [ 100.429167][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.452139][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.466374][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.486965][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.592869][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.614313][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.626479][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.650174][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.783679][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.796057][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.809547][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.839504][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.980879][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.993055][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.016074][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.028704][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.041353][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.098573][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.141856][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.149515][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.198240][ T5800] Bluetooth: hci1: command tx timeout [ 101.208944][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.216214][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.277350][ T5794] Bluetooth: hci2: command tx timeout [ 101.277485][ T5789] Bluetooth: hci3: command tx timeout [ 101.283013][ T5800] Bluetooth: hci0: command tx timeout [ 101.355352][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.473439][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.490838][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.524549][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.531923][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.571441][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.584930][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.593640][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.643481][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.653444][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.694282][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.702234][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.723903][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.882894][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.954857][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.962202][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.016282][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.023634][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.114610][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.330044][ T5787] veth0_vlan: entered promiscuous mode [ 102.412559][ T5787] veth1_vlan: entered promiscuous mode [ 102.530878][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.621558][ T5787] veth0_macvtap: entered promiscuous mode [ 102.656390][ T5787] veth1_macvtap: entered promiscuous mode [ 102.742683][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.785347][ T5788] veth0_vlan: entered promiscuous mode [ 102.802949][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.847693][ T5788] veth1_vlan: entered promiscuous mode [ 102.862512][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.881741][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.912012][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.923053][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.932382][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.942025][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.110439][ T5788] veth0_macvtap: entered promiscuous mode [ 103.140385][ T5785] veth0_vlan: entered promiscuous mode [ 103.192217][ T5788] veth1_macvtap: entered promiscuous mode [ 103.233862][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.244063][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.268733][ T5801] veth0_vlan: entered promiscuous mode [ 103.288086][ T5801] veth1_vlan: entered promiscuous mode [ 103.294770][ T5800] Bluetooth: hci1: command tx timeout [ 103.329338][ T5785] veth1_vlan: entered promiscuous mode [ 103.359141][ T5800] Bluetooth: hci0: command tx timeout [ 103.359158][ T5789] Bluetooth: hci2: command tx timeout [ 103.368814][ T5789] Bluetooth: hci3: command tx timeout [ 103.392349][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.405837][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.420218][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.442235][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.453623][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.467993][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.487259][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.488631][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.504727][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.507173][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.521231][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.531908][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.576175][ T5801] veth0_macvtap: entered promiscuous mode [ 103.625612][ T5801] veth1_macvtap: entered promiscuous mode [ 103.673516][ T5785] veth0_macvtap: entered promiscuous mode [ 103.775301][ T5785] veth1_macvtap: entered promiscuous mode [ 103.813980][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.841502][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.854513][ T5878] syz.3.4[5878]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 103.855966][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.874195][ T5878] loop3: detected capacity change from 0 to 256 [ 103.881587][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.898447][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.899816][ T5878] ======================================================= [ 103.899816][ T5878] WARNING: The mand mount option has been deprecated and [ 103.899816][ T5878] and is ignored by this kernel. Remove the mand [ 103.899816][ T5878] option from the mount to silence this warning. [ 103.899816][ T5878] ======================================================= [ 104.013923][ T5878] FAT-fs (loop3): Directory bread(block 64) failed [ 104.025145][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.037261][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.048232][ T5878] FAT-fs (loop3): Directory bread(block 65) failed [ 104.055504][ T5878] FAT-fs (loop3): Directory bread(block 66) failed [ 104.062885][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.063444][ T5878] FAT-fs (loop3): Directory bread(block 67) failed [ 104.075243][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.091862][ T5878] FAT-fs (loop3): Directory bread(block 68) failed [ 104.099258][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.116470][ T5801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.126270][ T5878] FAT-fs (loop3): Directory bread(block 69) failed [ 104.127172][ T5801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.135906][ T5878] FAT-fs (loop3): Directory bread(block 70) failed [ 104.152638][ T5801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.152680][ T5801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.168379][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.185425][ T5878] FAT-fs (loop3): Directory bread(block 71) failed [ 104.192722][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.195187][ T5878] FAT-fs (loop3): Directory bread(block 72) failed [ 104.208653][ T5878] FAT-fs (loop3): Directory bread(block 73) failed [ 104.223941][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.238999][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.250405][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.262241][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.276745][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.296327][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.310595][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.375241][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.398745][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.409366][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.422414][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.433428][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.444452][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.458892][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.491063][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.500403][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.515010][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.524417][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.556411][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.592358][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.855997][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.887248][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.119310][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.155717][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.293603][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.345289][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.396859][ T5789] Bluetooth: hci1: command tx timeout [ 105.437675][ T5800] Bluetooth: hci2: command tx timeout [ 105.898660][ T5794] Bluetooth: hci0: command tx timeout [ 106.121081][ T5789] Bluetooth: hci3: command tx timeout [ 106.162256][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.213548][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.746713][ T28] audit: type=1326 audit(1759843352.348:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcef8eec9 code=0x7ffc0000 [ 106.850934][ T28] audit: type=1326 audit(1759843352.378:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcef8eec9 code=0x7ffc0000 [ 106.925295][ T28] audit: type=1326 audit(1759843352.388:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fcbcef8eec9 code=0x7ffc0000 [ 106.983520][ T28] audit: type=1326 audit(1759843352.388:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcef8eec9 code=0x7ffc0000 [ 107.020300][ T28] audit: type=1326 audit(1759843352.398:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcef8eec9 code=0x7ffc0000 [ 107.146835][ T28] audit: type=1326 audit(1759843352.508:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.1" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bedf8eec9 code=0x0 [ 107.300056][ T28] audit: type=1326 audit(1759843352.558:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f58f8eec9 code=0x7ffc0000 [ 107.324840][ T28] audit: type=1326 audit(1759843352.568:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f58f8eec9 code=0x7ffc0000 [ 107.347286][ T28] audit: type=1326 audit(1759843352.568:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f58f8eec9 code=0x7ffc0000 [ 107.374002][ T28] audit: type=1326 audit(1759843352.578:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4f58f8eec9 code=0x7ffc0000 [ 107.512612][ T5903] loop3: detected capacity change from 0 to 1024 [ 107.560914][ T5903] EXT4-fs: Ignoring removed orlov option [ 108.813998][ T5903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.749313][ T5920] loop1: detected capacity change from 0 to 128 [ 110.886708][ C0] sched: RT throttling activated [ 111.891300][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.927002][ T5918] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11'. [ 114.521184][ T5944] loop1: detected capacity change from 0 to 128 [ 115.037471][ T5948] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.279112][ T5944] futex_wake_op: syz.1.20 tries to shift op by 32; fix this program [ 115.524422][ T5946] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.544415][ T5944] team0: Port device team_slave_0 removed [ 115.919565][ T5938] syz.3.18 (5938) used greatest stack depth: 17960 bytes left [ 116.066086][ T5963] loop0: detected capacity change from 0 to 512 [ 116.104110][ T5963] EXT4-fs: inline encryption not supported [ 116.111697][ T5963] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.125299][ T5963] EXT4-fs (loop0): Test dummy encryption mode enabled [ 116.134611][ T5963] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 116.156128][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 116.156146][ T28] audit: type=1326 audit(1759843361.758:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcef8eec9 code=0x7ffc0000 [ 116.210391][ T5963] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.256703][ T28] audit: type=1326 audit(1759843361.758:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fcbcef8eec9 code=0x7ffc0000 [ 116.368512][ T5963] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.24: corrupted in-inode xattr: e_name out of bounds [ 116.375347][ T28] audit: type=1326 audit(1759843361.758:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcef8eec9 code=0x7ffc0000 [ 116.447171][ T28] audit: type=1326 audit(1759843361.758:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcef8eec9 code=0x7ffc0000 [ 116.591484][ T5963] EXT4-fs (loop0): Remounting filesystem read-only [ 116.657894][ T5963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.393734][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.30'. [ 117.645247][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.723168][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.195132][ T5976] bridge_slave_0 (unregistering): left allmulticast mode [ 119.448958][ T5976] bridge_slave_0 (unregistering): left promiscuous mode [ 120.158395][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.322433][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34'. [ 120.344376][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34'. [ 120.355069][ T5984] Zero length message leads to an empty skb [ 121.062030][ T6000] loop0: detected capacity change from 0 to 128 [ 121.246352][ T6004] mmap: syz.2.38 (6004) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 121.899355][ T6004] loop2: detected capacity change from 0 to 8192 [ 122.231876][ T28] audit: type=1326 audit(1759843367.758:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f58f8eec9 code=0x7ffc0000 [ 122.293426][ T28] audit: type=1326 audit(1759843367.768:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f58f8eec9 code=0x7ffc0000 [ 122.343523][ T28] audit: type=1326 audit(1759843367.868:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f58f8eec9 code=0x7ffc0000 [ 122.382638][ T6011] gretap1: entered allmulticast mode [ 122.414327][ T28] audit: type=1326 audit(1759843367.868:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f58f8eec9 code=0x7ffc0000 [ 122.466185][ T28] audit: type=1326 audit(1759843367.868:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f58f8eec9 code=0x7ffc0000 [ 122.502813][ T28] audit: type=1326 audit(1759843367.868:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f4f58f8eec9 code=0x7ffc0000 [ 122.878480][ T6015] futex_wake_op: syz.2.43 tries to shift op by 36; fix this program [ 124.082870][ T6027] loop1: detected capacity change from 0 to 16 [ 124.165131][ T6027] erofs: (device loop1): mounted with root inode @ nid 36. [ 124.241229][ T6027] syz.1.48: attempt to access beyond end of device [ 124.241229][ T6027] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 124.331640][ T6027] syz.1.48: attempt to access beyond end of device [ 124.331640][ T6027] loop1: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 124.436486][ T6027] syz.1.48: attempt to access beyond end of device [ 124.436486][ T6027] loop1: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 124.646481][ T5788] BUG: Bad page state in process syz-executor pfn:29bfd [ 124.655847][ T5788] page:ffffea0000a6ff40 refcount:0 mapcount:0 mapping:ffff88805d8f87c8 index:0x2 pfn:0x29bfd [ 124.668211][ T5788] aops:z_erofs_cache_aops ino:0 [ 124.674528][ T5788] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 124.683713][ T5788] page_type: 0xffffffff() [ 124.690170][ T5788] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805d8f87c8 [ 124.700879][ T5788] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 124.710427][ T5788] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 124.718971][ T5788] page_owner tracks the page as allocated [ 124.726884][ T5788] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6027, tgid 6026 (syz.1.48), ts 124240575955, free_ts 123777811798 [ 124.751036][ T5788] post_alloc_hook+0x1cd/0x210 [ 124.756125][ T5788] get_page_from_freelist+0x195c/0x19f0 [ 124.762504][ T5788] __alloc_pages+0x1e3/0x460 [ 124.769014][ T5788] z_erofs_do_read_page+0x20c0/0x3680 [ 124.774670][ T5788] z_erofs_pcluster_readmore+0x2cf/0x450 [ 124.782470][ T5788] z_erofs_read_folio+0x208/0x540 [ 124.788916][ T5788] filemap_read_folio+0x167/0x760 [ 124.794560][ T5788] do_read_cache_folio+0x470/0x7e0 [ 124.801032][ T5788] erofs_bread+0x16f/0x630 [ 124.805848][ T5788] erofs_namei+0x28c/0xf00 [ 124.810735][ T5788] erofs_lookup+0x135/0x310 [ 124.815338][ T5788] path_openat+0x10b8/0x3190 [ 124.821279][ T5788] do_filp_open+0x1c5/0x3d0 [ 124.826497][ T5788] do_sys_openat2+0x12c/0x1c0 [ 124.831390][ T5788] __x64_sys_creat+0x90/0xb0 [ 124.836174][ T5788] do_syscall_64+0x55/0xb0 [ 124.841017][ T5788] page last free stack trace: [ 124.846514][ T5788] free_unref_page_prepare+0x7ce/0x8e0 [ 124.852329][ T5788] free_unref_page_list+0xbe/0x860 [ 124.858098][ T5788] release_pages+0x1fa0/0x2220 [ 124.863229][ T5788] tlb_flush_mmu+0x368/0x4f0 [ 124.868170][ T5788] tlb_finish_mmu+0xc3/0x1d0 [ 124.873209][ T5788] exit_mmap+0x3f0/0xb50 [ 124.877843][ T5788] __mmput+0x118/0x3c0 [ 124.883760][ T5788] exit_mm+0x1da/0x2c0 [ 124.888575][ T5788] do_exit+0x88e/0x23c0 [ 124.892934][ T5788] do_group_exit+0x21b/0x2d0 [ 124.898057][ T5788] __x64_sys_exit_group+0x3f/0x40 [ 124.903206][ T5788] do_syscall_64+0x55/0xb0 [ 124.908474][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.915000][ T5788] Modules linked in: [ 124.919324][ T5788] CPU: 0 PID: 5788 Comm: syz-executor Not tainted syzkaller #0 [ 124.927382][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.938297][ T5788] Call Trace: [ 124.942442][ T5788] [ 124.947076][ T5788] dump_stack_lvl+0x16c/0x230 [ 124.952908][ T5788] ? show_regs_print_info+0x20/0x20 [ 124.958630][ T5788] ? swiotlb_print_info+0x70/0x70 [ 124.964345][ T5788] bad_page+0x14b/0x170 [ 124.969074][ T5788] free_unref_page_prepare+0x887/0x8e0 [ 124.976724][ T5788] free_unref_page+0x32/0x2e0 [ 124.982109][ T5788] ? __folio_put+0xef/0x210 [ 124.987201][ T5788] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 124.993700][ T5788] erofs_shrink_workstation+0x118/0x290 [ 124.999391][ T5788] ? erofs_shrinker_unregister+0x170/0x170 [ 125.006053][ T5788] ? io_schedule+0xd0/0xd0 [ 125.010826][ T5788] ? kobject_put+0x43c/0x470 [ 125.015738][ T5788] erofs_shrinker_unregister+0x5d/0x170 [ 125.021533][ T5788] erofs_put_super+0x4e/0x150 [ 125.027500][ T5788] ? erofs_free_inode+0xb0/0xb0 [ 125.032946][ T5788] generic_shutdown_super+0x134/0x2b0 [ 125.039277][ T5788] kill_block_super+0x44/0x90 [ 125.044196][ T5788] erofs_kill_sb+0x4c/0x140 [ 125.049515][ T5788] deactivate_locked_super+0x97/0x100 [ 125.055615][ T5788] cleanup_mnt+0x429/0x4c0 [ 125.060991][ T5788] task_work_run+0x1ce/0x250 [ 125.065723][ T5788] ? task_work_cancel+0x240/0x240 [ 125.070849][ T5788] ? exit_to_user_mode_loop+0x3b/0x110 [ 125.076739][ T5788] exit_to_user_mode_loop+0xe6/0x110 [ 125.082911][ T5788] exit_to_user_mode_prepare+0xf6/0x180 [ 125.088539][ T5788] syscall_exit_to_user_mode+0x1a/0x50 [ 125.095650][ T5788] do_syscall_64+0x61/0xb0 [ 125.100748][ T5788] ? clear_bhb_loop+0x40/0x90 [ 125.106273][ T5788] ? clear_bhb_loop+0x40/0x90 [ 125.111477][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.117690][ T5788] RIP: 0033:0x7fcbcef901f7 [ 125.123198][ T5788] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 125.145339][ T5788] RSP: 002b:00007fff7ada7e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 125.154485][ T5788] RAX: 0000000000000000 RBX: 00007fcbcf011d7d RCX: 00007fcbcef901f7 [ 125.164793][ T5788] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7ada7f50 [ 125.174752][ T5788] RBP: 00007fff7ada7f50 R08: 0000000000000000 R09: 0000000000000000 [ 125.183055][ T5788] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7ada8fe0 [ 125.191359][ T5788] R13: 00007fcbcf011d7d R14: 000000000001e656 R15: 00007fff7ada9020 [ 125.200470][ T5788] [ 125.208758][ T5788] Disabling lock debugging due to kernel taint [ 125.217605][ T5788] BUG: Bad page state in process syz-executor pfn:25c63 [ 125.224813][ T5788] page:ffffea00009718c0 refcount:0 mapcount:0 mapping:ffff88805d8f87c8 index:0x3 pfn:0x25c63 [ 125.238613][ T5788] aops:z_erofs_cache_aops ino:0 [ 125.243815][ T5788] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 125.253924][ T5788] page_type: 0xffffffff() [ 125.260354][ T5788] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805d8f87c8 [ 125.271419][ T5788] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 125.281368][ T5788] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 125.292787][ T5788] page_owner tracks the page as allocated [ 125.299545][ T5788] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6027, tgid 6026 (syz.1.48), ts 124240599271, free_ts 123777793778 [ 125.326382][ T5788] post_alloc_hook+0x1cd/0x210 [ 125.331427][ T5788] get_page_from_freelist+0x195c/0x19f0 [ 125.337747][ T5788] __alloc_pages+0x1e3/0x460 [ 125.343073][ T5788] z_erofs_do_read_page+0x20c0/0x3680 [ 125.351563][ T5788] z_erofs_pcluster_readmore+0x2cf/0x450 [ 125.358330][ T5788] z_erofs_read_folio+0x208/0x540 [ 125.363423][ T5788] filemap_read_folio+0x167/0x760 [ 125.368596][ T5788] do_read_cache_folio+0x470/0x7e0 [ 125.373896][ T5788] erofs_bread+0x16f/0x630 [ 125.379055][ T5788] erofs_namei+0x28c/0xf00 [ 125.384426][ T5788] erofs_lookup+0x135/0x310 [ 125.389342][ T5788] path_openat+0x10b8/0x3190 [ 125.394570][ T5788] do_filp_open+0x1c5/0x3d0 [ 125.399934][ T5788] do_sys_openat2+0x12c/0x1c0 [ 125.404713][ T5788] __x64_sys_creat+0x90/0xb0 [ 125.409635][ T5788] do_syscall_64+0x55/0xb0 [ 125.414143][ T5788] page last free stack trace: [ 125.418924][ T5788] free_unref_page_prepare+0x7ce/0x8e0 [ 125.424472][ T5788] free_unref_page_list+0xbe/0x860 [ 125.429755][ T5788] release_pages+0x1fa0/0x2220 [ 125.434668][ T5788] tlb_flush_mmu+0x368/0x4f0 [ 125.439437][ T5788] tlb_finish_mmu+0xc3/0x1d0 [ 125.444204][ T5788] exit_mmap+0x3f0/0xb50 [ 125.448582][ T5788] __mmput+0x118/0x3c0 [ 125.453065][ T5788] exit_mm+0x1da/0x2c0 [ 125.457501][ T5788] do_exit+0x88e/0x23c0 [ 125.462005][ T5788] do_group_exit+0x21b/0x2d0 [ 125.466750][ T5788] __x64_sys_exit_group+0x3f/0x40 [ 125.471851][ T5788] do_syscall_64+0x55/0xb0 [ 125.476319][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.483038][ T5788] Modules linked in: [ 125.487019][ T5788] CPU: 0 PID: 5788 Comm: syz-executor Tainted: G B syzkaller #0 [ 125.496082][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.507338][ T5788] Call Trace: [ 125.511182][ T5788] [ 125.514343][ T5788] dump_stack_lvl+0x16c/0x230 [ 125.519068][ T5788] ? show_regs_print_info+0x20/0x20 [ 125.524656][ T5788] ? swiotlb_print_info+0x70/0x70 [ 125.530868][ T5788] bad_page+0x14b/0x170 [ 125.535065][ T5788] free_unref_page_prepare+0x887/0x8e0 [ 125.540579][ T5788] free_unref_page+0x32/0x2e0 [ 125.545303][ T5788] ? __folio_put+0xef/0x210 [ 125.549958][ T5788] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 125.557246][ T5788] erofs_shrink_workstation+0x118/0x290 [ 125.563769][ T5788] ? erofs_shrinker_unregister+0x170/0x170 [ 125.571401][ T5788] ? io_schedule+0xd0/0xd0 [ 125.576337][ T5788] ? kobject_put+0x43c/0x470 [ 125.581193][ T5788] erofs_shrinker_unregister+0x5d/0x170 [ 125.587416][ T5788] erofs_put_super+0x4e/0x150 [ 125.592325][ T5788] ? erofs_free_inode+0xb0/0xb0 [ 125.597239][ T5788] generic_shutdown_super+0x134/0x2b0 [ 125.602773][ T5788] kill_block_super+0x44/0x90 [ 125.607505][ T5788] erofs_kill_sb+0x4c/0x140 [ 125.612083][ T5788] deactivate_locked_super+0x97/0x100 [ 125.617537][ T5788] cleanup_mnt+0x429/0x4c0 [ 125.622024][ T5788] task_work_run+0x1ce/0x250 [ 125.626681][ T5788] ? task_work_cancel+0x240/0x240 [ 125.631771][ T5788] ? exit_to_user_mode_loop+0x3b/0x110 [ 125.637308][ T5788] exit_to_user_mode_loop+0xe6/0x110 [ 125.642677][ T5788] exit_to_user_mode_prepare+0xf6/0x180 [ 125.649216][ T5788] syscall_exit_to_user_mode+0x1a/0x50 [ 125.654847][ T5788] do_syscall_64+0x61/0xb0 [ 125.659323][ T5788] ? clear_bhb_loop+0x40/0x90 [ 125.664070][ T5788] ? clear_bhb_loop+0x40/0x90 [ 125.673665][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.679749][ T5788] RIP: 0033:0x7fcbcef901f7 [ 125.684311][ T5788] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 125.705844][ T5788] RSP: 002b:00007fff7ada7e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 125.716676][ T5788] RAX: 0000000000000000 RBX: 00007fcbcf011d7d RCX: 00007fcbcef901f7 [ 125.725189][ T5788] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7ada7f50 [ 125.733217][ T5788] RBP: 00007fff7ada7f50 R08: 0000000000000000 R09: 0000000000000000 [ 125.741333][ T5788] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7ada8fe0 [ 125.749434][ T5788] R13: 00007fcbcf011d7d R14: 000000000001e656 R15: 00007fff7ada9020 [ 125.757467][ T5788] [ 125.763164][ T5788] BUG: Bad page state in process syz-executor pfn:1bb77 [ 125.771079][ T5788] page:ffffea00006eddc0 refcount:0 mapcount:0 mapping:ffff88805d8f87c8 index:0x4 pfn:0x1bb77 [ 125.782276][ T5788] aops:z_erofs_cache_aops ino:0 [ 125.788345][ T5788] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 125.797159][ T5788] page_type: 0xffffffff() [ 125.802708][ T5788] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805d8f87c8 [ 125.812255][ T5788] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 125.821080][ T5788] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 125.829209][ T5788] page_owner tracks the page as allocated [ 125.835627][ T5788] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6027, tgid 6026 (syz.1.48), ts 124240621997, free_ts 123777776288 [ 125.860403][ T5788] post_alloc_hook+0x1cd/0x210 [ 125.865858][ T5788] get_page_from_freelist+0x195c/0x19f0 [ 125.872242][ T5788] __alloc_pages+0x1e3/0x460 [ 125.876990][ T5788] z_erofs_do_read_page+0x20c0/0x3680 [ 125.882718][ T5788] z_erofs_pcluster_readmore+0x2cf/0x450 [ 125.888504][ T5788] z_erofs_read_folio+0x208/0x540 [ 125.893805][ T5788] filemap_read_folio+0x167/0x760 [ 125.899232][ T5788] do_read_cache_folio+0x470/0x7e0 [ 125.905564][ T5788] erofs_bread+0x16f/0x630 [ 125.910555][ T5788] erofs_namei+0x28c/0xf00 [ 125.915370][ T5788] erofs_lookup+0x135/0x310 [ 125.920418][ T5788] path_openat+0x10b8/0x3190 [ 125.925288][ T5788] do_filp_open+0x1c5/0x3d0 [ 125.930165][ T5788] do_sys_openat2+0x12c/0x1c0 [ 125.935280][ T5788] __x64_sys_creat+0x90/0xb0 [ 125.940346][ T5788] do_syscall_64+0x55/0xb0 [ 125.945025][ T5788] page last free stack trace: [ 125.950003][ T5788] free_unref_page_prepare+0x7ce/0x8e0 [ 125.955570][ T5788] free_unref_page_list+0xbe/0x860 [ 125.960931][ T5788] release_pages+0x1fa0/0x2220 [ 125.965770][ T5788] tlb_flush_mmu+0x368/0x4f0 [ 125.970497][ T5788] tlb_finish_mmu+0xc3/0x1d0 [ 125.975178][ T5788] exit_mmap+0x3f0/0xb50 [ 125.979642][ T5788] __mmput+0x118/0x3c0 [ 125.983811][ T5788] exit_mm+0x1da/0x2c0 [ 125.988214][ T5788] do_exit+0x88e/0x23c0 [ 125.992433][ T5788] do_group_exit+0x21b/0x2d0 [ 125.997191][ T5788] __x64_sys_exit_group+0x3f/0x40 [ 126.003783][ T5788] do_syscall_64+0x55/0xb0 [ 126.009833][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.015937][ T5788] Modules linked in: [ 126.020084][ T5788] CPU: 0 PID: 5788 Comm: syz-executor Tainted: G B syzkaller #0 [ 126.029213][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.039305][ T5788] Call Trace: [ 126.042649][ T5788] [ 126.045720][ T5788] dump_stack_lvl+0x16c/0x230 [ 126.050989][ T5788] ? show_regs_print_info+0x20/0x20 [ 126.056889][ T5788] ? swiotlb_print_info+0x70/0x70 [ 126.062691][ T5788] bad_page+0x14b/0x170 [ 126.067023][ T5788] free_unref_page_prepare+0x887/0x8e0 [ 126.072549][ T5788] free_unref_page+0x32/0x2e0 [ 126.077368][ T5788] ? __folio_put+0xef/0x210 [ 126.082021][ T5788] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 126.088495][ T5788] erofs_shrink_workstation+0x118/0x290 [ 126.094135][ T5788] ? erofs_shrinker_unregister+0x170/0x170 [ 126.100127][ T5788] ? io_schedule+0xd0/0xd0 [ 126.104945][ T5788] ? kobject_put+0x43c/0x470 [ 126.110130][ T5788] erofs_shrinker_unregister+0x5d/0x170 [ 126.116174][ T5788] erofs_put_super+0x4e/0x150 [ 126.120906][ T5788] ? erofs_free_inode+0xb0/0xb0 [ 126.125912][ T5788] generic_shutdown_super+0x134/0x2b0 [ 126.131528][ T5788] kill_block_super+0x44/0x90 [ 126.136507][ T5788] erofs_kill_sb+0x4c/0x140 [ 126.141110][ T5788] deactivate_locked_super+0x97/0x100 [ 126.147171][ T5788] cleanup_mnt+0x429/0x4c0 [ 126.151922][ T5788] task_work_run+0x1ce/0x250 [ 126.156670][ T5788] ? task_work_cancel+0x240/0x240 [ 126.161769][ T5788] ? exit_to_user_mode_loop+0x3b/0x110 [ 126.167300][ T5788] exit_to_user_mode_loop+0xe6/0x110 [ 126.172686][ T5788] exit_to_user_mode_prepare+0xf6/0x180 [ 126.178294][ T5788] syscall_exit_to_user_mode+0x1a/0x50 [ 126.183834][ T5788] do_syscall_64+0x61/0xb0 [ 126.188402][ T5788] ? clear_bhb_loop+0x40/0x90 [ 126.193191][ T5788] ? clear_bhb_loop+0x40/0x90 [ 126.198046][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.204351][ T5788] RIP: 0033:0x7fcbcef901f7 [ 126.208822][ T5788] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 126.229210][ T5788] RSP: 002b:00007fff7ada7e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 126.237937][ T5788] RAX: 0000000000000000 RBX: 00007fcbcf011d7d RCX: 00007fcbcef901f7 [ 126.245966][ T5788] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7ada7f50 [ 126.254112][ T5788] RBP: 00007fff7ada7f50 R08: 0000000000000000 R09: 0000000000000000 [ 126.262315][ T5788] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7ada8fe0 [ 126.270687][ T5788] R13: 00007fcbcf011d7d R14: 000000000001e656 R15: 00007fff7ada9020 [ 126.279439][ T5788] [ 134.000936][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.007659][ T1288] ieee802154 phy1 wpan1: encryption failed: -22