last executing test programs: 2m46.411377262s ago: executing program 2 (id=562): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) sendmmsg$sock(r3, &(0x7f0000002100)=[{{&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x2, {{0x40}, 0x3}}, 0x80, 0x0}}], 0x1, 0x4000084) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140), 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5038, 0x0, @perf_config_ext={0x2, 0x800000000007}, 0x0, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r6, &(0x7f0000000180)="024dfc7b586234", 0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00'}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1}}, 0x40) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 2m46.092294414s ago: executing program 2 (id=569): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x8000, &(0x7f0000000340)={[{@data_err_abort}, {@nogrpid}, {@lazytime}, {@noblock_validity}, {@nodelalloc}, {@nomblk_io_submit}, {@mb_optimize_scan}, {@nombcache}]}, 0x1, 0x782, &(0x7f0000000f80)="$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") r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000280)="0000000000000004ff6943b80000000800000028f2000000008607000000ebb01f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d0000009c238532dd4c6ee9eddd58a599264432dc88941a476f8674c3b25a20e8d25504d773dd523add126ab51ca15c9d0436b3d0164bda8d9ed4e88158a20d3c55bd06050b964a5503bd0ef4b3a0823ad11bfae501057d95ba3e8d12893e6201c24e96b3031a817db4aa92e708a23ec370714940856977cb6f99f8ddc11996d1d5587f9c325bf5c2f77088d08a05af40a5392711377de42a66c2adee5a0612b9", 0xdc, r0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r3, r3, 0x0, 0x40000f63c) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 2m44.874662763s ago: executing program 2 (id=579): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000017d19fd30000", @ANYRES32=r0, @ANYRES32], 0x48) 2m44.790686853s ago: executing program 2 (id=580): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x2, 0x3, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r2, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000280)={[], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0xe}}]}, 0x1, 0xbac, &(0x7f0000000bc0)="$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") close(r2) 2m44.769306213s ago: executing program 2 (id=582): r0 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="160000000000000000", @ANYRES32], 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008003a"], 0x44}, 0x1, 0x0, 0x0, 0xc040}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = memfd_secret(0x80000) fcntl$setlease(r2, 0x400, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) umount2(&(0x7f00000002c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7) syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="bb04f82d1f97822d5b20c2cc63155d1f6951db44b32bdbb92f719f6acbc24d5c537289192b55255611972af9a5e55a1571a1d7c725749e1d20d160b39ceb790aa3b4bf1978481f4ddf768f9391611e3dc7bd32fcf48334f05f5129354f53756e10315ed0e67080cf0ca8848a15ea9996da07500089f9240e53740e026555fd5de57f44d7c8c3"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4000054) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000280)={[{@noload}, {@grpid}, {@errors_remount}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e24, 0x0, 'fo\x00', 0x57, 0x80005, 0x60}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'rr\x00', 0x4, 0x8, 0x7b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) 2m44.461893635s ago: executing program 2 (id=586): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 2m30.796812752s ago: executing program 4 (id=798): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x180, 0xa, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 2m30.755096763s ago: executing program 4 (id=800): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000010000000e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r5, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) 2m30.687600493s ago: executing program 4 (id=802): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x2, 0x3, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r2, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000280)={[], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0xe}}]}, 0x1, 0xbac, &(0x7f0000000bc0)="$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") close(r2) 2m30.517876894s ago: executing program 4 (id=808): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r0, 0x20, &(0x7f0000000540)={&(0x7f00000004c0)=""/62, 0x3e, 0x0, &(0x7f0000000640)=""/101, 0x65}}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x5, 0x0, r0, 0xa28, '\x00', 0x0, r0, 0x5, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x2, &(0x7f0000000100)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffdcc}], &(0x7f0000000300)='GPL\x00', 0x2, 0x6d, &(0x7f00000003c0)=""/109, 0x41100, 0x60, '\x00', 0x0, @fallback=0x6, r0, 0x8, &(0x7f0000000440)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x2, 0x80000001, 0x50}, 0x10, r1, r0, 0x2, &(0x7f0000000780)=[r0, r0, r0, r0, r2, r0, r0, r0], &(0x7f00000007c0)=[{0x2, 0x4, 0xe, 0x7}, {0x1, 0x2, 0x9, 0x7}], 0x10, 0x1, @void, @value}, 0x94) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) r4 = socket$kcm(0x10, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) io_setup(0xc, &(0x7f0000000180)=0x0) io_submit(r6, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r5, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) shutdown(r5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ioperm(0x8, 0xae4, 0x10000000000002) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78b86ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000e6ff0100"}) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f0000000140)='2', 0x1, 0x8080c61) 2m30.215634796s ago: executing program 4 (id=812): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000010000000e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r5, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}], 0x1) 2m29.631717571s ago: executing program 4 (id=822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m29.631485421s ago: executing program 32 (id=822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m28.989923265s ago: executing program 33 (id=586): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1m17.739815s ago: executing program 5 (id=2118): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800000f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000bc0)='skb_copy_datagram_iovec\x00', r3}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r4, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x80000001, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r3, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, 0x0, 0x0, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x3, 0x2b, &(0x7f0000002380)=ANY=[@ANYBLOB="180000000600000000000000fbff", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085100000feffffff18490000feffffff0000000000000000d503c0fffbffffff185a000004000000000000000000000018150000", @ANYRES32, @ANYRES32=r5, @ANYBLOB="0000000000000000b708000077b700007b8af8ff00000000bfa200000000000007020000000000000000000008000000a47d4d8c16da348a83bdfa01000000850000008200000075a30000040000001f090200fcffffffbf91000000000000"], 0xfffffffffffffffd, 0x8001, 0x0, 0x0, 0x40f00, 0x50, '\x00', r6, @sched_cls=0x21fc7465b8018f95, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0xd, 0x1d, 0x1}, 0x10, r7, 0xffffffffffffffff, 0x6, &(0x7f0000000c00)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000c40)=[{0x1, 0x5, 0x3, 0x3}, {0x4, 0x3, 0xf, 0xb}, {0x2, 0x5, 0x2, 0x7}, {0x1, 0x1, 0xb, 0x9}, {0x5, 0x5, 0x6, 0xa}, {0x0, 0x3, 0x1, 0x2}], 0x10, 0x6, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r12, 0x0, 0x1, 0x0) write$binfmt_elf32(r11, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x7, 0x4, 0x4, 0x1, 0x2, 0x6, 0xff, 0x26b, 0x38, 0x3c1, 0xc, 0x2, 0x20, 0x1, 0x5, 0x1, 0x9}, [{0x70000000, 0x800, 0xbb5, 0x5, 0x7fff, 0x3, 0x7, 0xe0000000}], "7a8a037a9c12e145d79d4942d34434493c54f5fdbeac4022b873c4921df950bf9375333f0e6523aeb45fb06084426daa0b7c0c4beb0dadb07f0514387e2b76bc07279ce8add5a42829219f79756219a9a82fcf62dc7bc851ce4dbe3f208622f96313d83dbe57586efe2c6adcac00ad53b09f255eb498f6a0b7b0e2accc6abd9d5e2ae13a0bd94519357b0bc60e767403fefa9c557342d50a053a91ee2b02c066057a6fddf3b2b097da01edfa64e7f1a05726e9cb14", ['\x00', '\x00', '\x00', '\x00']}, 0x50d) vmsplice(r12, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r12, 0x541b, 0x0) write(r9, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) socket$nl_route(0x10, 0x3, 0x0) 1m17.497353131s ago: executing program 5 (id=2124): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) sendmmsg$sock(r3, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000084) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140), 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5038, 0x0, @perf_config_ext={0x2, 0x800000000007}, 0x0, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r6, &(0x7f0000000180)="024dfc7b586234", 0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00'}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1}}, 0x40) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 1m17.187093463s ago: executing program 5 (id=2133): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x800000f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000bc0)='skb_copy_datagram_iovec\x00', r3}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r4, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x80000001, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r3, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x3, 0x2b, &(0x7f0000002380)=ANY=[@ANYBLOB="180000000600000000000000fbffff", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085100000feffffff18490000feffffff0000000000000000d503c0fffbffffff185a000004000000000000000000000018150000", @ANYRES32, @ANYRES32=r5, @ANYBLOB="0000000000000000b708000077b700007b8af8ff00000000bfa200000000000007020000000000000000000008000000a47d4d8c16da348a83bdfa01000000850000008200000075a30000040000001f090200fcffffffbf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000906edf8c02f838a237fb735b0138d95faf04e86f2175024b703f42c1357e3c5fc91789014511b219c7aa80d80d04790033049a59d02f38f6c4e796682063"], 0xfffffffffffffffd, 0x8001, 0x0, 0x0, 0x40f00, 0x50, '\x00', r6, @sched_cls=0x21fc7465b8018f95, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0xd, 0x1d, 0x1}, 0x10, r7, 0xffffffffffffffff, 0x6, &(0x7f0000000c00)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000c40)=[{0x1, 0x5, 0x3, 0x3}, {0x4, 0x3, 0xf, 0xb}, {0x2, 0x5, 0x2, 0x7}, {0x1, 0x1, 0xb, 0x9}, {0x5, 0x5, 0x6, 0xa}, {0x0, 0x3, 0x1, 0x2}], 0x10, 0x6, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r12, 0x0, 0x1, 0x0) write$binfmt_elf32(r11, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x7, 0x4, 0x4, 0x1, 0x2, 0x6, 0xff, 0x26b, 0x38, 0x3c1, 0xc, 0x2, 0x20, 0x1, 0x5, 0x1, 0x9}, [{0x70000000, 0x800, 0xbb5, 0x5, 0x7fff, 0x3, 0x7, 0xe0000000}], "7a8a037a9c12e145d79d4942d34434493c54f5fdbeac4022b873c4921df950bf9375333f0e6523aeb45fb06084426daa0b7c0c4beb0dadb07f0514387e2b76bc07279ce8add5a42829219f79756219a9a82fcf62dc7bc851ce4dbe3f208622f96313d83dbe57586efe2c6adcac00ad53b09f255eb498f6a0b7b0e2accc6abd9d5e2ae13a0bd94519357b0bc60e767403fefa9c557342d50a053a91ee2b02c066057a6fddf3b2b097da01edfa64e7f1a05726e9cb14", ['\x00', '\x00', '\x00', '\x00']}, 0x50d) vmsplice(r12, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r12, 0x541b, 0x0) write(r9, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) socket$nl_route(0x10, 0x3, 0x0) 1m16.919893105s ago: executing program 5 (id=2139): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x1}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000300)="f669184087b8c6242cbef8573fd18712277769d7ba74a0ed685e031d2d83134b5e67a7257d7d0231ef52c076678e416d4649d44c8d67fd8a495b119a3be74c4b35bf22d3c21c5822ffb202943be0b3a2b808861a3eaf5cb8ab16d5db09fefd8b2930e8a0c1880920825f6e2716cb3b359fdb451beebe860cd49fa5a38786d7fd172bd1aff2e30734d993d22eeb31836c71ce38d8d8124e5e255e0338eb5c2e43a95a38e0b9d4586bd2e891f324d81d4a1454bb5760b092721aead07070f01aba25e22ef7bb4ad9d4fc60445909fb2892", 0xd0, 0x3) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xprtrdma_frwr_dereg\x00', 0xffffffffffffffff, 0x0, 0x400001fffffffff}, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)) (async) getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=0x0) mount$9p_xen(&(0x7f0000000780), &(0x7f00000007c0)='./file2\x00', &(0x7f0000000800), 0x401, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=xen,ignoreqv,noextend,fscache,posixacl,audit,smackfsfloor=sysfs\x00,uid>', @ANYRESDEC=r2, @ANYBLOB="2c50fe3ea72eec8e97f35f952416a5a8b85de3ad7f2ef679982b1ed359d83ff02fe8c8e010db5ca8f597a0678a18773f71394f23496c97cf587c86b25777c861625495fa4aa82dddf14535014769d147f276f6c573a76fd3beead8cef704b3e29ff02bb0f73327324452bcaf77ef548344a2db00ae6405caf58378dd706f1514bbbeb39a0d807bb64602c76fe2e01b5caddff28d30893d224f54bf60bf0573b0a6b6629c4233a13bf58ec23418be5cc3f662c1dc09fd47bac7"]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3UFvG1kdAPD/OHZp2nSTBQ6wEsvCLkorqJ1s2DbiUIqE4FQJKPcSEieK4sRR7LRNVEEqPgASQoDECS5ckPgASKgSF44IqRKcQYBACFo4cIDOyvY4TVM7cVs3TuPfT5rMmzfz/H/P0YznzTzNBDC03oqIqxHxKE3TCxExnuXnsil2WlNju4cP7sw3piTS9Po/k0iyvPZnJdn8bFbsdER87csR30yejlvb2l6Zq1TKG9lyqb66XqptbV9cXp1bKi+V12Zmpi/NXp59b3aqL+08FxFXvvjXH3z3Z1+68qvP3PrTjb+f/1ajWmPZ+r3teEb5g1a2ml5ofhd7C2w8Z7DjKN9sYWa00xYjT+Xcfcl1AgCgs8Y5/gcj4pMRcSHGY+Tg01kAAADgFZR+fiz+l0SknZ3qkg8AAAC8QnLNMbBJrpiNBRiLXK5YbI3h/XCcyVWqtfqnF6ubawutsbITUcgtLlfKU9lY4YkoJI3l6Wb68fK7+5ZnIuL1iPj++GhzuThfrSwM+uIHAAAADImz+/r//xlv9f8BAACAE2Zi0BUAAAAAXjr9fwAAADj59P8BAADgRPvKtWuNKW2//3rh5tbmSvXmxYVybaW4ujlfnK9urBeXqtWl5jP7Vg/7vEq1uv7ZWNu8XaqXa/VSbWv7xmp1c61+Y/mJV2ADAAAAR+j1j9/7QxIRO58bbU4Np3or2uNmwHGV300l2bzDbv3H11rzvxxRpYAjMTLoCgADkx90BYCBKQy6AsDAJYes7zp457fZ/BP9rQ8AANB/kx/tfv8/d2DJnYNXA8eenRiGl/v/MLya9/97HcnrZAFOlIIzABh6L3z//1Bp+kwVAgAA+m6sOSW5YnZ5byxyuWIx4lzztQCFZHG5Up6KiNci4vfjhQ80lqebJZND+wwAAAAAAAAAAAAAAAAAAAAAAAAAQEuaJpECAAAAJ1pE7m/Jr1vP8p8cf2ds//WBU8l/xyN7ReitH1//4e25en1jupH/r938+o+y/HcHcQUDAAAAhsIzvcC/3U9v9+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJ8ePrgz356OMu4/vhARE53i5+N0c346ChFx5t9J5PeUy0XESB/ijzb+fKRT/KRRrd2Q++Mn7bIvaOfugfFjIvsWOsU/24f4MMzuNY4/Vzvtf7l4qznvvP/lI55Yfl7dj3+xe/wb6bL/n+sxxhv3f1HqGv9uxBv5zsefdvykS/y3e4z/ja9vb3dbl/4kYrLj70/yRKxSfXW9VNvavri8OrdUXiqvzcxMX5q9PPve7FRpcblSzv52jPG9j/3y0UHtP9Ml/sQh7X+nx/b///7tBx9qJQud4p9/u0P83/w02+Lp+O3fvk9l6cb6yXZ6p5Xe682f/+7Ng9q/0KX9h/3/z/fY/gtf/c6fe9wUADgCta3tlblKpbxxYhONXvoxqIbEMUx8u68fmKZp2tinXuBzkjgOX0szMegjEwAA0G+PT/oHXRMAAAAAAAAAAAAAAAAAAAAYXkfxOLH9MXd2U0k/HqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAX7wcAAP//ZWfZVg==") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) (async) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) epoll_create1(0x0) (async) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000c00)={0xb0000000}) shutdown(r5, 0x1) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46, 0x43, 0x4f, 0x50, 0x43, 0x4f]}, 0x31) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 1m16.520315128s ago: executing program 5 (id=2151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r3, 0x1) socketpair(0x2c, 0x800, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffd17) r4 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000100)) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r7, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe64, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1a) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r8}, 0x8) close(r10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r10, r9, 0x0, r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m15.948560702s ago: executing program 5 (id=2159): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r2, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1m15.920396412s ago: executing program 34 (id=2159): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r2, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 52.28174148s ago: executing program 1 (id=2634): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) readahead(0xffffffffffffffff, 0x6, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)={{0x0, 0xea60}, {0x0, 0x2710}}) 52.25881861s ago: executing program 1 (id=2637): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f000000b800)=0x3) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x9}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r5, r3}, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 52.012297352s ago: executing program 1 (id=2644): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800000f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r4, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x80000001, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r3, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x3, 0x2b, &(0x7f0000002380)=ANY=[@ANYBLOB="180000000600000000000000fbffff", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085100000feffffff18490000feffffff0000000000000000d503c0fffbffffff185a000004000000000000000000000018150000", @ANYRES32, @ANYRES32=r5, @ANYBLOB="0000000000000000b708000077b700007b8af8ff00000000bfa200000000000007020000000000000000000008000000a47d4d8c16da348a83bdfa01000000850000008200000075a30000040000001f090200fcffffffbf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000906edf8c02f838a237fb735b0138d95faf04e86f2175024b703f42c1357e3c5fc91789014511b219c7aa80d80d04790033049a59d02f38f6c4e796682063"], 0xfffffffffffffffd, 0x8001, 0x0, 0x0, 0x40f00, 0x50, '\x00', r6, @sched_cls=0x21fc7465b8018f95, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0xd, 0x1d, 0x1}, 0x10, r7, 0xffffffffffffffff, 0x6, &(0x7f0000000c00)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000c40)=[{0x1, 0x5, 0x3, 0x3}, {0x4, 0x3, 0xf, 0xb}, {0x2, 0x5, 0x2, 0x7}, {0x1, 0x1, 0xb, 0x9}, {0x5, 0x5, 0x6, 0xa}, {0x0, 0x3, 0x1, 0x2}], 0x10, 0x6, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r12, 0x0, 0x1, 0x0) write$binfmt_elf32(r11, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x7, 0x4, 0x4, 0x1, 0x2, 0x6, 0xff, 0x26b, 0x38, 0x3c1, 0xc, 0x2, 0x20, 0x1, 0x5, 0x1, 0x9}, [{0x70000000, 0x800, 0xbb5, 0x5, 0x7fff, 0x3, 0x7, 0xe0000000}], "7a8a037a9c12e145d79d4942d34434493c54f5fdbeac4022b873c4921df950bf9375333f0e6523aeb45fb06084426daa0b7c0c4beb0dadb07f0514387e2b76bc07279ce8add5a42829219f79756219a9a82fcf62dc7bc851ce4dbe3f208622f96313d83dbe57586efe2c6adcac00ad53b09f255eb498f6a0b7b0e2accc6abd9d5e2ae13a0bd94519357b0bc60e767403fefa9c557342d50a053a91ee2b02c066057a6fddf3b2b097da01edfa64e7f1a05726e9cb14", ['\x00', '\x00', '\x00', '\x00']}, 0x50d) vmsplice(r12, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r12, 0x541b, 0x0) write(r9, 0x0, 0x0) 51.834552043s ago: executing program 1 (id=2652): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) unshare(0x2a020400) socket$inet6_icmp(0xa, 0x2, 0x3a) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 51.803151473s ago: executing program 1 (id=2653): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100010000000000000000978800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000a783e7c0203010400000000000000000000000008000100"], 0x1c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_clone(0x4010000, &(0x7f0000000280)="c1", 0x1, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="7826872930ce1b440ef10b6f53554e574325fe5f2f9316a523ebc49a5fb496a5") r4 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r4, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3e, 0x1, 0x8, 0x0, 0x0, 0x7fef, 0x2031, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10fb73, 0x1, @perf_config_ext={0x9, 0x40}, 0x14105, 0x30, 0x8, 0x6, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) r7 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xa1, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, r7, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x20, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1fffffff, 0x0, 0x0, 0x3d, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) epoll_create(0xc) 51.270594627s ago: executing program 1 (id=2668): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x0, 0xa0, 0x40, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, @mcast1, 0x7800, 0x40, 0x4, 0x1}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) creat(&(0x7f0000000700)='./file0\x00', 0x80) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x25dfdbfd, {0x0, 0x0, 0x74, r7, {}, {}, {0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4000000}, 0x0) 36.135832654s ago: executing program 35 (id=2668): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x0, 0xa0, 0x40, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, @mcast1, 0x7800, 0x40, 0x4, 0x1}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) creat(&(0x7f0000000700)='./file0\x00', 0x80) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x25dfdbfd, {0x0, 0x0, 0x74, r7, {}, {}, {0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4000000}, 0x0) 2.677474471s ago: executing program 8 (id=3624): open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, @perf_config_ext={0x18a, 0xf037}, 0x401a, 0x4, 0x0, 0x8, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e080000080000682036e200ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu<=-||!') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 2.446668763s ago: executing program 6 (id=3631): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0xf2, &(0x7f0000000280)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x1, 0x12, 0xe4, 0x66, 0x0, 0x7b, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x30}, {[@noop, @end, @generic={0x94, 0xf, "e9823b8aed4642a1fe5d4aa910"}]}}, {0x4e24, 0x4e21, 0xbc, 0x0, @gue={{0x1, 0x0, 0x2, 0x3c, 0x100, @void}, "36727202648da94320da926e68f56352b2e5d6d2dccc22225c9bd1447abdff6a95003c22719e4eb119f982cb6fcd685966a9cf0f9236e9ec4ce801168f7f20737990d99d60ee5a5df3056d46e8951df10306da6100f5547b1e67350623791062cb4aa9e1caa7255f78ee8020f06d340efd6281873becb4367a150af10b0b16238ee90c7b726b9ddbfc82ee24c0941d657128ff0e0b437ad7526c2511bc360ecbf6ae106c8d6e508a40d2af2ef6f6d5a4"}}}}}}, 0x0) 2.446250783s ago: executing program 6 (id=3632): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) sendmmsg$sock(r3, &(0x7f0000002100)=[{{&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x2, {{0x40}, 0x3}}, 0x80, 0x0}}], 0x1, 0x4000084) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140), 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5038, 0x0, @perf_config_ext={0x2, 0x800000000007}, 0x0, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r6, &(0x7f0000000180)="024dfc7b586234", 0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00'}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=[0x2]}}, 0x40) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 2.318004824s ago: executing program 6 (id=3634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000000c0)="76389e147583dd", 0x0, 0x3404, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYBLOB="3249759bf9202c6e71308f3fc7c6cecbffbfaea0b61253fcdc7659820dce625e0d753e2eb9a893519d921b7697396ae8c6192782e448095a62494d5c3729588977c7a5c3d22b462fe08af26f63f4834853ea1e23a2e41e9219d02faec7c4d177085c5526893e0dfc28a1fa3e39d17d936d73ae1382293cee47c18fae67cdba45fde08edd83dabaa6ee0356735a32000000f231b598dfcb525e1e1415ec60f3d5914ce102a19237ec880d6cceeaf0c64d274e3d1eaccfa68541b5c9d29f8e48dd02dc6c8ade8f5cafc46feea50fa8df3337e99a7a59adc6378b1a91ca8661cbdaed7660f123"], 0x20}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddr={0x20, 0x16, 0x800, 0x70bd27, 0x25dfdbfb, {0xa, 0x48, 0x0, 0xc8, r4}, [@IFA_FLAGS={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) r5 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') writev(r5, &(0x7f0000000bc0)=[{&(0x7f0000001440)="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", 0x1000}, {&(0x7f00000006c0)="066d0623272ae471e8e55421b6b822179d5e0c0eb66326890f02e78c4c9a13fc4bc3daeae8b3976653946ab9fde1ea8cdf01012ccd501ec2d79d4062b5719c6c545f3c", 0x43}, {&(0x7f0000000840)="d109466d581417fe49a6ee49abf808c5ca9d429ff2521a7e65fa154ab7c8d828bb10f8794a2a1ad6aecc1c8b943053687e5766a9fafe46f5e8e953e5e3951775c70b9cad624c94b2a5620e9cbdc15cffc84a3ed6e35f1703b109eea52588e050c4df9ff66069ad1fbf83b403e3d081649c551251691e5afebadda458a951239f964aa1cf443f45c5a384735539cc275e353e76edb4927a777aab77ffc9f47ef6ef4793ccef343e2a5212ec8c6c6ec025", 0xb0}, {&(0x7f0000000380)="a7f9ea7a7e7cf2218f89e366c6098286", 0x10}, {&(0x7f0000000900)="6d3feed1193111b03cf605124a63efd3baa9bf80333d975afdddc89765d107a8abc650c108235b075e8f9c8b0edae2f5e23978c4bb07d0d2c3208559770d38558472504299ffec8a571b46e9cebd48d59cb34e04c7e65df65b33d65b2a583c69027cd3cc075d764a4a7a30231ee8a4effc91a3055f3e21b7f26262fdf9bce37247daeea85e066fd8749c339c2dcbcda56df13b0c5e5e464b342ef747c6efd869fb7df670cc76baa005d9554b3b4baacc63267819a6d45c7b0139a6096e", 0xbd}, {&(0x7f0000000400)="da500e5ddc4f83cc89cb47f627c6ab57206c42afef40bf38fe7dbe", 0x1b}, {&(0x7f0000000b00)="c2f387b5d878422278e4ff70cb19b1da3a734d1de49368b116804c55a66b7c6dd11031aabb82e47365591414f99b918e61288031868cbce8d8d75d270b09c69e3170498102ce94d33f7a75be2641fea7f169a6b168755af7d41d60e87f6dcfcdf2ea7e4684a8f324f64ba2cce0996b7e500f297db656b09f2313b43b8c2fcf22dffe8dbecaeb62d3f4145981bde55d11e5890416781f90e1475ffde1e183b789a1a2d1e61e8206606aee", 0xaa}, {&(0x7f00000004c0)="3a9a3a1e99e3e34742089a72898946a5790986dfe5a4b798295609564f10fecb3ae6b941f3", 0x25}, {&(0x7f00000009c0)="0cba843e93c9c0ea4dc58576c5a312f395a43b04b0e480900cb268998011c33a6143bfe49b4150d7e4a489133f09c5ce504cad011c37c6c7fdc9850adaf639bfc71e68aa5834c34f6a0f1144e7920ca099974b8297e4e9abb8bde58c2c0eeb885fdb8ec489f8ab5e9a6bd6cda6ee24b6fae1f6b500359265", 0x78}], 0x9) preadv(r7, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000000010"]) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a090000000000000000000008001e0001"], 0x2c}}, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x1, &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x192}}, 0x20}}, 0x0) 2.254432104s ago: executing program 3 (id=3635): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYBLOB="a4d1c56c30ee832649d8fc3082d1287c3951fbc24dcd2d74e374c819cec756b94b722d6a229e899e3a03b26129"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_read_part_table(0x107a, &(0x7f0000000000)="$eJzs0LFNxEAQBdBvzus7CxqgAmqgLmIEJ1EBKQE1UAEpJSEIBu2ehWgASN5LbM3+nS9t+Ffra7tKUnfJmt0YHZI5yT7J44/kLnmv5LNeqqoyZdrCazImSZakWtX1VDf9+u1ztUMujzXXyWj6qDn747Zzue/fi/NR/ZbkaUkekrTT/q35bPz07NyPvrU/eSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GVfAQAA//8jACZ5") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r8, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000900)='>', 0x1}], 0x1}, 0x800) syz_open_procfs(0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000100)) 1.983023256s ago: executing program 3 (id=3636): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, './bus\x00'}, 0x6e) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') get_mempolicy(&(0x7f0000000000), &(0x7f0000000240), 0x1000, &(0x7f00002d5000/0x3000)=nil, 0x1) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa29, &(0x7f0000001580)="$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") futex(&(0x7f0000000040)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000080), 0x24000003) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() setreuid(0xee00, 0x0) syz_pidfd_open(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x13c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 1.804113327s ago: executing program 6 (id=3637): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) add_key(0x0, 0x0, 0x0, 0x0, r0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, 0x0, &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x11) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e000100000000000000e0ff00000000", @ANYRES32=r7, @ANYRES64=r5], 0x1c}}, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000058110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) sendfile(r8, r8, 0x0, 0x40000f63c) socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 1.737123068s ago: executing program 8 (id=3638): open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, @perf_config_ext={0x18a, 0xf037}, 0x401a, 0x4, 0x0, 0x8, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e080000080000682036e200ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @dev}, @IFLA_GENEVE_ID={0x8}]}}}]}, 0x4c}}, 0x0) semget$private(0x0, 0x1, 0x104) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1.46649208s ago: executing program 7 (id=3639): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, 0x0, &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086) 1.42619192s ago: executing program 0 (id=3641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) 1.41635107s ago: executing program 7 (id=3642): syz_mount_image$ext4(&(0x7f0000000bc0)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000002c0)={[{@debug}, {@stripe={'stripe', 0x3d, 0x7fffffffffffffff}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '&\\\x17)!'}}, {@fowner_lt}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, 'security.capability\x00'}}, {@hash}, {@uid_eq}, {@uid_gt}, {@euid_gt}]}, 0x1, 0xbd7, &(0x7f0000000c00)="$eJzs3M1rHOcZAPBnRqsvW+3KpZS6l6qUYkPpWnKRqU2hdnHppYdCzgEr8soIrT+QFBzJOqySfyBf50AugSQmIYf47EtCcs0lsa8JuZmgWAmEkCjMfkgbSyvJ9q5GkX8/eHfed97dfZ5nh92ZF3Y3gCfWSHaTRhyNiAtJRLGxP42IvlpvIKJav9/qytLktytLk0msrT31VRJJRNxfWZpsPlfS2B5uDAYi4pN/J/GbFzbHnVtYnJmoVMqzjfGJ+cvXTswtLP5t+vLEpfKl8pWxU/8YPzl+avT0eMdq/e7zs7e++dN/v6x+/9YPN79+5Y0kzsZQY661jk4ZiZH116RVISImOh0sJz2NelrrTAo7PCjtclIAALSVtlzD/S6K0RMbF2/F+ODTXJMDAAAAOmKtJ2INAAAAOOAS638AAAA44JrfA7i/sjTZbPl+I2Fv3TsXEcP1+lcbrT5TiGptOxC9EXHofhKtP2tN6g97bCMR8cXd0+9mLbr0O+TtVJcj4vdbHf+kVv9w7Vfcm+tPI2K0A/FHHhj/kuo/24H4edcPwJPp9rn6iWzz+S9dv/6JLc5/hS3OXY+i/flvsAPPvrPm9d/qpuu/jfp72lz//X+XMW68+dr1dnNZ/f+89Z93mi2Ln20fq6iHcG854g+FrepP1utP2tR/YZcxij9eL7eby7v+tdcjjsXW9Tcl2/8/0Ymp6Up5tH67ZYzlj8ffbhc/7/qz43+oTf3N/39qd/yv7TLG0+fPv7dp592N7vb1p+v/FtTX2D43MT8/OxbRl/xv8/6T2+fSvE/zObL6j/95+/f/VvVnnwnVxuuQJbjc2Gbj5x+I+a+bN95vl09z/Zfn8b/Y5vi31v9RYfPxf3GXMf7y4cvH2821rn+zlsVvroUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCmNiKFI0tJ6P01LpYjDEfHbOJRWrs7N/3Xq6rNXLmZzEcPRm05NV8qjEVGsj5NsPFbrb4xPPjD+e0QciYhXi4O1cWnyauVi3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw7nBEDEWSliIijYjVYpqWSnlnBQAAAHTccN4JAAAAAF1n/Q8AAAAHn/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXXbkj7fvJBFRPTNYa5m+xlxvrpkB3ZbmnQCQm568EwByU8g7ASA3D7nGd7kAB1Cyw/xA25n+jucCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP517OjtO0lEVM8M1lqmrzHXm2tmQLelLf0kxzyAvdez3WRh7/IA9p63ODy5rPGBndb+Axv3qf58pr9rOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw/wzVWpKWIqKvsa9UivhVRAxHbzI1XSmPRsSvI+KzYm9/Nh7LOWcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6b25hcWaiUinPZp00Gp31PV3o9DQidzFEdzpJPe/qfsnnQHQi2kz1v7TTw5+Jx4zeF/vkRXjUznI3Q+T5qQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQF7mFhZnJiqV8uxc3pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeZtbWJyZqFTKs13s5F0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5+SkAAP//my0EMA==") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$UHID_CREATE2(r1, 0x0, 0x138) 1.349257451s ago: executing program 0 (id=3643): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) add_key(0x0, 0x0, 0x0, 0x0, r0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, 0x0, &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x11) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e000100000000000000e0ff00000000", @ANYRES32=r7, @ANYRES64=r5], 0x1c}}, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000058110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) sendfile(r8, r8, 0x0, 0x40000f63c) socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 1.198238862s ago: executing program 7 (id=3644): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) sendmmsg$sock(r3, &(0x7f0000002100)=[{{&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x2, {{0x40}, 0x3}}, 0x80, 0x0}}], 0x1, 0x4000084) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140), 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5038, 0x0, @perf_config_ext={0x2, 0x800000000007}, 0x0, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r6, &(0x7f0000000180)="024dfc7b586234", 0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00'}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=[0x2]}}, 0x40) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 946.347583ms ago: executing program 7 (id=3645): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYBLOB="e82f57ea87540285c251c5310691f817af37c6f539089a593f538a220f30eaf6965e0142dc679d043fbf8cfd5939687d5283d96554ec4d34146dc91271e9ad1ec0f5ff873ccc0e44ca2168807ba0c49564ad22c189eaccea6d3a48f1a7713bd447c7489b91771de2732c9404e808366a18add17cc761fad712028ad52019b20e3cfbc0befcc2c7f1b53b0da05cca594040902017ca56d8e03181b286c673e319640404c2d68d09ab5e5138f1f14a", @ANYRESOCT, @ANYRES32=r0, @ANYRESDEC=r1, @ANYBLOB="2dff7db95324d4220e7c08f34e43a11cd84decafd6ca3ac8c89d7161ce6a5453188e84e03c50b624b4ab16a28869587ab1cc32860463051ab871605d2209e5cb7e5eb34bec283400a271d10e50bd65766af432fd137d8c973fe2bd7bbd50745236a3885aa5bcf7157a1855e2c633cc7de825b59b498efa7b81910869ce05b196bdca4334d8efd0bb58f64bd67cc840bae05f8f1e617a4c73606eca147e0b343d5b139a3e1fa2057e27553004c6eae186558eef00ad70b4ca21f98d2b1d0b26aa311319c95e2118f1349a45e3ac0b5371187d", @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRESHEX=r1], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)="7f", 0x1}], 0x1}, 0x8000) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x10) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r5}) 926.456834ms ago: executing program 6 (id=3646): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYBLOB="a4d1c56c30ee832649d8fc3082d1287c3951fbc24dcd2d74e374c819cec756b94b722d6a229e899e3a03b26129"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_read_part_table(0x107a, &(0x7f0000000000)="$eJzs0LFNxEAQBdBvzus7CxqgAmqgLmIEJ1EBKQE1UAEpJSEIBu2ehWgASN5LbM3+nS9t+Ffra7tKUnfJmt0YHZI5yT7J44/kLnmv5LNeqqoyZdrCazImSZakWtX1VDf9+u1ztUMujzXXyWj6qDn747Zzue/fi/NR/ZbkaUkekrTT/q35bPz07NyPvrU/eSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GVfAQAA//8jACZ5") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r8, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000900)='>', 0x1}], 0x1}, 0x800) syz_open_procfs(0xffffffffffffffff, 0x0) 896.855304ms ago: executing program 7 (id=3647): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1e0000000100000003000000090000200000000070a1f4c78b804183e8b1647ebdd28896f6981e5121a78d7a54b70a7b3c1b35c4a04a4caeda3c373088cd6c035970c8498c47a1af24305076", @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0200000005000000010000000c00"/28], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000000000000001c0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0xa8, 0x7, 0x7, 0x60, @empty, @mcast2, 0x7800, 0x700, 0x5, 0x9}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @dev}, &(0x7f0000000200)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000000000)={r10, 0x1, 0x6, @random="66c903453d7e"}, 0x10) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000000080)={r10, 0x1, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x27, 0xfc, 0x4a, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x8000, 0x5, 0xfffffff9}}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r15, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x6b, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x21, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x80, 0x8006, 0x8, 0x3bc9, {{0xc, 0x4, 0x2, 0x10, 0x30, 0x65, 0x0, 0x48, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x19}, {[@lsrr={0x83, 0x1b, 0x24, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x41}]}, @noop]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'geneve1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x19, 0x40, 0x9, 0x1, {{0xc, 0x4, 0x2, 0xd, 0x30, 0x68, 0x0, 0x8, 0x0, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, {[@generic={0x88, 0xe, "0050f0d89f6b9d9306516b72"}, @timestamp={0x44, 0xc, 0xf2, 0x0, 0x4, [0x80000001, 0xffff]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c020000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf25130000005c0001800800030001000000140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0800030004000000140002006c6f000000000000000000000000000008000300000000000800030068cb41844c000180080003000100000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="080003000100000008000100", @ANYRES32=r15, @ANYBLOB="38000180140002006970766c616e300000000000000000000800030001000000080003000200000008000100", @ANYRES32=r16, @ANYBLOB="08000300000000000c00018008000300010000005c000180140002007465616d5f736c6176655f3000000000080003000100000008000100", @ANYRES32=r17, @ANYBLOB="08000300010000001400020073797a6b616c6c65723100000000000008000300010000000800030001000000080003000300000024000180080003000000000008000100", @ANYRES32=r18, @ANYBLOB="080003000500000008000300030000002c0001801400020073797a6b616c6c657230000000000000140002007465616d5f736c6176655f30000000002c00018014000200626f6e645f736c6176655f30000000001400020076657468305f746f5f626174616476001800018014000200766574683000000000000000000000003c000180140002007465616d5f736c6176655f3000000000140002006261746164765f736c6176655f30000008000100", @ANYRES32=r19, @ANYBLOB="0800030003000000"], 0x22c}, 0x1, 0x0, 0x0, 0x1}, 0x814) r20 = socket$nl_generic(0x10, 0x3, 0x10) r21 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r20) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r20, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r21, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 847.769034ms ago: executing program 8 (id=3648): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000004c0)={0x2}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FICLONERANGE(r3, 0x4020940d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESOCT, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x40010) r4 = socket(0x10, 0x803, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 766.534735ms ago: executing program 7 (id=3649): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800000f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000bc0)='skb_copy_datagram_iovec\x00', r3}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r4, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x80000001, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r3, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, 0x0, 0x0, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x3, 0x2b, &(0x7f0000002380)=ANY=[@ANYBLOB="180000000600000000000000fbffff", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085100000feffffff18490000feffffff0000000000000000d503c0fffbffffff185a000004000000000000000000000018150000", @ANYRES32, @ANYRES32=r5, @ANYBLOB="0000000000000000b708000077b700007b8af8ff00000000bfa200000000000007020000000000000000000008000000a47d4d8c16da348a83bdfa01000000850000008200000075a30000040000001f090200fcffffffbf91000000000000"], 0xfffffffffffffffd, 0x8001, 0x0, 0x0, 0x40f00, 0x50, '\x00', r6, @sched_cls=0x21fc7465b8018f95, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x6, &(0x7f0000000c00)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000c40)=[{0x1, 0x5, 0x3, 0x3}, {0x4, 0x3, 0xf, 0xb}, {0x2, 0x5, 0x2, 0x7}, {0x1, 0x1, 0xb, 0x9}, {0x5, 0x5, 0x6, 0xa}, {0x0, 0x3, 0x1, 0x2}], 0x10, 0x6, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x1, 0x0) 759.265155ms ago: executing program 8 (id=3650): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000040)='./mnt\x00', 0x800090, &(0x7f0000000540)=ANY=[], 0x6, 0x2d8, &(0x7f0000000a40)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000007000000000000000000008500000023000000950000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000bc0)={'#! ', './file0'}, 0xb) (fail_nth: 1) 473.094796ms ago: executing program 3 (id=3651): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000100001000000da00000000000000000a14"], 0x28}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) open(&(0x7f0000000640)='./file0\x00', 0x24002, 0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 381.832127ms ago: executing program 8 (id=3652): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x800000f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) syz_genetlink_get_family_id$batadv(0x0, r3) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r4, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x80000001, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r3, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, &(0x7f0000000980), 0x0, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x3, 0x2b, &(0x7f0000002380)=ANY=[@ANYBLOB="180000000600000000000000fbffff", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085100000feffffff18490000feffffff0000000000000000d503c0fffbffffff185a000004000000000000000000000018150000", @ANYRES32, @ANYRES32=r5, @ANYBLOB="0000000000000000b708000077b700007b8af8ff00000000bfa200000000000007020000000000000000000008000000a47d4d8c16da348a83bdfa01000000850000008200000075a30000040000001f090200fcffffffbf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000906edf8c02f838a237fb735b0138d95faf04e86f2175024b703f42c1357e3c5fc91789014511b219c7aa80d80d04790033049a59d02f38f6c4e796682063"], 0xfffffffffffffffd, 0x8001, 0x0, 0x0, 0x40f00, 0x50, '\x00', r6, @sched_cls=0x21fc7465b8018f95, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0xd, 0x1d, 0x1}, 0x10, r7, 0xffffffffffffffff, 0x6, &(0x7f0000000c00)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000c40)=[{0x1, 0x5, 0x3, 0x3}, {0x4, 0x3, 0xf, 0xb}, {0x2, 0x5, 0x2, 0x7}, {0x1, 0x1, 0xb, 0x9}, {0x5, 0x5, 0x6, 0xa}, {0x0, 0x3, 0x1, 0x2}], 0x10, 0x6, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r12, 0x0, 0x1, 0x0) write$binfmt_elf32(r11, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x7, 0x4, 0x4, 0x1, 0x2, 0x6, 0xff, 0x26b, 0x38, 0x3c1, 0xc, 0x2, 0x20, 0x1, 0x5, 0x1, 0x9}, [{0x70000000, 0x800, 0xbb5, 0x5, 0x7fff, 0x3, 0x7, 0xe0000000}], "7a8a037a9c12e145d79d4942d34434493c54f5fdbeac4022b873c4921df950bf9375333f0e6523aeb45fb06084426daa0b7c0c4beb0dadb07f0514387e2b76bc07279ce8add5a42829219f79756219a9a82fcf62dc7bc851ce4dbe3f208622f96313d83dbe57586efe2c6adcac00ad53b09f255eb498f6a0b7b0e2accc6abd9d5e2ae13a0bd94519357b0bc60e767403fefa9c557342d50a053a91ee2b02c066057a6fddf3b2b097da01edfa64e7f1a05726e9cb14", ['\x00', '\x00', '\x00', '\x00']}, 0x50d) vmsplice(r12, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r12, 0x541b, 0x0) write(r9, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) socket$nl_route(0x10, 0x3, 0x0) 354.572208ms ago: executing program 0 (id=3653): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) 334.957128ms ago: executing program 0 (id=3654): syz_mount_image$ext4(&(0x7f0000000bc0)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000002c0)={[{@debug}, {@stripe={'stripe', 0x3d, 0x7fffffffffffffff}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '&\\\x17)!'}}, {@fowner_lt}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, 'security.capability\x00'}}, {@hash}, {@uid_eq}, {@uid_gt}, {@euid_gt}]}, 0x1, 0xbd7, &(0x7f0000000c00)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$UHID_CREATE2(r1, 0x0, 0x138) 329.981328ms ago: executing program 3 (id=3655): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) sendmmsg$sock(r3, &(0x7f0000002100)=[{{&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x2, {{0x40}, 0x3}}, 0x80, 0x0}}], 0x1, 0x4000084) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140), 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5038, 0x0, @perf_config_ext={0x2, 0x800000000007}, 0x0, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r6, &(0x7f0000000180)="024dfc7b586234", 0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00'}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=[0x2]}}, 0x40) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 272.493798ms ago: executing program 6 (id=3656): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) add_key(0x0, 0x0, 0x0, 0x0, r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x11) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e000100000000000000e0ff00000000", @ANYRES32=r6, @ANYRES64=r4], 0x1c}}, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000058110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) sendfile(r7, r7, 0x0, 0x40000f63c) socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 229.058258ms ago: executing program 0 (id=3657): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYBLOB="e82f57ea87540285c251c5310691f817af37c6f539089a593f538a220f30eaf6965e0142dc679d043fbf8cfd5939687d5283d96554ec4d34146dc91271e9ad1ec0f5ff873ccc0e44ca2168807ba0c49564ad22c189eaccea6d3a48f1a7713bd447c7489b91771de2732c9404e808366a18add17cc761fad712028ad52019b20e3cfbc0befcc2c7f1b53b0da05cca594040902017ca56d8e03181b286c673e319640404c2d68d09ab5e5138f1f14a", @ANYRESOCT, @ANYRES32=r0, @ANYRESDEC=r1, @ANYBLOB="2dff7db95324d4220e7c08f34e43a11cd84decafd6ca3ac8c89d7161ce6a5453188e84e03c50b624b4ab16a28869587ab1cc32860463051ab871605d2209e5cb7e5eb34bec283400a271d10e50bd65766af432fd137d8c973fe2bd7bbd50745236a3885aa5bcf7157a1855e2c633cc7de825b59b498efa7b81910869ce05b196bdca4334d8efd0bb58f64bd67cc840bae05f8f1e617a4c73606eca147e0b343d5b139a3e1fa2057e27553004c6eae186558eef00ad70b4ca21f98d2b1d0b26aa311319c95e2118f1349a45e3ac0b5371187d", @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRESHEX=r1], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)="7f", 0x1}], 0x1}, 0x8000) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x10) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r5}) 228.450448ms ago: executing program 0 (id=3658): open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, @perf_config_ext={0x18a, 0xf037}, 0x401a, 0x4, 0x0, 0x8, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e080000080000682036e200ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @dev}, @IFLA_GENEVE_ID={0x8}]}}}]}, 0x4c}}, 0x0) semget$private(0x0, 0x1, 0x104) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 174.818099ms ago: executing program 8 (id=3659): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x0, &(0x7f0000000300)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x809411, 0x0, 0x1, 0x0, &(0x7f0000000000)) 167.829429ms ago: executing program 3 (id=3660): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYRES8=r2, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_read_part_table(0x624, &(0x7f0000000640)="$eJzs2z+IHFUcB/Dv7mb/nKfZJlUazQWsAsEQO7cw4W4VFMLFIEgKlTTBVBEODl2yYooY4YgWwUawCcI1p+lioxg8IgQ7JVgowolpBO1UJCOzO7vuaUQwISB8PsXMm5nf733nMa+d8L9WT7M8NUYXPyTZ/+Kv7cz9WXBh9Kw7uSy63eytj8fDHFtfXPqtKIrimXZqOZ5m9lzd+WE74wmKmZyFJK0HJkHJpffu2zF59nDRPV9NmWHa2ZlkvnWbl21vG96ugntso5fU8sb8WnnRH2zdejb54KfFybc9fKI8Hu/kWnVj/J0/KSb7INNdUPvLzMU/h87P5m92h2dP99dWeyfLqd5Z/+6RW7v7k1k/PpCsTCPqMxmt2d303230Nhup8m/sr24ODu27vOviwdWPPl++2filGFnqTHvKt3jz6N1IBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgbutms/v62dP9tdXeyRv9wda5r64//ejKhceuzOV6UW8dPpF0yrpraW7re/lqI8lLeSGncmry6Iuk6JaD4eiY2qR650xnfTranWSjV+V//9TehX67auqvv1bVHKjOR6ZdcymKM5kbje+/4/Vv9DZnFjbYWtnz1nNvDw7tu7zr4sFPv8zyzXKZeXdbT3t0/D077jgdAAAAAAAAAAAAAAAAAAAAxhaXnnzoyOPLr5xLMuwk+fHVetJMMfrJvZZheeokC1X9N+Of31uXOsnw5yea618frbWe/+z8t+P7GaadZhqZf//KseTBac6ZvyXX7sXy+Bd/BAAA//+bBHhd") r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="020000000400000057960000040000000000000060c15c6d487b019b11cbd2449f742227baf9e695e1511251527bf341d0d706aaa8cf73d6650df644c0b6b42d41ed4f474e0f420f543921de73b43f70b8392d2546d3a5dc0c0038be62936edf1926ddbc1a6ef26476eea5fa8f693d4e15b1eef357fb80f3271a785dbffe568a99a4b50937d1f8a272071bb8f796184bdbdcea2df3ad10363939e1788cd303666967007497b0811777be6ee42326c40021b5f23d36d662cd05d107de9e9da596e32a1163a87144ba9eb33e3ec79150d716d567f12d77d0", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x60000, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000229bd7000ffdbdf251400000008001400050000000800160008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0xa0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='rxrpc_transmit\x00', r8, 0x0, 0xc5}, 0x18) fgetxattr(r7, &(0x7f0000000180)=ANY=[@ANYBLOB='o.GPL\x00'], 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) socket$nl_route(0x10, 0x3, 0x0) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000601, 0x0, &(0x7f00000005c0)={0x9, 0x8000000000000001, 0x0, 0x7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f80)=@getchain={0x64, 0x66, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xd}, {0x3, 0x7}, {0x4, 0x10}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x778}, {0x8, 0xb, 0x49a}, {0x8, 0xb, 0x3}, {0x8}]}, 0x64}}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 0s ago: executing program 3 (id=3661): gettid() (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) (async) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) (async) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) (async) setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) (async) r4 = socket$inet6(0x10, 0x2, 0x0) write(r4, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'pim6reg0\x00', {0x2, 0x0, @dev}}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x9, 0xe7, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xe}, 0x10, 0x8000, 0x0, 0x6}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000dc0)=ANY=[@ANYRES64=r7, @ANYRESDEC, @ANYRESDEC=r0, @ANYRES16, @ANYBLOB="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"], 0x1, 0x2b7, &(0x7f0000000b00)="$eJzs3N9LU3EYx/EnZ25OdAtCKKge6iZvDrr+gBqhEA0qc1JdBMc8q7HTJucMYxK5m+i2v0O67C6o/gFvopvuu5Mg6iIvohPtbHpmR50/Nqe+XyDn2b7PZ/uqOJ4J+67ce/20kHONnFmWnphKj0hVVkWS/6q6E/VrT63uk6CqjAz8/HLu7v0HN9OZzPik6kR66kpKVYcuvH/2/M3Fj+WB6bdD76KynHy48j31dXl4+czKn6kneVfzrhZLZTV1plQqmzO2pbN5t2Co3rYt07U0X3Qtp2k9Z5fm5ipqFmcH43OO5bpqFitasCpaLmnZqaj52MwX1TAMHYzL8dbbQk92aXLSTG+67EX2dUdou/6wOx0nXQ1fzC51YE8AAKDLbD3/+7P+5vN/Ztq/7vP8L8L83ybVplvbzP84Ehwnbcbrf7/NmP8BAAAAAAAAAAAAAAAAAAAAADgMVj0v4XleonFtfEVFJCYijdsHvU+0x3a//x/hsaud3ifaI/DBvZiI/Wo+O5/1r/56Oid5scWSUUnI79rrQZ1fT9zIjI9qzS/P8xbr+cX5bESijXxDMix//tSYn1f5YAfyJyUefP6UJOR0+POnQvN9dy5fCuQNScinR1ISW2Zrr2vr+RdjqtdvZTbk+2t9mwo9aQEAAAAAgO5k6Jpk8/tf/+xHo9YQk//X/fwO/j+w4f11r5xt5YhKAAAAAACwZ25loWDatuXsooiKyB7iR7WISFdsY0NxTUS6YBudKmIi4t+ju4gPf1uLt5TyWujpFZED/7HsoAg9MBgAAADAIbY+9O8g9PllG3cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxs+UxYCMDflNlodDob+oJPtAWjxPoinTuOwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6z98AAAD///GVGLU=") (async, rerun: 64) r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r9 = dup(r8) getdents64(r9, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$MON_IOCG_STATS(r9, 0x80089203, &(0x7f00000005c0)) (async, rerun: 64) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) (rerun: 64) pwrite64(r10, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async, rerun: 64) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0240000004000000450000000200000000109e0240e6ce9fac4a06500b71ea6311313bf1c03ebba7d98fca593b30b6c8ac7268de050eb9f63dfac118477c8e3c9e5707b01005313da485bb69ac11f1735b98e364b1146ac5c155878a4d2ef75a00cb8d938dbd316a23839a16aeda7d106415bd514879f038cb93b6f48895dd030000002db548fddbfd8957ae88acdc45716fb97cb7fa6c510f6b7871c86cbc18a4b8493678df3ac2ff3236f9ae39b1f216e6243c909cc2917174"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) (async, rerun: 64) sendfile(r11, r11, 0x0, 0x80000000) (rerun: 64) kernel console output (not intermixed with test programs): eed is unknown, defaulting to 1000 [ 203.183103][T11547] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.207844][ T8280] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.215020][ T8280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.224020][ T8280] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.231267][ T8280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.258424][T11547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.334577][T11547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.408221][T11547] veth0_vlan: entered promiscuous mode [ 203.416192][T11547] veth1_vlan: entered promiscuous mode [ 203.446681][T11547] veth0_macvtap: entered promiscuous mode [ 203.458622][T11547] veth1_macvtap: entered promiscuous mode [ 203.468823][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.479438][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.489400][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.499867][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.509812][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.520295][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.535463][T11547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.553878][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.564446][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.574435][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.584924][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.596871][T11547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.606955][T11547] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.615791][T11547] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.624635][T11547] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.633347][T11547] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.093280][T11727] loop6: detected capacity change from 0 to 4096 [ 204.100927][T11727] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 204.494249][T11763] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2833'. [ 204.517002][T11754] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2833'. [ 204.578900][T11749] lo speed is unknown, defaulting to 1000 [ 204.707254][T11749] chnl_net:caif_netlink_parms(): no params data found [ 204.778253][T11749] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.785405][T11749] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.793120][T11749] bridge_slave_0: entered allmulticast mode [ 204.800411][T11749] bridge_slave_0: entered promiscuous mode [ 204.807286][T11749] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.814439][T11749] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.821911][T11749] bridge_slave_1: entered allmulticast mode [ 204.828752][T11749] bridge_slave_1: entered promiscuous mode [ 204.869864][T11783] geneve3: entered promiscuous mode [ 204.875164][T11783] geneve3: entered allmulticast mode [ 204.893076][T11749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.903913][T11749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.927786][T11749] team0: Port device team_slave_0 added [ 204.934464][T11749] team0: Port device team_slave_1 added [ 204.954649][T11749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.961742][T11749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.987785][T11749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.999353][T11749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.006520][T11749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.032694][T11749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.139545][T11793] blktrace: Concurrent blktraces are not allowed on sg0 [ 205.177255][T11749] hsr_slave_0: entered promiscuous mode [ 205.257664][T11749] hsr_slave_1: entered promiscuous mode [ 205.258142][T11749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.258172][T11749] Cannot create hsr debugfs directory [ 205.429943][T11806] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11806 comm=syz.7.2846 [ 205.442712][T11806] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11806 comm=syz.7.2846 [ 205.785514][T11815] loop0: detected capacity change from 0 to 4096 [ 205.792250][T11815] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 205.857698][ T1300] bridge_slave_1: left allmulticast mode [ 205.863400][ T1300] bridge_slave_1: left promiscuous mode [ 205.869151][ T1300] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.879669][ T1300] bridge_slave_0: left allmulticast mode [ 205.885422][ T1300] bridge_slave_0: left promiscuous mode [ 205.891072][ T1300] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.972542][ T1300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.982960][ T1300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.992952][ T1300] bond0 (unregistering): Released all slaves [ 206.001656][ T1300] bond1 (unregistering): Released all slaves [ 206.127763][ T1300] hsr_slave_0: left promiscuous mode [ 206.133452][ T1300] hsr_slave_1: left promiscuous mode [ 206.139193][ T1300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.171829][T11833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.180476][T11833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.180609][ T1300] team0 (unregistering): Port device team_slave_1 removed [ 206.190247][T11833] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2857'. [ 206.206437][ T1300] team0 (unregistering): Port device team_slave_0 removed [ 206.411146][T11749] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.422901][T11749] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.432515][T11749] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.441354][T11749] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 206.477733][T11749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.491201][T11749] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.513927][T11749] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.524408][T11749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.543902][ T8280] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.551064][ T8280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.561145][ T8280] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.568234][ T8280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.622984][T11840] blktrace: Concurrent blktraces are not allowed on sg0 [ 206.791977][T11749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.996778][T11847] loop0: detected capacity change from 0 to 4096 [ 207.036576][T11847] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 207.092074][T11749] veth0_vlan: entered promiscuous mode [ 207.109299][ T30] kauditd_printk_skb: 735 callbacks suppressed [ 207.109336][ T30] audit: type=1326 audit(1741805300.558:12403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.0.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 207.113173][T11749] veth1_vlan: entered promiscuous mode [ 207.120797][ T30] audit: type=1326 audit(1741805300.558:12404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.0.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 207.149356][T11749] veth0_macvtap: entered promiscuous mode [ 207.168308][ T30] audit: type=1326 audit(1741805300.558:12405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.0.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 207.197675][ T30] audit: type=1326 audit(1741805300.558:12406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.0.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 207.221518][ T30] audit: type=1326 audit(1741805300.558:12407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.0.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 207.224437][T11749] veth1_macvtap: entered promiscuous mode [ 207.245134][ T30] audit: type=1326 audit(1741805300.558:12408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.0.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 207.260212][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.274291][ T30] audit: type=1326 audit(1741805300.558:12409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.0.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 207.284723][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.284737][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.308298][ T30] audit: type=1326 audit(1741805300.558:12410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.0.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 207.318089][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.318109][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.318124][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.328579][ T30] audit: type=1326 audit(1741805300.558:12411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.0.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 207.352075][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.352093][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.361918][ T30] audit: type=1326 audit(1741805300.558:12412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.0.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 207.383759][T11749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.462680][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.462703][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.462724][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.462782][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.462796][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.462813][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.463477][T11749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.464652][T11749] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.464718][T11749] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.464782][T11749] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.464883][T11749] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.623878][T11866] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2831'. [ 207.660993][T11874] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11874 comm=syz.6.2867 [ 207.673707][T11874] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11874 comm=syz.6.2867 [ 207.771943][T11881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.780732][T11881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.792124][T11881] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2870'. [ 207.974027][T11883] blktrace: Concurrent blktraces are not allowed on sg0 [ 208.303078][T11889] loop0: detected capacity change from 0 to 4096 [ 208.322615][T11889] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 208.960126][T11916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.972570][T11916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.982262][T11916] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2884'. [ 209.030343][T11923] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11923 comm=syz.6.2886 [ 209.043175][T11923] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11923 comm=syz.6.2886 [ 209.043647][T11921] loop3: detected capacity change from 0 to 4096 [ 209.062778][T11921] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 209.164285][T11933] hsr0: entered promiscuous mode [ 209.218489][T11934] SELinux: policydb version 133 does not match my version range 15-34 [ 209.227047][T11934] SELinux: failed to load policy [ 209.294789][T11938] loop7: detected capacity change from 0 to 2048 [ 209.336187][T11938] loop7: p1 < > p4 < > [ 209.389204][T11940] loop7: detected capacity change from 0 to 2048 [ 209.405708][T11942] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2895'. [ 209.425130][T11940] loop7: p1 < > p4 < > [ 209.549081][T11957] program syz.7.2902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.569523][T11955] loop0: detected capacity change from 0 to 512 [ 209.577435][T11955] EXT4-fs: Ignoring removed bh option [ 209.582993][T11955] ext4: Unknown parameter 'smackfsdef' [ 209.592831][T11957] loop7: detected capacity change from 0 to 2048 [ 209.637185][T11957] Alternate GPT is invalid, using primary GPT. [ 209.643703][T11957] loop7: p2 p3 p7 [ 209.800355][T11955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.810119][T11955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.986958][T11965] loop7: detected capacity change from 0 to 2048 [ 210.042267][T11965] loop7: p1 < > p4 < > [ 210.069491][T11972] loop6: detected capacity change from 0 to 4096 [ 210.090887][T11972] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 210.095769][T11967] lo speed is unknown, defaulting to 1000 [ 210.206350][T11967] chnl_net:caif_netlink_parms(): no params data found [ 210.247516][T11984] FAULT_INJECTION: forcing a failure. [ 210.247516][T11984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.260731][T11984] CPU: 0 UID: 0 PID: 11984 Comm: syz.7.2909 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 210.260766][T11984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.260807][T11984] Call Trace: [ 210.260814][T11984] [ 210.260822][T11984] dump_stack_lvl+0xf2/0x150 [ 210.260931][T11984] dump_stack+0x15/0x1a [ 210.260956][T11984] should_fail_ex+0x24a/0x260 [ 210.260987][T11984] should_fail+0xb/0x10 [ 210.261016][T11984] should_fail_usercopy+0x1a/0x20 [ 210.261123][T11984] _copy_from_iter+0xd5/0xd00 [ 210.261160][T11984] ? kmalloc_reserve+0x16e/0x190 [ 210.261262][T11984] ? __build_skb_around+0x196/0x1f0 [ 210.261289][T11984] ? __alloc_skb+0x21f/0x310 [ 210.261315][T11984] ? __virt_addr_valid+0x1ed/0x250 [ 210.261345][T11984] ? __check_object_size+0x364/0x520 [ 210.261376][T11984] netlink_sendmsg+0x460/0x6e0 [ 210.261425][T11984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.261466][T11984] __sock_sendmsg+0x140/0x180 [ 210.261504][T11984] ____sys_sendmsg+0x326/0x4b0 [ 210.261552][T11984] __sys_sendmsg+0x19d/0x230 [ 210.261594][T11984] __x64_sys_sendmsg+0x46/0x50 [ 210.261641][T11984] x64_sys_call+0x2734/0x2dc0 [ 210.261746][T11984] do_syscall_64+0xc9/0x1c0 [ 210.261861][T11984] ? clear_bhb_loop+0x55/0xb0 [ 210.261894][T11984] ? clear_bhb_loop+0x55/0xb0 [ 210.261949][T11984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.261982][T11984] RIP: 0033:0x7f4ac2c0d169 [ 210.262000][T11984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.262019][T11984] RSP: 002b:00007f4ac1277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.262041][T11984] RAX: ffffffffffffffda RBX: 00007f4ac2e25fa0 RCX: 00007f4ac2c0d169 [ 210.262056][T11984] RDX: 0000000004040000 RSI: 0000400000000100 RDI: 0000000000000005 [ 210.262132][T11984] RBP: 00007f4ac1277090 R08: 0000000000000000 R09: 0000000000000000 [ 210.262203][T11984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.262218][T11984] R13: 0000000000000000 R14: 00007f4ac2e25fa0 R15: 00007ffedc773868 [ 210.262239][T11984] [ 210.521938][T11990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.556307][T11990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.567415][T11990] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2911'. [ 210.577350][T11967] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.584411][T11967] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.592061][T11967] bridge_slave_0: entered allmulticast mode [ 210.598830][T11967] bridge_slave_0: entered promiscuous mode [ 210.606112][T11967] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.613178][T11967] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.620398][T11967] bridge_slave_1: entered allmulticast mode [ 210.626952][T11967] bridge_slave_1: entered promiscuous mode [ 210.651918][T11967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.662757][T11967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.692213][T11967] team0: Port device team_slave_0 added [ 210.699346][T11967] team0: Port device team_slave_1 added [ 210.733608][T11967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.740718][T11967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.766679][T11967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.778784][T11967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.785796][T11967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.811918][T11967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.861283][T11967] hsr_slave_0: entered promiscuous mode [ 210.876809][T12006] loop6: detected capacity change from 0 to 2048 [ 210.917287][T12010] loop3: detected capacity change from 0 to 4096 [ 210.943645][T12010] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 210.974238][T12010] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 211.258060][T12006] loop6: p1 < > p4 < > [ 211.268450][T11967] hsr_slave_1: entered promiscuous mode [ 211.282862][T11967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.290606][T11967] Cannot create hsr debugfs directory [ 211.299103][T12011] lo speed is unknown, defaulting to 1000 [ 211.317955][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2923'. [ 211.413099][T12031] loop6: detected capacity change from 0 to 2048 [ 211.461513][T12036] FAULT_INJECTION: forcing a failure. [ 211.461513][T12036] name failslab, interval 1, probability 0, space 0, times 0 [ 211.466650][T11967] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 211.474569][T12036] CPU: 1 UID: 0 PID: 12036 Comm: syz.7.2927 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 211.474651][T12036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 211.474668][T12036] Call Trace: [ 211.474677][T12036] [ 211.474744][T12036] dump_stack_lvl+0xf2/0x150 [ 211.474781][T12036] dump_stack+0x15/0x1a [ 211.474886][T12036] should_fail_ex+0x24a/0x260 [ 211.474926][T12036] should_failslab+0x8f/0xb0 [ 211.475002][T12036] kmem_cache_alloc_noprof+0x52/0x320 [ 211.475030][T12036] ? __kernfs_new_node+0x6a/0x380 [ 211.475069][T12036] __kernfs_new_node+0x6a/0x380 [ 211.475235][T12036] ? up_write+0x30/0xf0 [ 211.475261][T12036] ? up_write+0x30/0xf0 [ 211.475288][T12036] ? kernfs_activate+0x256/0x270 [ 211.475389][T12036] kernfs_new_node+0xc8/0x140 [ 211.475426][T12036] __kernfs_create_file+0x49/0x180 [ 211.475553][T12036] ? __pfx_dev_attr_store+0x10/0x10 [ 211.475591][T12036] sysfs_add_file_mode_ns+0x136/0x1c0 [ 211.475621][T12036] internal_create_group+0x462/0xa20 [ 211.475668][T12036] sysfs_create_group+0x1f/0x30 [ 211.475701][T12036] loop_configure+0x7e3/0xa50 [ 211.475750][T12036] lo_ioctl+0x613/0x14f0 [ 211.475784][T12036] ? path_openat+0x1a78/0x1fc0 [ 211.475854][T12036] ? __rcu_read_unlock+0x4e/0x70 [ 211.475883][T12036] ? avc_has_extended_perms+0x6e9/0x8e0 [ 211.475921][T12036] ? blkdev_common_ioctl+0xabc/0x1940 [ 211.475951][T12036] ? do_vfs_ioctl+0x98b/0x1590 [ 211.475986][T12036] ? selinux_file_ioctl+0x2f7/0x380 [ 211.476096][T12036] ? __pfx_lo_ioctl+0x10/0x10 [ 211.476142][T12036] blkdev_ioctl+0x359/0x450 [ 211.476251][T12036] ? __pfx_blkdev_ioctl+0x10/0x10 [ 211.476278][T12036] __se_sys_ioctl+0xc9/0x140 [ 211.476310][T12036] __x64_sys_ioctl+0x43/0x50 [ 211.476447][T12036] x64_sys_call+0x1690/0x2dc0 [ 211.476480][T12036] do_syscall_64+0xc9/0x1c0 [ 211.476521][T12036] ? clear_bhb_loop+0x55/0xb0 [ 211.476631][T12036] ? clear_bhb_loop+0x55/0xb0 [ 211.476665][T12036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.476700][T12036] RIP: 0033:0x7f4ac2c0d169 [ 211.476721][T12036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.476744][T12036] RSP: 002b:00007f4ac1277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.476825][T12036] RAX: ffffffffffffffda RBX: 00007f4ac2e25fa0 RCX: 00007f4ac2c0d169 [ 211.476871][T12036] RDX: 00004000000002c0 RSI: 0000000000004c0a RDI: 0000000000000005 [ 211.476886][T12036] RBP: 00007f4ac1277090 R08: 0000000000000000 R09: 0000000000000000 [ 211.476901][T12036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.476970][T12036] R13: 0000000000000000 R14: 00007f4ac2e25fa0 R15: 00007ffedc773868 [ 211.476991][T12036] [ 211.555311][T12031] loop6: p1 < > p4 < > [ 211.583709][T12036] loop9: detected capacity change from 0 to 7 [ 211.765637][T11967] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 211.798726][T11967] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 211.804919][T12036] Buffer I/O error on dev loop9, logical block 0, async page read [ 211.813415][T12036] Buffer I/O error on dev loop9, logical block 0, async page read [ 211.821367][T12036] loop9: unable to read partition table [ 211.827900][T12036] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 211.827900][T12036] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 211.857310][T11967] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 211.874903][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.884760][T12046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2931'. [ 211.895142][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.906762][T12052] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2933'. [ 211.969689][T11967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.995043][T11967] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.003051][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.003096][ T8276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.004605][ T8276] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.004649][ T8276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.097545][T11967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.116467][T12070] lo speed is unknown, defaulting to 1000 [ 212.204096][T12087] loop0: detected capacity change from 0 to 1024 [ 212.212707][ T30] kauditd_printk_skb: 788 callbacks suppressed [ 212.212723][ T30] audit: type=1400 audit(1741805305.658:13201): avc: denied { mounton } for pid=12086 comm="syz.0.2941" path="/32/file1" dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 212.253657][T11967] veth0_vlan: entered promiscuous mode [ 212.262442][T11967] veth1_vlan: entered promiscuous mode [ 212.286684][T12087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.292410][T11967] veth0_macvtap: entered promiscuous mode [ 212.309388][T11967] veth1_macvtap: entered promiscuous mode [ 212.330893][ T30] audit: type=1400 audit(1741805305.758:13202): avc: denied { create } for pid=12099 comm="syz.7.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 212.350951][ T30] audit: type=1400 audit(1741805305.768:13203): avc: denied { mount } for pid=12086 comm="syz.0.2941" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 212.353966][T11967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.383455][T11967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.393404][T11967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.403858][T11967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.413745][T11967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.424492][T11967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.434361][T11967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.444977][T11967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.446482][T12105] loop7: detected capacity change from 0 to 2048 [ 212.454806][T11967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.454825][T11967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.472814][T11967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.489620][ T30] audit: type=1326 audit(1741805305.878:13204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.7.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac2c0d169 code=0x7ffc0000 [ 212.513373][ T30] audit: type=1326 audit(1741805305.878:13205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.7.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4ac2c0d169 code=0x7ffc0000 [ 212.537004][ T30] audit: type=1326 audit(1741805305.878:13206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.7.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ac2c0d1a3 code=0x7ffc0000 [ 212.560473][ T30] audit: type=1326 audit(1741805305.888:13207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.7.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4ac2c0bc1f code=0x7ffc0000 [ 212.584015][ T30] audit: type=1326 audit(1741805305.898:13208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.7.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4ac2c0d1f7 code=0x7ffc0000 [ 212.607552][ T30] audit: type=1326 audit(1741805305.898:13209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.7.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ac2c0bad0 code=0x7ffc0000 [ 212.631531][ T30] audit: type=1326 audit(1741805305.898:13210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.7.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ac2c0cd6b code=0x7ffc0000 [ 212.670546][T11547] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.696119][T12105] loop7: p1 < > p4 < > [ 212.698881][T11967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.710872][T11967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.721020][T11967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.731624][T11967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.742019][T11967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.752576][T11967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.762397][T11967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.772958][T11967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.783903][T11967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.793538][T11967] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.802289][T11967] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.811107][T11967] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.819861][T11967] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.922299][T12119] lo speed is unknown, defaulting to 1000 [ 212.967080][T12126] Invalid logical block size (3584) [ 213.016339][T12135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.026360][T12135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.035987][T12135] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2955'. [ 213.235621][T12148] loop7: detected capacity change from 0 to 2048 [ 213.297282][T12148] loop7: p1 < > p4 < > [ 213.373881][T12150] loop7: detected capacity change from 0 to 2048 [ 213.415757][T12150] loop7: p1 < > p4 < > [ 213.530034][T12156] loop6: detected capacity change from 0 to 4096 [ 213.537422][T12156] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 213.929615][T12176] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12176 comm=syz.0.2971 [ 213.942301][T12176] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12176 comm=syz.0.2971 [ 213.952262][T12173] loop7: detected capacity change from 0 to 2048 [ 214.012836][T12173] loop7: p1 < > p4 < > [ 214.075082][T12191] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2971'. [ 214.094238][T12176] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2971'. [ 214.117669][T12197] FAULT_INJECTION: forcing a failure. [ 214.117669][T12197] name failslab, interval 1, probability 0, space 0, times 0 [ 214.130625][T12197] CPU: 0 UID: 0 PID: 12197 Comm: syz.3.2980 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 214.130657][T12197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.130671][T12197] Call Trace: [ 214.130679][T12197] [ 214.130688][T12197] dump_stack_lvl+0xf2/0x150 [ 214.130762][T12197] dump_stack+0x15/0x1a [ 214.130784][T12197] should_fail_ex+0x24a/0x260 [ 214.130821][T12197] should_failslab+0x8f/0xb0 [ 214.130914][T12197] __kmalloc_cache_node_noprof+0x56/0x320 [ 214.130944][T12197] ? __get_vm_area_node+0xfb/0x1c0 [ 214.130976][T12197] __get_vm_area_node+0xfb/0x1c0 [ 214.131058][T12197] __vmalloc_node_range_noprof+0x280/0xe70 [ 214.131095][T12197] ? xt_counters_alloc+0x40/0x50 [ 214.131133][T12197] ? kvfree+0x39/0x40 [ 214.131169][T12197] ? kfree+0x247/0x2f0 [ 214.131245][T12197] ? kvfree+0x39/0x40 [ 214.131278][T12197] ? translate_table+0xeca/0x10c0 [ 214.131316][T12197] ? xt_counters_alloc+0x40/0x50 [ 214.131418][T12197] vzalloc_noprof+0x5e/0x70 [ 214.131445][T12197] ? xt_counters_alloc+0x40/0x50 [ 214.131477][T12197] xt_counters_alloc+0x40/0x50 [ 214.131530][T12197] __do_replace+0x50/0x620 [ 214.131569][T12197] ? should_fail_ex+0xd7/0x260 [ 214.131602][T12197] ? _copy_from_user+0x89/0xa0 [ 214.131670][T12197] do_arpt_set_ctl+0x8cd/0xa20 [ 214.131740][T12197] ? _raw_spin_unlock_bh+0x36/0x40 [ 214.131774][T12197] nf_setsockopt+0x195/0x1b0 [ 214.131818][T12197] ip_setsockopt+0xea/0x100 [ 214.131851][T12197] udp_setsockopt+0x95/0xb0 [ 214.131922][T12197] sock_common_setsockopt+0x64/0x80 [ 214.131966][T12197] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 214.132084][T12197] __sys_setsockopt+0x187/0x200 [ 214.132113][T12197] __x64_sys_setsockopt+0x66/0x80 [ 214.132218][T12197] x64_sys_call+0x282e/0x2dc0 [ 214.132252][T12197] do_syscall_64+0xc9/0x1c0 [ 214.132291][T12197] ? clear_bhb_loop+0x55/0xb0 [ 214.132378][T12197] ? clear_bhb_loop+0x55/0xb0 [ 214.132409][T12197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.132503][T12197] RIP: 0033:0x7f4a2595d169 [ 214.132519][T12197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.132540][T12197] RSP: 002b:00007f4a23fc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 214.132560][T12197] RAX: ffffffffffffffda RBX: 00007f4a25b75fa0 RCX: 00007f4a2595d169 [ 214.132621][T12197] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000006 [ 214.132635][T12197] RBP: 00007f4a23fc7090 R08: 0000000000000438 R09: 0000000000000000 [ 214.132649][T12197] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.132661][T12197] R13: 0000000000000000 R14: 00007f4a25b75fa0 R15: 00007ffd198dfd68 [ 214.132682][T12197] [ 214.132691][T12197] syz.3.2980: vmalloc error: size 1840, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 214.415382][T12197] CPU: 0 UID: 0 PID: 12197 Comm: syz.3.2980 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 214.415414][T12197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.415430][T12197] Call Trace: [ 214.415437][T12197] [ 214.415445][T12197] dump_stack_lvl+0xf2/0x150 [ 214.415480][T12197] dump_stack+0x15/0x1a [ 214.415566][T12197] warn_alloc+0x145/0x1b0 [ 214.415595][T12197] ? __get_vm_area_node+0xfb/0x1c0 [ 214.415634][T12197] __vmalloc_node_range_noprof+0x2a5/0xe70 [ 214.415674][T12197] ? kvfree+0x39/0x40 [ 214.415785][T12197] ? kfree+0x247/0x2f0 [ 214.415810][T12197] ? kvfree+0x39/0x40 [ 214.415865][T12197] ? translate_table+0xeca/0x10c0 [ 214.415899][T12197] ? xt_counters_alloc+0x40/0x50 [ 214.415958][T12197] vzalloc_noprof+0x5e/0x70 [ 214.416045][T12197] ? xt_counters_alloc+0x40/0x50 [ 214.416117][T12197] xt_counters_alloc+0x40/0x50 [ 214.416154][T12197] __do_replace+0x50/0x620 [ 214.416225][T12197] ? should_fail_ex+0xd7/0x260 [ 214.416263][T12197] ? _copy_from_user+0x89/0xa0 [ 214.416286][T12197] do_arpt_set_ctl+0x8cd/0xa20 [ 214.416327][T12197] ? _raw_spin_unlock_bh+0x36/0x40 [ 214.416355][T12197] nf_setsockopt+0x195/0x1b0 [ 214.416445][T12197] ip_setsockopt+0xea/0x100 [ 214.416492][T12197] udp_setsockopt+0x95/0xb0 [ 214.416520][T12197] sock_common_setsockopt+0x64/0x80 [ 214.416560][T12197] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 214.416699][T12197] __sys_setsockopt+0x187/0x200 [ 214.416738][T12197] __x64_sys_setsockopt+0x66/0x80 [ 214.416767][T12197] x64_sys_call+0x282e/0x2dc0 [ 214.416798][T12197] do_syscall_64+0xc9/0x1c0 [ 214.416875][T12197] ? clear_bhb_loop+0x55/0xb0 [ 214.416909][T12197] ? clear_bhb_loop+0x55/0xb0 [ 214.416942][T12197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.417040][T12197] RIP: 0033:0x7f4a2595d169 [ 214.417058][T12197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.417079][T12197] RSP: 002b:00007f4a23fc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 214.417101][T12197] RAX: ffffffffffffffda RBX: 00007f4a25b75fa0 RCX: 00007f4a2595d169 [ 214.417116][T12197] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000006 [ 214.417130][T12197] RBP: 00007f4a23fc7090 R08: 0000000000000438 R09: 0000000000000000 [ 214.417145][T12197] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.417176][T12197] R13: 0000000000000000 R14: 00007f4a25b75fa0 R15: 00007ffd198dfd68 [ 214.417199][T12197] [ 214.417207][T12197] Mem-Info: [ 214.667502][T12197] active_anon:61608 inactive_anon:0 isolated_anon:0 [ 214.667502][T12197] active_file:25028 inactive_file:2212 isolated_file:0 [ 214.667502][T12197] unevictable:0 dirty:118 writeback:0 [ 214.667502][T12197] slab_reclaimable:3269 slab_unreclaimable:16206 [ 214.667502][T12197] mapped:34252 shmem:58547 pagetables:903 [ 214.667502][T12197] sec_pagetables:0 bounce:0 [ 214.667502][T12197] kernel_misc_reclaimable:0 [ 214.667502][T12197] free:1818836 free_pcp:5597 free_cma:0 [ 214.712620][T12197] Node 0 active_anon:246432kB inactive_anon:0kB active_file:100112kB inactive_file:8848kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137008kB dirty:472kB writeback:0kB shmem:234188kB writeback_tmp:0kB kernel_stack:3808kB pagetables:3612kB sec_pagetables:0kB all_unreclaimable? no [ 214.740830][T12197] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.767775][T12197] lowmem_reserve[]: 0 2885 7863 7863 [ 214.773173][T12197] Node 0 DMA32 free:2950732kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954364kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 214.801846][T12197] lowmem_reserve[]: 0 0 4978 4978 [ 214.806960][T12197] Node 0 Normal free:4309252kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:246432kB inactive_anon:0kB active_file:100112kB inactive_file:8848kB unevictable:0kB writepending:472kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:18752kB local_pcp:4852kB free_cma:0kB [ 214.837211][T12197] lowmem_reserve[]: 0 0 0 0 [ 214.841803][T12197] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 214.854611][T12197] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 1*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950732kB [ 214.870770][T12197] Node 0 Normal: 1321*4kB (ME) 1772*8kB (ME) 1338*16kB (UME) 975*32kB (ME) 571*64kB (M) 196*128kB (ME) 51*256kB (M) 92*512kB (M) 55*1024kB (UME) 58*2048kB (UME) 962*4096kB (UM) = 4309316kB [ 214.889724][T12197] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 214.899056][T12197] 85712 total pagecache pages [ 214.903745][T12197] 0 pages in swap cache [ 214.907927][T12197] Free swap = 124740kB [ 214.912157][T12197] Total swap = 124996kB [ 214.916349][T12197] 2097051 pages RAM [ 214.920169][T12197] 0 pages HighMem/MovableOnly [ 214.924882][T12197] 80068 pages reserved [ 215.039529][T12223] loop3: detected capacity change from 0 to 2048 [ 215.126260][T12223] loop3: p1 < > p4 < > [ 215.276420][T12240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12240 comm=syz.0.2997 [ 215.289034][T12240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12240 comm=syz.0.2997 [ 215.319781][T12246] loop6: detected capacity change from 0 to 512 [ 215.326495][T12246] EXT4-fs: Ignoring removed nobh option [ 215.340402][T12246] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #16: comm syz.6.3000: corrupted inode contents [ 215.341864][T12254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.362278][T12254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.369668][T12256] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2997'. [ 215.373763][T12254] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3002'. [ 215.382107][T12240] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2997'. [ 215.391036][T12246] EXT4-fs (loop6): Remounting filesystem read-only [ 215.405615][T12246] EXT4-fs (loop6): 1 truncate cleaned up [ 215.411710][T12246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.426166][T12246] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 215.433869][T12246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.443063][ T8284] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 215.453833][ T8284] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 215.468377][ T8284] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 215.518259][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3000'. [ 215.949331][T12304] loop3: detected capacity change from 0 to 256 [ 215.956325][T12304] FAT-fs (loop3): bogus number of FAT sectors [ 215.962460][T12304] FAT-fs (loop3): Can't find a valid FAT filesystem [ 215.980903][T12302] loop6: detected capacity change from 0 to 512 [ 216.028734][T12302] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 216.059685][T12302] EXT4-fs (loop6): 1 truncate cleaned up [ 216.072006][T12302] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.176845][ T5834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.195005][T12311] loop0: detected capacity change from 0 to 4096 [ 216.201706][T12311] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 216.231383][T12315] x_tables: duplicate underflow at hook 1 [ 216.281742][T12315] loop8: detected capacity change from 0 to 4096 [ 216.289504][T12315] ext4: Unknown parameter 'pcr' [ 216.403267][T12331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.417495][T12331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.426492][T12331] __nla_validate_parse: 1 callbacks suppressed [ 216.426563][T12331] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3027'. [ 216.692369][T12355] loop8: detected capacity change from 0 to 4096 [ 216.699111][T12355] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 216.742408][T12358] loop7: detected capacity change from 0 to 128 [ 216.781802][T12360] loop7: detected capacity change from 0 to 2048 [ 216.788606][T12360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.810353][T12366] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12366 comm=syz.8.3039 [ 216.816663][T12360] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.823056][T12366] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12366 comm=syz.8.3039 [ 216.911186][T12368] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3039'. [ 216.921099][T12366] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3039'. [ 217.221068][ T30] kauditd_printk_skb: 1629 callbacks suppressed [ 217.221086][ T30] audit: type=1326 audit(1741805310.668:14834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12344 comm="syz.0.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51d2374127 code=0x7ffc0000 [ 217.250995][ T30] audit: type=1326 audit(1741805310.668:14835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12344 comm="syz.0.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51d2319359 code=0x7ffc0000 [ 217.274706][ T30] audit: type=1326 audit(1741805310.668:14836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12344 comm="syz.0.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 217.314787][ T30] audit: type=1326 audit(1741805310.758:14837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12344 comm="syz.0.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51d2374127 code=0x7ffc0000 [ 217.338413][ T30] audit: type=1326 audit(1741805310.758:14838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12344 comm="syz.0.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51d2319359 code=0x7ffc0000 [ 217.362048][ T30] audit: type=1326 audit(1741805310.758:14839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12344 comm="syz.0.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 217.385648][ T30] audit: type=1326 audit(1741805310.758:14840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12344 comm="syz.0.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51d2374127 code=0x7ffc0000 [ 217.409272][ T30] audit: type=1326 audit(1741805310.758:14841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12344 comm="syz.0.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51d2319359 code=0x7ffc0000 [ 217.433000][ T30] audit: type=1326 audit(1741805310.758:14842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12344 comm="syz.0.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 217.457014][ T30] audit: type=1326 audit(1741805310.768:14843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12344 comm="syz.0.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51d2374127 code=0x7ffc0000 [ 217.554232][T12405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.563624][T12405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.572720][T12405] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3051'. [ 217.626148][ T9860] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.659898][T12412] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3055'. [ 217.678972][T12415] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12415 comm=syz.7.3054 [ 217.691807][T12415] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12415 comm=syz.7.3054 [ 217.712815][T12417] loop8: detected capacity change from 0 to 4096 [ 217.719714][T12417] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 217.762929][T12425] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3054'. [ 217.773170][T12415] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3054'. [ 217.917581][T12441] loop3: detected capacity change from 0 to 2048 [ 217.924446][T12441] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.932323][T12443] loop7: detected capacity change from 0 to 128 [ 217.938988][T12443] vfat: Unknown parameter '' [ 217.963107][T12448] loop6: detected capacity change from 0 to 512 [ 217.971442][T12448] EXT4-fs: quotafile must be on filesystem root [ 217.979735][T12441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.059553][T12453] loop6: detected capacity change from 0 to 512 [ 218.082039][T12453] EXT4-fs: Ignoring removed nobh option [ 218.118414][T12453] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #16: comm syz.6.3068: corrupted inode contents [ 218.152560][T12453] EXT4-fs (loop6): Remounting filesystem read-only [ 218.171930][T12453] EXT4-fs (loop6): 1 truncate cleaned up [ 218.186248][ T8280] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.198332][ T8280] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.209327][T12453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.225081][T12453] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 218.245972][ T8280] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 218.256796][T12453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.332752][T12464] loop0: detected capacity change from 0 to 512 [ 218.351509][T12464] EXT4-fs: Ignoring removed nobh option [ 218.398093][T12464] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #16: comm syz.0.3072: corrupted inode contents [ 218.436540][T12464] EXT4-fs (loop0): Remounting filesystem read-only [ 218.456584][T12464] EXT4-fs (loop0): 1 truncate cleaned up [ 218.476942][ T8282] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.487629][ T8282] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.500266][T12464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.575601][T12464] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 218.583243][ T8282] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 218.596400][T12464] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.667378][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3072'. [ 218.782333][T12481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.782371][T11749] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.807508][T12481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.816751][T12481] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3079'. [ 218.842926][T12486] loop7: detected capacity change from 0 to 512 [ 218.850011][T12486] EXT4-fs: Ignoring removed nobh option [ 218.884265][T12494] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3086'. [ 218.888128][T12495] loop3: detected capacity change from 0 to 2048 [ 218.897315][T12486] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #16: comm syz.7.3083: corrupted inode contents [ 218.905220][T12495] EXT4-fs: Ignoring removed nomblk_io_submit option [ 218.912253][T12486] EXT4-fs (loop7): Remounting filesystem read-only [ 218.925375][T12486] EXT4-fs (loop7): 1 truncate cleaned up [ 218.931444][T12486] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.944325][T12486] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 218.951359][ T8284] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.961943][ T8284] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.962799][T12486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.972617][ T8284] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 218.997218][T12495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.122626][T12511] loop7: detected capacity change from 0 to 2048 [ 219.129451][T12511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.149680][T12511] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.386511][T12528] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0îƒ&IØü0‚Ñ(|9QûÂMÍ-tãtÈÎÇV¹Kr-j"ž‰ž:²a) [ 219.392142][T12526] loop0: detected capacity change from 0 to 4096 [ 219.419504][T12526] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 219.492399][T12528] loop6: detected capacity change from 0 to 8192 [ 219.573371][T12532] loop0: detected capacity change from 0 to 2048 [ 219.705068][T12532] loop0: p1 < > p4 < > [ 219.741624][T12528] team0 (unregistering): Port device team_slave_0 removed [ 219.751549][T12528] team0 (unregistering): Port device team_slave_1 removed [ 219.853644][T11749] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.903295][T12548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.912999][T12548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.972790][ T9860] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.042143][T12562] loop6: detected capacity change from 0 to 4096 [ 220.052202][T12565] FAULT_INJECTION: forcing a failure. [ 220.052202][T12565] name failslab, interval 1, probability 0, space 0, times 0 [ 220.064992][T12565] CPU: 1 UID: 0 PID: 12565 Comm: syz.7.3115 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 220.065024][T12565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.065039][T12565] Call Trace: [ 220.065047][T12565] [ 220.065056][T12565] dump_stack_lvl+0xf2/0x150 [ 220.065089][T12565] dump_stack+0x15/0x1a [ 220.065114][T12565] should_fail_ex+0x24a/0x260 [ 220.065220][T12565] should_failslab+0x8f/0xb0 [ 220.065334][T12565] kmem_cache_alloc_node_noprof+0x59/0x320 [ 220.065365][T12565] ? __alloc_skb+0x10b/0x310 [ 220.065385][T12565] ? avc_has_perm_noaudit+0x1cc/0x210 [ 220.065407][T12565] __alloc_skb+0x10b/0x310 [ 220.065439][T12565] alloc_skb_with_frags+0x80/0x450 [ 220.065471][T12565] ? selinux_file_open+0x34a/0x3b0 [ 220.065515][T12565] sock_alloc_send_pskb+0x435/0x4f0 [ 220.065554][T12565] ? mntput+0x49/0x70 [ 220.065581][T12565] tun_get_user+0xa24/0x25c0 [ 220.065678][T12565] ? _parse_integer+0x27/0x30 [ 220.065774][T12565] ? ref_tracker_alloc+0x1f5/0x2f0 [ 220.065836][T12565] tun_chr_write_iter+0x188/0x240 [ 220.065895][T12565] vfs_write+0x77b/0x920 [ 220.065929][T12565] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 220.065982][T12565] ksys_write+0xe8/0x1b0 [ 220.066042][T12565] __x64_sys_write+0x42/0x50 [ 220.066070][T12565] x64_sys_call+0x287e/0x2dc0 [ 220.066096][T12565] do_syscall_64+0xc9/0x1c0 [ 220.066137][T12565] ? clear_bhb_loop+0x55/0xb0 [ 220.066213][T12565] ? clear_bhb_loop+0x55/0xb0 [ 220.066241][T12565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.066268][T12565] RIP: 0033:0x7f4ac2c0bc1f [ 220.066355][T12565] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 220.066375][T12565] RSP: 002b:00007f4ac1277000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 220.066396][T12565] RAX: ffffffffffffffda RBX: 00007f4ac2e25fa0 RCX: 00007f4ac2c0bc1f [ 220.066411][T12565] RDX: 000000000000fdef RSI: 0000400000000380 RDI: 00000000000000c8 [ 220.066425][T12565] RBP: 00007f4ac1277090 R08: 0000000000000000 R09: 0000000000000000 [ 220.066498][T12565] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001 [ 220.066513][T12565] R13: 0000000000000000 R14: 00007f4ac2e25fa0 R15: 00007ffedc773868 [ 220.066536][T12565] [ 220.292614][T12562] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 220.403452][T12584] FAULT_INJECTION: forcing a failure. [ 220.403452][T12584] name failslab, interval 1, probability 0, space 0, times 0 [ 220.416209][T12584] CPU: 1 UID: 0 PID: 12584 Comm: syz.7.3124 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 220.416238][T12584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.416290][T12584] Call Trace: [ 220.416298][T12584] [ 220.416308][T12584] dump_stack_lvl+0xf2/0x150 [ 220.416342][T12584] dump_stack+0x15/0x1a [ 220.416367][T12584] should_fail_ex+0x24a/0x260 [ 220.416406][T12584] should_failslab+0x8f/0xb0 [ 220.416485][T12584] kmem_cache_alloc_noprof+0x52/0x320 [ 220.416511][T12584] ? audit_log_start+0x34c/0x6b0 [ 220.416554][T12584] audit_log_start+0x34c/0x6b0 [ 220.416613][T12584] audit_seccomp+0x4b/0x130 [ 220.416729][T12584] __seccomp_filter+0x6fa/0x1180 [ 220.416756][T12584] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 220.416794][T12584] ? vfs_write+0x644/0x920 [ 220.416830][T12584] __secure_computing+0x9f/0x1c0 [ 220.416856][T12584] syscall_trace_enter+0xd1/0x1f0 [ 220.416932][T12584] ? fpregs_assert_state_consistent+0x83/0xa0 [ 220.416960][T12584] do_syscall_64+0xaa/0x1c0 [ 220.416997][T12584] ? clear_bhb_loop+0x55/0xb0 [ 220.417030][T12584] ? clear_bhb_loop+0x55/0xb0 [ 220.417066][T12584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.417100][T12584] RIP: 0033:0x7f4ac2c0d169 [ 220.417119][T12584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.417141][T12584] RSP: 002b:00007f4ac1277038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 220.417172][T12584] RAX: ffffffffffffffda RBX: 00007f4ac2e25fa0 RCX: 00007f4ac2c0d169 [ 220.417187][T12584] RDX: 0000400000000300 RSI: 0000000000000001 RDI: 00007f4ac3963000 [ 220.417202][T12584] RBP: 00007f4ac1277090 R08: 0000000000000000 R09: 0000000000000000 [ 220.417216][T12584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.417230][T12584] R13: 0000000000000000 R14: 00007f4ac2e25fa0 R15: 00007ffedc773868 [ 220.417250][T12584] [ 220.706622][T12601] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12601 comm=syz.7.3132 [ 220.719416][T12601] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12601 comm=syz.7.3132 [ 220.780428][T12612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.797513][T12612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.844099][T12619] loop3: detected capacity change from 0 to 2048 [ 220.858378][T12623] loop8: detected capacity change from 0 to 512 [ 220.866850][T12623] EXT4-fs: inline encryption not supported [ 220.874364][T12626] FAULT_INJECTION: forcing a failure. [ 220.874364][T12626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.874462][T12623] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.887573][T12626] CPU: 1 UID: 0 PID: 12626 Comm: syz.7.3142 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 220.887630][T12626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.887696][T12626] Call Trace: [ 220.887706][T12626] [ 220.887715][T12626] dump_stack_lvl+0xf2/0x150 [ 220.887759][T12626] dump_stack+0x15/0x1a [ 220.887800][T12626] should_fail_ex+0x24a/0x260 [ 220.887942][T12626] should_fail+0xb/0x10 [ 220.887977][T12626] should_fail_usercopy+0x1a/0x20 [ 220.888018][T12626] _copy_to_user+0x20/0xa0 [ 220.888043][T12626] simple_read_from_buffer+0xa0/0x110 [ 220.888081][T12626] proc_fail_nth_read+0xf9/0x140 [ 220.888130][T12626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.888176][T12626] vfs_read+0x19b/0x6f0 [ 220.888207][T12626] ? __rcu_read_unlock+0x4e/0x70 [ 220.888236][T12626] ? __fget_files+0x17c/0x1c0 [ 220.888280][T12626] ksys_read+0xe8/0x1b0 [ 220.888352][T12626] __x64_sys_read+0x42/0x50 [ 220.888386][T12626] x64_sys_call+0x2874/0x2dc0 [ 220.888450][T12626] do_syscall_64+0xc9/0x1c0 [ 220.888541][T12626] ? clear_bhb_loop+0x55/0xb0 [ 220.888575][T12626] ? clear_bhb_loop+0x55/0xb0 [ 220.888643][T12626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.888692][T12626] RIP: 0033:0x7f4ac2c0bb7c [ 220.888711][T12626] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 220.888812][T12626] RSP: 002b:00007f4ac1277030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.888835][T12626] RAX: ffffffffffffffda RBX: 00007f4ac2e25fa0 RCX: 00007f4ac2c0bb7c [ 220.888851][T12626] RDX: 000000000000000f RSI: 00007f4ac12770a0 RDI: 0000000000000004 [ 220.888866][T12626] RBP: 00007f4ac1277090 R08: 0000000000000000 R09: 0000000000000000 [ 220.888881][T12626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.888897][T12626] R13: 0000000000000000 R14: 00007f4ac2e25fa0 R15: 00007ffedc773868 [ 220.888918][T12626] [ 220.913089][T12619] loop3: p1 < > p4 < > [ 220.927293][T12623] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.107228][T12623] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.122342][T12628] loop7: detected capacity change from 0 to 512 [ 221.140345][T12628] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 221.146896][T12628] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 221.154619][T12628] vhci_hcd vhci_hcd.0: Device attached [ 221.161482][T11967] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.162156][T12633] vhci_hcd: connection closed [ 221.170849][ T8284] vhci_hcd: stop threads [ 221.180090][ T8284] vhci_hcd: release socket [ 221.184736][ T8284] vhci_hcd: disconnect device [ 221.317298][T12651] loop6: detected capacity change from 0 to 4096 [ 221.324040][T12651] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 221.332744][T12656] loop8: detected capacity change from 0 to 2048 [ 221.339504][T12656] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.366871][T12656] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.769010][T12672] blktrace: Concurrent blktraces are not allowed on sg0 [ 221.939453][T12678] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12678 comm=syz.3.3159 [ 221.952318][T12678] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12678 comm=syz.3.3159 [ 222.183098][T12682] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12682 comm=syz.6.3161 [ 222.195777][T12682] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12682 comm=syz.6.3161 [ 222.244774][ T30] kauditd_printk_skb: 937 callbacks suppressed [ 222.244793][ T30] audit: type=1326 audit(1741805315.668:15759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.3.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2595d169 code=0x7ffc0000 [ 222.274690][ T30] audit: type=1326 audit(1741805315.668:15760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.3.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2595d169 code=0x7ffc0000 [ 222.298461][ T30] audit: type=1326 audit(1741805315.668:15761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.3.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a2595d169 code=0x7ffc0000 [ 222.322165][ T30] audit: type=1326 audit(1741805315.668:15762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.3.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2595d169 code=0x7ffc0000 [ 222.329556][T12685] __nla_validate_parse: 9 callbacks suppressed [ 222.329573][T12685] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3162'. [ 222.345798][ T30] audit: type=1326 audit(1741805315.668:15763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.3.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a2595d169 code=0x7ffc0000 [ 222.345842][ T30] audit: type=1326 audit(1741805315.668:15764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.3.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2595d169 code=0x7ffc0000 [ 222.345877][ T30] audit: type=1326 audit(1741805315.668:15765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.3.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a2595d169 code=0x7ffc0000 [ 222.359239][T12685] loop7: detected capacity change from 0 to 256 [ 222.360977][ T30] audit: type=1326 audit(1741805315.668:15766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.3.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2595d169 code=0x7ffc0000 [ 222.390161][T12685] vfat: Bad value for 'errors' [ 222.408121][ T30] audit: type=1326 audit(1741805315.668:15767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.3.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a2595d169 code=0x7ffc0000 [ 222.408186][ T30] audit: type=1326 audit(1741805315.668:15768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.3.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2595d169 code=0x7ffc0000 [ 222.432136][T12686] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3161'. [ 222.445929][T11967] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.466990][T12682] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3161'. [ 222.560716][T12685] loop7: detected capacity change from 0 to 2048 [ 222.579719][T12688] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12688 comm=syz.0.3164 [ 222.592447][T12688] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12688 comm=syz.0.3164 [ 222.615602][T12685] loop7: p3 p4 < > [ 222.630625][T12692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.640502][T12692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.650219][T12692] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3165'. [ 222.797554][T12709] 9pnet_fd: Insufficient options for proto=fd [ 222.827162][T12719] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12719 comm=syz.3.3175 [ 222.839946][T12719] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12719 comm=syz.3.3175 [ 222.928131][T12726] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3176'. [ 222.938053][T12722] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3176'. [ 222.976249][T12732] loop8: detected capacity change from 0 to 1024 [ 222.983125][T12732] EXT4-fs: Ignoring removed bh option [ 222.991669][T12732] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 223.003266][T12732] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 223.011604][T12732] EXT4-fs (loop8): orphan cleanup on readonly fs [ 223.018744][T12732] EXT4-fs error (device loop8): ext4_ext_check_inode:524: inode #3: comm syz.8.3179: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 223.037332][T12732] EXT4-fs error (device loop8): ext4_quota_enable:7104: comm syz.8.3179: Bad quota inode: 3, type: 0 [ 223.050332][T12732] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 223.065098][T12732] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 223.073698][T12732] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 223.101105][T11967] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.126668][T12738] FAULT_INJECTION: forcing a failure. [ 223.126668][T12738] name failslab, interval 1, probability 0, space 0, times 0 [ 223.139455][T12738] CPU: 0 UID: 0 PID: 12738 Comm: syz.8.3182 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 223.139579][T12738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 223.139595][T12738] Call Trace: [ 223.139603][T12738] [ 223.139611][T12738] dump_stack_lvl+0xf2/0x150 [ 223.139653][T12738] dump_stack+0x15/0x1a [ 223.139679][T12738] should_fail_ex+0x24a/0x260 [ 223.139716][T12738] ? ftrace_profile_set_filter+0xbb/0x180 [ 223.139781][T12738] should_failslab+0x8f/0xb0 [ 223.139815][T12738] __kmalloc_cache_noprof+0x4e/0x320 [ 223.139848][T12738] ftrace_profile_set_filter+0xbb/0x180 [ 223.139875][T12738] perf_ioctl+0xe8e/0x1510 [ 223.139927][T12738] ? get_pid_task+0x8e/0xc0 [ 223.139961][T12738] ? ioctl_has_perm+0x2bf/0x2e0 [ 223.140002][T12738] ? do_vfs_ioctl+0x98b/0x1590 [ 223.140036][T12738] ? selinux_file_ioctl+0x2f7/0x380 [ 223.140096][T12738] ? __fget_files+0x17c/0x1c0 [ 223.140154][T12738] ? __pfx_perf_ioctl+0x10/0x10 [ 223.140194][T12738] __se_sys_ioctl+0xc9/0x140 [ 223.140226][T12738] __x64_sys_ioctl+0x43/0x50 [ 223.140310][T12738] x64_sys_call+0x1690/0x2dc0 [ 223.140342][T12738] do_syscall_64+0xc9/0x1c0 [ 223.140381][T12738] ? clear_bhb_loop+0x55/0xb0 [ 223.140410][T12738] ? clear_bhb_loop+0x55/0xb0 [ 223.140534][T12738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.140568][T12738] RIP: 0033:0x7f0b0af9d169 [ 223.140588][T12738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.140610][T12738] RSP: 002b:00007f0b09601038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.140666][T12738] RAX: ffffffffffffffda RBX: 00007f0b0b1b5fa0 RCX: 00007f0b0af9d169 [ 223.140682][T12738] RDX: 0000400000000000 RSI: 0000000040082406 RDI: 0000000000000003 [ 223.140696][T12738] RBP: 00007f0b09601090 R08: 0000000000000000 R09: 0000000000000000 [ 223.140709][T12738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.140721][T12738] R13: 0000000000000000 R14: 00007f0b0b1b5fa0 R15: 00007ffd2e1b33f8 [ 223.140745][T12738] [ 223.731205][T12773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.743088][T12773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.765187][T12774] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3191'. [ 223.783677][T12773] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3193'. [ 223.785267][T12767] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3191'. [ 223.925124][T12791] netlink: 332 bytes leftover after parsing attributes in process `syz.7.3203'. [ 224.115088][T12812] loop8: detected capacity change from 0 to 2048 [ 224.146722][T12812] loop8: p1 < > p4 < > [ 224.300671][T12830] loop8: detected capacity change from 0 to 4096 [ 224.307762][T12830] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 224.556354][T12857] loop3: detected capacity change from 0 to 4096 [ 224.563364][T12857] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 224.611995][T12863] loop7: detected capacity change from 0 to 2048 [ 224.620481][T12863] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.676789][T12863] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.880832][T12883] lo speed is unknown, defaulting to 1000 [ 225.479671][T12900] loop6: detected capacity change from 0 to 4096 [ 225.546356][T12900] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 225.556125][ T9860] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.582724][T12903] loop3: detected capacity change from 0 to 2048 [ 225.633391][T12903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.688507][T12903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.740606][T12922] loop0: detected capacity change from 0 to 2048 [ 225.760558][T12925] loop8: detected capacity change from 0 to 2048 [ 225.826163][T12927] blktrace: Concurrent blktraces are not allowed on sg0 [ 225.875583][T12925] loop8: p1 < > p4 < > [ 225.977282][T12922] loop0: p1 < > p4 < > [ 226.572640][T12945] loop0: detected capacity change from 0 to 2048 [ 226.617116][T12949] lo speed is unknown, defaulting to 1000 [ 226.886578][T11749] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.937831][T12945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.976559][T11547] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.039054][T12967] loop0: detected capacity change from 0 to 4096 [ 227.047341][T12967] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 227.131742][T12974] loop3: detected capacity change from 0 to 4096 [ 227.141422][T12974] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 227.265423][ T30] kauditd_printk_skb: 879 callbacks suppressed [ 227.265463][ T30] audit: type=1400 audit(1741805320.718:16630): avc: denied { ioctl } for pid=12989 comm="syz.3.3279" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.297492][T12991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.313557][T12991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.332558][T12997] FAULT_INJECTION: forcing a failure. [ 227.332558][T12997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.344617][ T30] audit: type=1400 audit(1741805320.778:16631): avc: denied { write } for pid=12996 comm="syz.7.3282" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 227.345793][T12997] CPU: 0 UID: 0 PID: 12997 Comm: syz.7.3282 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 227.345825][T12997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 227.345904][T12997] Call Trace: [ 227.345911][T12997] [ 227.345920][T12997] dump_stack_lvl+0xf2/0x150 [ 227.345956][T12997] dump_stack+0x15/0x1a [ 227.345995][T12997] should_fail_ex+0x24a/0x260 [ 227.346035][T12997] should_fail+0xb/0x10 [ 227.346127][T12997] should_fail_usercopy+0x1a/0x20 [ 227.346167][T12997] _copy_to_user+0x20/0xa0 [ 227.346303][T12997] simple_read_from_buffer+0xa0/0x110 [ 227.346341][T12997] proc_fail_nth_read+0xf9/0x140 [ 227.346386][T12997] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 227.346488][T12997] vfs_read+0x19b/0x6f0 [ 227.346601][T12997] ? __rcu_read_unlock+0x4e/0x70 [ 227.346630][T12997] ? __fget_files+0x17c/0x1c0 [ 227.346675][T12997] ksys_read+0xe8/0x1b0 [ 227.346709][T12997] __x64_sys_read+0x42/0x50 [ 227.346821][T12997] x64_sys_call+0x2874/0x2dc0 [ 227.346855][T12997] do_syscall_64+0xc9/0x1c0 [ 227.346895][T12997] ? clear_bhb_loop+0x55/0xb0 [ 227.346957][T12997] ? clear_bhb_loop+0x55/0xb0 [ 227.346992][T12997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.347085][T12997] RIP: 0033:0x7f4ac2c0bb7c [ 227.347104][T12997] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 227.347128][T12997] RSP: 002b:00007f4ac1277030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 227.347153][T12997] RAX: ffffffffffffffda RBX: 00007f4ac2e25fa0 RCX: 00007f4ac2c0bb7c [ 227.347240][T12997] RDX: 000000000000000f RSI: 00007f4ac12770a0 RDI: 0000000000000006 [ 227.347255][T12997] RBP: 00007f4ac1277090 R08: 0000000000000000 R09: 0000000000000000 [ 227.347270][T12997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.347293][T12997] R13: 0000000000000000 R14: 00007f4ac2e25fa0 R15: 00007ffedc773868 [ 227.347315][T12997] [ 227.411446][T13000] __nla_validate_parse: 3 callbacks suppressed [ 227.411466][T13000] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3276'. [ 227.492207][ T30] audit: type=1400 audit(1741805320.938:16632): avc: denied { create } for pid=12998 comm="syz.0.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.553991][T12991] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3279'. [ 227.608516][ T30] audit: type=1400 audit(1741805321.028:16633): avc: denied { bind } for pid=12998 comm="syz.0.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.628102][ T30] audit: type=1400 audit(1741805321.028:16634): avc: denied { write } for pid=12998 comm="syz.0.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.668587][T13011] SELinux: failed to load policy [ 227.670892][ T30] audit: type=1400 audit(1741805321.118:16635): avc: denied { load_policy } for pid=13009 comm="syz.0.3285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 227.713499][T13016] loop7: detected capacity change from 0 to 1024 [ 227.714373][ T30] audit: type=1400 audit(1741805321.118:16636): avc: denied { name_bind } for pid=13009 comm="syz.0.3285" src=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 227.722245][T13016] EXT4-fs (loop7): inodes count not valid: 0 vs 32 [ 227.787647][T13024] netlink: 332 bytes leftover after parsing attributes in process `syz.7.3291'. [ 227.854968][T13031] loop0: detected capacity change from 0 to 4096 [ 227.861605][T13031] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 227.890913][ T30] audit: type=1326 audit(1741805321.338:16637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13036 comm="syz.0.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 227.915127][ T30] audit: type=1326 audit(1741805321.338:16638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13036 comm="syz.0.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 227.938988][ T30] audit: type=1326 audit(1741805321.338:16639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13036 comm="syz.0.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 227.939132][T13038] loop6: detected capacity change from 0 to 4096 [ 227.969667][T13038] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 228.037475][T13048] loop0: detected capacity change from 0 to 4096 [ 228.044154][T13048] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 228.076957][T13051] team0 (unregistering): Port device team_slave_0 removed [ 228.098388][T13051] team0 (unregistering): Port device team_slave_1 removed [ 228.111618][T13054] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0îƒ&IØü0‚Ñ(|9QûÂMÍ-tãtÈÎÇV¹Kr-j"ž‰ž:²a) [ 228.181121][T13058] loop0: detected capacity change from 0 to 8192 [ 228.258928][T13063] loop7: detected capacity change from 0 to 4096 [ 228.282527][T13063] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 228.383104][T13076] netlink: 332 bytes leftover after parsing attributes in process `syz.7.3313'. [ 228.425252][T13081] lo speed is unknown, defaulting to 1000 [ 228.431191][T13081] lo speed is unknown, defaulting to 1000 [ 228.439997][T13081] lo speed is unknown, defaulting to 1000 [ 228.446878][T13081] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 228.459690][T13081] lo speed is unknown, defaulting to 1000 [ 228.465890][T13081] lo speed is unknown, defaulting to 1000 [ 228.473652][T13081] lo speed is unknown, defaulting to 1000 [ 228.482147][T13081] lo speed is unknown, defaulting to 1000 [ 228.488308][T13081] lo speed is unknown, defaulting to 1000 [ 228.494970][T13081] lo speed is unknown, defaulting to 1000 [ 228.504282][T13089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.512852][T13089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.529795][T13089] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3317'. [ 228.566201][T13093] loop7: detected capacity change from 0 to 4096 [ 228.573110][T13093] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 228.625657][T13101] loop7: detected capacity change from 0 to 4096 [ 228.632338][T13101] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 228.919009][T13120] FAULT_INJECTION: forcing a failure. [ 228.919009][T13120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.932175][T13120] CPU: 0 UID: 0 PID: 13120 Comm: syz.7.3330 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 228.932205][T13120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 228.932255][T13120] Call Trace: [ 228.932264][T13120] [ 228.932270][T13120] dump_stack_lvl+0xf2/0x150 [ 228.932295][T13120] dump_stack+0x15/0x1a [ 228.932313][T13120] should_fail_ex+0x24a/0x260 [ 228.932338][T13120] should_fail+0xb/0x10 [ 228.932441][T13120] should_fail_usercopy+0x1a/0x20 [ 228.932497][T13120] _copy_to_user+0x20/0xa0 [ 228.932513][T13120] simple_read_from_buffer+0xa0/0x110 [ 228.932598][T13120] proc_fail_nth_read+0xf9/0x140 [ 228.932624][T13120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.932690][T13120] vfs_read+0x19b/0x6f0 [ 228.932710][T13120] ? bpf_trace_run2+0x123/0x1d0 [ 228.932730][T13120] ? __rcu_read_unlock+0x4e/0x70 [ 228.932749][T13120] ? __fget_files+0x17c/0x1c0 [ 228.932778][T13120] ksys_read+0xe8/0x1b0 [ 228.932808][T13120] __x64_sys_read+0x42/0x50 [ 228.932841][T13120] x64_sys_call+0x2874/0x2dc0 [ 228.932863][T13120] do_syscall_64+0xc9/0x1c0 [ 228.932890][T13120] ? clear_bhb_loop+0x55/0xb0 [ 228.932935][T13120] ? clear_bhb_loop+0x55/0xb0 [ 228.932957][T13120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.933048][T13120] RIP: 0033:0x7f4ac2c0bb7c [ 228.933060][T13120] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 228.933075][T13120] RSP: 002b:00007f4ac1277030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 228.933092][T13120] RAX: ffffffffffffffda RBX: 00007f4ac2e25fa0 RCX: 00007f4ac2c0bb7c [ 228.933103][T13120] RDX: 000000000000000f RSI: 00007f4ac12770a0 RDI: 0000000000000006 [ 228.933113][T13120] RBP: 00007f4ac1277090 R08: 0000000000000000 R09: 0000000000000000 [ 228.933123][T13120] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000001 [ 228.933133][T13120] R13: 0000000000000000 R14: 00007f4ac2e25fa0 R15: 00007ffedc773868 [ 228.933189][T13120] [ 229.182228][T13130] selinux_netlink_send: 4 callbacks suppressed [ 229.182249][T13130] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13130 comm=syz.7.3335 [ 229.201082][T13130] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13130 comm=syz.7.3335 [ 229.212770][T13132] loop0: detected capacity change from 0 to 4096 [ 229.220869][T13126] loop3: detected capacity change from 0 to 128 [ 229.227891][T13126] EXT4-fs: Ignoring removed nobh option [ 229.231195][T13132] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 229.249067][T13126] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.262278][T13126] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 229.273502][T13126] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.283903][T13135] loop0: detected capacity change from 0 to 2048 [ 229.284447][T13136] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3335'. [ 229.290947][T13135] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.300566][T13130] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3335'. [ 229.336318][T13135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.447880][T13148] loop3: detected capacity change from 0 to 512 [ 229.462731][T13148] EXT4-fs: Ignoring removed nobh option [ 229.499010][T13148] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #16: comm syz.3.3341: corrupted inode contents [ 229.518490][T13148] EXT4-fs (loop3): Remounting filesystem read-only [ 229.526595][T13148] EXT4-fs (loop3): 1 truncate cleaned up [ 229.532906][T13148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.545725][ T8280] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 229.556374][ T8280] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 229.567928][T13148] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 229.568221][ T8280] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 229.588068][T13148] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.669359][T13163] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.3347' sets config #0 [ 229.702120][T13165] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3344'. [ 229.716820][T13163] loop6: detected capacity change from 0 to 2048 [ 229.739143][T13163] EXT4-fs: Ignoring removed bh option [ 229.768791][T13163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.836431][T13169] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13169 comm=syz.3.3348 [ 229.849123][T13169] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13169 comm=syz.3.3348 [ 230.023385][T13169] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3348'. [ 230.040424][T13171] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3348'. [ 230.054655][T12872] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 230.193301][ T1300] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 230.208466][ T1300] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 230.220771][ T1300] EXT4-fs (loop6): This should not happen!! Data will be lost [ 230.220771][ T1300] [ 230.230550][ T1300] EXT4-fs (loop6): Total free blocks count 0 [ 230.236615][ T1300] EXT4-fs (loop6): Free/Dirty block details [ 230.242521][ T1300] EXT4-fs (loop6): free_blocks=2415919104 [ 230.248271][ T1300] EXT4-fs (loop6): dirty_blocks=8224 [ 230.253594][ T1300] EXT4-fs (loop6): Block reservation details [ 230.259717][ T1300] EXT4-fs (loop6): i_reserved_data_blocks=514 [ 230.267655][T11547] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.271628][ T8280] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 230.371146][T13181] team0 (unregistering): Port device team_slave_0 removed [ 230.409760][T13181] team0 (unregistering): Port device team_slave_1 removed [ 230.434477][T13184] team0 (unregistering): Port device team_slave_0 removed [ 230.456534][T13184] team0 (unregistering): Port device team_slave_1 removed [ 230.526117][T13190] geneve0: entered allmulticast mode [ 230.557620][T13193] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13193 comm=syz.3.3360 [ 230.570306][T13193] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13193 comm=syz.3.3360 [ 230.859170][T13221] loop0: detected capacity change from 0 to 2048 [ 230.916306][T13221] loop0: p1 < > p4 < > [ 231.107193][T13241] loop0: detected capacity change from 0 to 512 [ 231.179525][T13241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.220333][T13241] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.229426][T13253] loop7: detected capacity change from 0 to 512 [ 231.291771][T13253] EXT4-fs: Ignoring removed nobh option [ 231.308746][T11547] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.338846][T13253] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #16: comm syz.7.3384: corrupted inode contents [ 231.368358][T13255] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13255 comm=syz.3.3385 [ 231.381077][T13255] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13255 comm=syz.3.3385 [ 231.429383][T13253] EXT4-fs (loop7): Remounting filesystem read-only [ 231.449952][T13253] EXT4-fs (loop7): 1 truncate cleaned up [ 231.466826][T13253] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.481443][ T12] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 231.492015][ T12] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 231.526021][T13253] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 231.536183][ T12] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 231.555092][T13253] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.657702][T13273] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13273 comm=syz.6.3392 [ 231.663513][T13276] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13276 comm=syz.8.3393 [ 231.771904][T13286] loop8: detected capacity change from 0 to 512 [ 231.778729][T13286] EXT4-fs: Ignoring removed nobh option [ 231.810859][T13286] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #16: comm syz.8.3397: corrupted inode contents [ 231.823354][T13286] EXT4-fs (loop8): Remounting filesystem read-only [ 231.830711][T13286] EXT4-fs (loop8): 1 truncate cleaned up [ 231.837369][T13286] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.849921][T13286] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 231.857901][ T12] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 231.858593][T13286] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.868481][ T12] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 231.888036][ T12] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 232.274652][ T30] kauditd_printk_skb: 1520 callbacks suppressed [ 232.274739][ T30] audit: type=1326 audit(1741805325.718:18142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13281 comm="syz.7.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4ac2c04127 code=0x7ffc0000 [ 232.325830][ T30] audit: type=1326 audit(1741805325.758:18143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13281 comm="syz.7.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4ac2ba9359 code=0x7ffc0000 [ 232.349405][ T30] audit: type=1326 audit(1741805325.758:18144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13281 comm="syz.7.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4ac2c04127 code=0x7ffc0000 [ 232.372967][ T30] audit: type=1326 audit(1741805325.758:18145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13281 comm="syz.7.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4ac2ba9359 code=0x7ffc0000 [ 232.396638][ T30] audit: type=1326 audit(1741805325.758:18146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13281 comm="syz.7.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4ac2c0d169 code=0x7ffc0000 [ 232.420186][ T30] audit: type=1326 audit(1741805325.758:18147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13304 comm="syz.8.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0b0af94127 code=0x7ffc0000 [ 232.443797][ T30] audit: type=1326 audit(1741805325.758:18148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13304 comm="syz.8.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b0af39359 code=0x7ffc0000 [ 232.467340][ T30] audit: type=1326 audit(1741805325.758:18149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13304 comm="syz.8.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f0b0af9d169 code=0x7ffc0000 [ 232.490918][ T30] audit: type=1326 audit(1741805325.768:18150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13304 comm="syz.8.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0b0af94127 code=0x7ffc0000 [ 232.514560][ T30] audit: type=1326 audit(1741805325.768:18151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13304 comm="syz.8.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b0af39359 code=0x7ffc0000 [ 232.660193][T13314] loop7: detected capacity change from 0 to 2048 [ 232.716411][T13314] loop7: p1 < > p4 < > [ 232.721199][T13320] __nla_validate_parse: 12 callbacks suppressed [ 232.721281][T13320] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3407'. [ 232.745399][T13316] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3407'. [ 232.829438][T13330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.852239][T13330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.862106][T13330] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3415'. [ 232.956058][T13347] loop3: detected capacity change from 0 to 128 [ 232.984948][T13347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3422'. [ 232.994284][T13347] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3422'. [ 233.003583][T13347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3422'. [ 233.013116][T13347] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3422'. [ 233.022245][T13347] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3422'. [ 233.060607][T13347] syz.3.3422: attempt to access beyond end of device [ 233.060607][T13347] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 233.080883][T13347] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.089759][T13347] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.099009][T13347] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.107810][T13347] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.125532][T13347] syz.3.3422: attempt to access beyond end of device [ 233.125532][T13347] loop3: rw=0, sector=177, nr_sectors = 1 limit=128 [ 233.142312][T13362] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3425'. [ 233.151982][ T12] kworker/u8:0: attempt to access beyond end of device [ 233.151982][ T12] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 233.153828][T13357] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3425'. [ 233.187214][T13364] loop3: detected capacity change from 0 to 512 [ 233.209834][T13364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.223212][T13364] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.292279][T13374] loop8: detected capacity change from 0 to 4096 [ 233.301761][T11749] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.317475][T13374] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 233.407293][T13390] FAULT_INJECTION: forcing a failure. [ 233.407293][T13390] name failslab, interval 1, probability 0, space 0, times 0 [ 233.419988][T13390] CPU: 1 UID: 0 PID: 13390 Comm: syz.6.3439 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 233.420018][T13390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.420033][T13390] Call Trace: [ 233.420040][T13390] [ 233.420049][T13390] dump_stack_lvl+0xf2/0x150 [ 233.420079][T13390] dump_stack+0x15/0x1a [ 233.420166][T13390] should_fail_ex+0x24a/0x260 [ 233.420203][T13390] should_failslab+0x8f/0xb0 [ 233.420238][T13390] __kmalloc_noprof+0xab/0x3f0 [ 233.420297][T13390] ? alloc_trace_uprobe+0x37/0x1f0 [ 233.420325][T13390] alloc_trace_uprobe+0x37/0x1f0 [ 233.420353][T13390] create_local_trace_uprobe+0xb7/0x2d0 [ 233.420392][T13390] perf_uprobe_init+0xc2/0x140 [ 233.420431][T13390] perf_uprobe_event_init+0xe2/0x140 [ 233.420512][T13390] perf_try_init_event+0xcb/0x4f0 [ 233.420554][T13390] ? perf_event_alloc+0xac6/0x12d0 [ 233.420594][T13390] perf_event_alloc+0xad1/0x12d0 [ 233.420646][T13390] __se_sys_perf_event_open+0x7f2/0x2230 [ 233.420674][T13390] ? vfs_write+0x644/0x920 [ 233.420785][T13390] ? putname+0xcf/0xf0 [ 233.420821][T13390] __x64_sys_perf_event_open+0x67/0x80 [ 233.420847][T13390] x64_sys_call+0x1deb/0x2dc0 [ 233.420881][T13390] do_syscall_64+0xc9/0x1c0 [ 233.420979][T13390] ? clear_bhb_loop+0x55/0xb0 [ 233.421029][T13390] ? clear_bhb_loop+0x55/0xb0 [ 233.421061][T13390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.421090][T13390] RIP: 0033:0x7f8c4b83d169 [ 233.421107][T13390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.421166][T13390] RSP: 002b:00007f8c49ea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 233.421188][T13390] RAX: ffffffffffffffda RBX: 00007f8c4ba55fa0 RCX: 00007f8c4b83d169 [ 233.421203][T13390] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000400000000000 [ 233.421217][T13390] RBP: 00007f8c49ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 233.421230][T13390] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 233.421244][T13390] R13: 0000000000000000 R14: 00007f8c4ba55fa0 R15: 00007fffdaafccc8 [ 233.421265][T13390] [ 233.421275][T13390] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 233.470469][T13392] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0îƒ&IØü0‚Ñ(|9QûÂMÍ-tãtÈÎÇV¹Kr-j"ž‰ž:²a) [ 233.587185][T13401] xt_hashlimit: max too large, truncated to 1048576 [ 233.676789][T13401] x_tables: duplicate underflow at hook 1 [ 233.713662][T13402] loop8: detected capacity change from 0 to 8192 [ 233.796015][T13412] loop0: detected capacity change from 0 to 2048 [ 233.857739][T13412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.908618][T13412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.937254][T11547] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.973172][T13392] team0 (unregistering): Port device team_slave_0 removed [ 233.995245][T13392] team0 (unregistering): Port device team_slave_1 removed [ 234.226298][T13428] lo speed is unknown, defaulting to 1000 [ 234.232805][T13428] lo speed is unknown, defaulting to 1000 [ 234.751829][T13449] selinux_netlink_send: 8 callbacks suppressed [ 234.751913][T13449] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13449 comm=syz.0.3459 [ 234.770784][T13449] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13449 comm=syz.0.3459 [ 235.208518][T13451] loop3: detected capacity change from 0 to 2048 [ 235.215377][T13451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.238965][T13451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.773464][T11749] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.976825][T13468] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0îƒ&IØü0‚Ñ(|9QûÂMÍ-tãtÈÎÇV¹Kr-j"ž‰ž:²a) [ 236.012849][T13473] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13473 comm=syz.7.3468 [ 236.025661][T13473] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13473 comm=syz.7.3468 [ 236.112483][T13478] lo speed is unknown, defaulting to 1000 [ 236.118960][T13478] lo speed is unknown, defaulting to 1000 [ 236.386918][T13476] loop8: detected capacity change from 0 to 8192 [ 236.468903][T13475] loop6: detected capacity change from 0 to 4096 [ 236.497764][T13475] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 236.653732][T13498] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13498 comm=syz.8.3476 [ 236.666722][T13498] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13498 comm=syz.8.3476 [ 236.790578][T13509] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13509 comm=syz.3.3481 [ 236.803241][T13509] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13509 comm=syz.3.3481 [ 236.818160][T13511] xt_hashlimit: max too large, truncated to 1048576 [ 236.834495][T13512] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0îƒ&IØü0‚Ñ(|9QûÂMÍ-tãtÈÎÇV¹Kr-j"ž‰ž:²a) [ 236.938274][T13516] loop8: detected capacity change from 0 to 8192 [ 237.006009][T13533] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13533 comm=syz.3.3491 [ 237.018898][T13533] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13533 comm=syz.3.3491 [ 237.432616][ T30] kauditd_printk_skb: 1037 callbacks suppressed [ 237.432634][ T30] audit: type=1400 audit(1741805330.878:19186): avc: denied { create } for pid=13575 comm="syz.3.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.460839][ T30] audit: type=1400 audit(1741805330.898:19187): avc: denied { bind } for pid=13575 comm="syz.3.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.480902][ T30] audit: type=1400 audit(1741805330.898:19188): avc: denied { connect } for pid=13575 comm="syz.3.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.501442][ T30] audit: type=1400 audit(1741805330.918:19189): avc: denied { create } for pid=13581 comm="syz.0.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 237.525996][T13585] loop3: detected capacity change from 0 to 512 [ 237.532916][T13585] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 237.557408][T13585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.570804][T13585] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.581386][ T30] audit: type=1400 audit(1741805331.018:19190): avc: denied { mount } for pid=13575 comm="syz.3.3506" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 237.612514][ T30] audit: type=1400 audit(1741805331.058:19191): avc: denied { write } for pid=13575 comm="syz.3.3506" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.634571][ T30] audit: type=1400 audit(1741805331.058:19192): avc: denied { add_name } for pid=13575 comm="syz.3.3506" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.656277][ T30] audit: type=1400 audit(1741805331.058:19193): avc: denied { create } for pid=13575 comm="syz.3.3506" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 237.682880][ T30] audit: type=1400 audit(1741805331.128:19194): avc: denied { read append open } for pid=13575 comm="syz.3.3506" path="/138/file0/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 237.694455][T13585] lo speed is unknown, defaulting to 1000 [ 237.714531][T13585] lo speed is unknown, defaulting to 1000 [ 237.754663][T13592] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0îƒ&IØü0‚Ñ(|9QûÂMÍ-tãtÈÎÇV¹Kr-j"ž‰ž:²a) [ 237.786768][ T30] audit: type=1400 audit(1741805331.238:19195): avc: denied { create } for pid=13575 comm="syz.3.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.814289][T13600] vlan2: entered allmulticast mode [ 237.854363][T13601] loop0: detected capacity change from 0 to 8192 [ 237.928036][T13614] loop6: detected capacity change from 0 to 512 [ 237.942772][T13614] EXT4-fs (loop6): bad geometry: first data block 0 is beyond end of filesystem (0) [ 238.019747][T13624] xt_hashlimit: max too large, truncated to 1048576 [ 238.045951][T13630] __nla_validate_parse: 18 callbacks suppressed [ 238.045970][T13630] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3523'. [ 238.062687][T13620] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3523'. [ 238.202776][T13648] loop6: detected capacity change from 0 to 4096 [ 238.209529][T13648] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 238.249273][T13651] xt_hashlimit: max too large, truncated to 1048576 [ 238.328044][T11749] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.601113][T13678] loop0: detected capacity change from 0 to 4096 [ 238.608551][T13678] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 238.676728][T13683] lo speed is unknown, defaulting to 1000 [ 238.683541][T13683] lo speed is unknown, defaulting to 1000 [ 238.853377][T13688] loop0: detected capacity change from 0 to 2048 [ 238.981730][T13690] loop3: detected capacity change from 0 to 2048 [ 239.037686][T13688] loop0: unable to read partition table [ 239.063979][T13688] loop0: partition table beyond EOD, truncated [ 239.070433][T13688] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 239.105362][T13690] loop3: p1 < > p4 < > [ 239.369547][T13705] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0îƒ&IØü0‚Ñ(|9QûÂMÍ-tãtÈÎÇV¹Kr-j"ž‰ž:²a) [ 239.470115][T13705] loop8: detected capacity change from 0 to 8192 [ 239.651904][T13719] FAULT_INJECTION: forcing a failure. [ 239.651904][T13719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.665309][T13719] CPU: 0 UID: 0 PID: 13719 Comm: syz.8.3561 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 239.665396][T13719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.665412][T13719] Call Trace: [ 239.665419][T13719] [ 239.665427][T13719] dump_stack_lvl+0xf2/0x150 [ 239.665460][T13719] dump_stack+0x15/0x1a [ 239.665481][T13719] should_fail_ex+0x24a/0x260 [ 239.665586][T13719] should_fail+0xb/0x10 [ 239.665613][T13719] should_fail_usercopy+0x1a/0x20 [ 239.665725][T13719] _copy_from_user+0x1c/0xa0 [ 239.665745][T13719] do_ipv6_setsockopt+0x1ef/0x2250 [ 239.665785][T13719] ? __rcu_read_unlock+0x4e/0x70 [ 239.665814][T13719] ? avc_has_perm_noaudit+0x1cc/0x210 [ 239.665841][T13719] ? selinux_netlbl_socket_setsockopt+0xe5/0x2d0 [ 239.665948][T13719] ipv6_setsockopt+0x57/0x130 [ 239.665983][T13719] rawv6_setsockopt+0x21e/0x410 [ 239.666017][T13719] sock_common_setsockopt+0x64/0x80 [ 239.666069][T13719] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 239.666103][T13719] __sys_setsockopt+0x187/0x200 [ 239.666210][T13719] __x64_sys_setsockopt+0x66/0x80 [ 239.666248][T13719] x64_sys_call+0x282e/0x2dc0 [ 239.666279][T13719] do_syscall_64+0xc9/0x1c0 [ 239.666312][T13719] ? clear_bhb_loop+0x55/0xb0 [ 239.666345][T13719] ? clear_bhb_loop+0x55/0xb0 [ 239.666405][T13719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.666438][T13719] RIP: 0033:0x7f0b0af9d169 [ 239.666453][T13719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.666474][T13719] RSP: 002b:00007f0b09601038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 239.666492][T13719] RAX: ffffffffffffffda RBX: 00007f0b0b1b5fa0 RCX: 00007f0b0af9d169 [ 239.666503][T13719] RDX: 0000000000000016 RSI: 0000000000000029 RDI: 0000000000000003 [ 239.666515][T13719] RBP: 00007f0b09601090 R08: 0000000000000004 R09: 0000000000000000 [ 239.666550][T13719] R10: 0000400000000140 R11: 0000000000000246 R12: 0000000000000001 [ 239.666564][T13719] R13: 0000000000000000 R14: 00007f0b0b1b5fa0 R15: 00007ffd2e1b33f8 [ 239.666587][T13719] [ 239.949266][T13735] loop8: detected capacity change from 0 to 512 [ 239.957483][T13735] EXT4-fs: Ignoring removed orlov option [ 239.964753][T13735] EXT4-fs error (device loop8): ext4_orphan_get:1389: inode #15: comm syz.8.3562: casefold flag without casefold feature [ 239.977697][T13735] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.3562: couldn't read orphan inode 15 (err -117) [ 239.991239][T13735] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.066691][T11967] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.313280][T13755] loop0: detected capacity change from 0 to 4096 [ 240.333147][T13756] blktrace: Concurrent blktraces are not allowed on sg0 [ 240.344339][T13755] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 241.074251][T13777] FAULT_INJECTION: forcing a failure. [ 241.074251][T13777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.087458][T13777] CPU: 0 UID: 0 PID: 13777 Comm: syz.8.3581 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 241.087558][T13777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 241.087574][T13777] Call Trace: [ 241.087581][T13777] [ 241.087589][T13777] dump_stack_lvl+0xf2/0x150 [ 241.087624][T13777] dump_stack+0x15/0x1a [ 241.087650][T13777] should_fail_ex+0x24a/0x260 [ 241.087721][T13777] should_fail+0xb/0x10 [ 241.087750][T13777] should_fail_usercopy+0x1a/0x20 [ 241.087818][T13777] _copy_from_user+0x1c/0xa0 [ 241.087841][T13777] __sys_bpf+0x14e/0x7a0 [ 241.087885][T13777] __x64_sys_bpf+0x43/0x50 [ 241.087917][T13777] x64_sys_call+0x2914/0x2dc0 [ 241.088028][T13777] do_syscall_64+0xc9/0x1c0 [ 241.088067][T13777] ? clear_bhb_loop+0x55/0xb0 [ 241.088114][T13777] ? clear_bhb_loop+0x55/0xb0 [ 241.088156][T13777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.088264][T13777] RIP: 0033:0x7f0b0af9d169 [ 241.088282][T13777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.088303][T13777] RSP: 002b:00007f0b09601038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 241.088322][T13777] RAX: ffffffffffffffda RBX: 00007f0b0b1b5fa0 RCX: 00007f0b0af9d169 [ 241.088334][T13777] RDX: 0000000000000040 RSI: 00004000000005c0 RDI: 000000000000001c [ 241.088346][T13777] RBP: 00007f0b09601090 R08: 0000000000000000 R09: 0000000000000000 [ 241.088357][T13777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.088392][T13777] R13: 0000000000000000 R14: 00007f0b0b1b5fa0 R15: 00007ffd2e1b33f8 [ 241.088414][T13777] [ 241.283136][T13785] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0îƒ&IØü0‚Ñ(|9QûÂMÍ-tãtÈÎÇV¹Kr-j"ž‰ž:²a) [ 241.298186][T13783] loop8: detected capacity change from 0 to 4096 [ 241.305043][T13783] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 241.372407][T13787] loop7: detected capacity change from 0 to 8192 [ 241.521495][T13807] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3593'. [ 241.653515][T13818] selinux_netlink_send: 10 callbacks suppressed [ 241.653535][T13818] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13818 comm=syz.0.3597 [ 241.672567][T13818] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13818 comm=syz.0.3597 [ 241.777387][T13821] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3597'. [ 241.787900][T13818] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3597'. [ 241.801664][T13822] blktrace: Concurrent blktraces are not allowed on sg0 [ 242.014269][T13826] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0îƒ&IØü0‚Ñ(|9QûÂMÍ-tãtÈÎÇV¹Kr-j"ž‰ž:²a) [ 242.218886][T13828] loop0: detected capacity change from 0 to 8192 [ 242.407553][T13832] loop3: detected capacity change from 0 to 2048 [ 242.418740][T13832] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.457634][T13832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.507972][T13844] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0îƒ&IØü0‚Ñ(|9QûÂMÍ-tãtÈÎÇV¹Kr-j"ž‰ž:²a) [ 242.544153][T13848] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3605'. [ 242.564862][ T30] kauditd_printk_skb: 486 callbacks suppressed [ 242.564880][ T30] audit: type=1400 audit(1741805336.018:19682): avc: denied { mac_admin } for pid=13831 comm="syz.3.3601" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 242.620299][ T30] audit: type=1400 audit(1741805336.048:19683): avc: denied { relabelto } for pid=13831 comm="syz.3.3601" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 242.646497][ T30] audit: type=1326 audit(1741805336.058:19684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 242.670196][ T30] audit: type=1326 audit(1741805336.058:19685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 242.693967][ T30] audit: type=1326 audit(1741805336.058:19686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 242.717602][ T30] audit: type=1326 audit(1741805336.058:19687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 242.741696][ T30] audit: type=1326 audit(1741805336.058:19688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 242.765422][ T30] audit: type=1326 audit(1741805336.058:19689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 242.789071][ T30] audit: type=1326 audit(1741805336.058:19690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 242.812696][ T30] audit: type=1326 audit(1741805336.058:19691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d237d169 code=0x7ffc0000 [ 242.855333][T13844] loop8: detected capacity change from 0 to 8192 [ 243.194770][T13880] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13880 comm=syz.8.3618 [ 243.207395][T13880] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13880 comm=syz.8.3618 [ 243.221602][T11749] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.262205][T13886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.272380][T13886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.283498][T13886] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3620'. [ 243.306124][T13890] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3618'. [ 243.317566][T13880] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3618'. [ 243.411746][T13898] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13898 comm=syz.6.3625 [ 243.424386][T13898] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13898 comm=syz.6.3625 [ 243.491981][T13905] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3625'. [ 243.502074][T13898] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3625'. [ 243.542607][T13909] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13909 comm=syz.0.3629 [ 243.555261][T13909] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13909 comm=syz.0.3629 [ 243.563912][T13911] loop6: detected capacity change from 0 to 4096 [ 243.578511][T13911] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 243.631942][T13916] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3629'. [ 243.642049][T13909] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3629'. [ 243.696503][T13919] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13919 comm=syz.0.3633 [ 243.709118][T13919] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13919 comm=syz.0.3633 [ 243.822667][T13923] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0îƒ&IØü0‚Ñ(|9QûÂMÍ-tãtÈÎÇV¹Kr-j"ž‰ž:²a) [ 243.833865][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3634'. [ 243.845253][T13924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.852749][T13924] batadv_slave_0: entered promiscuous mode [ 243.901040][T13923] loop3: detected capacity change from 0 to 8192 [ 244.162832][T13930] loop3: detected capacity change from 0 to 1764 [ 244.687848][T13943] loop7: detected capacity change from 0 to 4096 [ 244.695230][T13943] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 245.183819][T13956] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0îƒ&IØü0‚Ñ(|9QûÂMÍ-tãtÈÎÇV¹Kr-j"ž‰ž:²a) [ 245.221079][T13958] batadv_slave_1: entered promiscuous mode [ 245.229436][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3647'. [ 245.239028][T13958] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 245.251022][T13957] batadv_slave_1: left promiscuous mode [ 245.322699][T13959] loop6: detected capacity change from 0 to 8192 [ 245.324161][T13965] loop8: detected capacity change from 0 to 256 [ 245.362354][T13965] FAULT_INJECTION: forcing a failure. [ 245.362354][T13965] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 245.375687][T13965] CPU: 1 UID: 0 PID: 13965 Comm: syz.8.3650 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 245.375718][T13965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.375733][T13965] Call Trace: [ 245.375740][T13965] [ 245.375749][T13965] dump_stack_lvl+0xf2/0x150 [ 245.375782][T13965] dump_stack+0x15/0x1a [ 245.375807][T13965] should_fail_ex+0x24a/0x260 [ 245.375872][T13965] should_fail_alloc_page+0xfd/0x110 [ 245.375938][T13965] __alloc_frozen_pages_noprof+0x109/0x340 [ 245.376096][T13965] alloc_pages_mpol+0xb4/0x260 [ 245.376127][T13965] folio_alloc_noprof+0xee/0x140 [ 245.376231][T13965] filemap_alloc_folio_noprof+0x69/0x220 [ 245.376275][T13965] __filemap_get_folio+0x298/0x630 [ 245.376297][T13965] cont_write_begin+0x512/0x860 [ 245.376334][T13965] fat_write_begin+0x51/0xe0 [ 245.376381][T13965] ? __pfx_fat_get_block+0x10/0x10 [ 245.376545][T13965] generic_perform_write+0x1a8/0x4a0 [ 245.376583][T13965] __generic_file_write_iter+0xa1/0x120 [ 245.376663][T13965] generic_file_write_iter+0x8f/0x310 [ 245.376693][T13965] ? path_openat+0x1a78/0x1fc0 [ 245.376797][T13965] ? _parse_integer_limit+0x167/0x180 [ 245.376889][T13965] ? _parse_integer+0x27/0x30 [ 245.376919][T13965] ? kstrtoull+0x110/0x140 [ 245.376990][T13965] ? kstrtouint+0x77/0xc0 [ 245.377023][T13965] ? kstrtouint_from_user+0xb0/0xe0 [ 245.377190][T13965] ? avc_policy_seqno+0x15/0x20 [ 245.377211][T13965] ? selinux_file_permission+0x22a/0x360 [ 245.377304][T13965] vfs_write+0x77b/0x920 [ 245.377337][T13965] ? __pfx_generic_file_write_iter+0x10/0x10 [ 245.377390][T13965] ksys_write+0xe8/0x1b0 [ 245.377464][T13965] __x64_sys_write+0x42/0x50 [ 245.377497][T13965] x64_sys_call+0x287e/0x2dc0 [ 245.377672][T13965] do_syscall_64+0xc9/0x1c0 [ 245.377708][T13965] ? clear_bhb_loop+0x55/0xb0 [ 245.377742][T13965] ? clear_bhb_loop+0x55/0xb0 [ 245.377797][T13965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.377831][T13965] RIP: 0033:0x7f0b0af9d169 [ 245.377849][T13965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.377869][T13965] RSP: 002b:00007f0b09601038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.377958][T13965] RAX: ffffffffffffffda RBX: 00007f0b0b1b5fa0 RCX: 00007f0b0af9d169 [ 245.377973][T13965] RDX: 000000000000000b RSI: 0000400000000bc0 RDI: 0000000000000006 [ 245.377989][T13965] RBP: 00007f0b09601090 R08: 0000000000000000 R09: 0000000000000000 [ 245.378003][T13965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.378017][T13965] R13: 0000000000000000 R14: 00007f0b0b1b5fa0 R15: 00007ffd2e1b33f8 [ 245.378040][T13965] [ 245.760804][T13974] loop0: detected capacity change from 0 to 4096 [ 245.768099][T13974] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 245.932046][T13991] loop3: detected capacity change from 0 to 2048 [ 245.996439][T13991] loop3: p1 < > p4 < > [ 246.076233][T13996] ================================================================== [ 246.084378][T13996] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk [ 246.091896][T13996] [ 246.094235][T13996] write to 0xffff8881024f9c00 of 8 bytes by task 13993 on cpu 0: [ 246.101969][T13996] mas_wmb_replace+0xe89/0x14d0 [ 246.106850][T13996] mas_wr_store_entry+0x1530/0x23f0 [ 246.112087][T13996] mas_store_prealloc+0x6bf/0x960 [ 246.117145][T13996] vma_complete+0x3a7/0x760 [ 246.121681][T13996] __split_vma+0x5d6/0x6a0 [ 246.126121][T13996] vma_modify+0x105/0x200 [ 246.130475][T13996] vma_modify_flags+0xf1/0x120 [ 246.135261][T13996] mprotect_fixup+0x31a/0x5e0 [ 246.139965][T13996] do_mprotect_pkey+0x6cc/0x9a0 [ 246.144850][T13996] __x64_sys_mprotect+0x48/0x60 [ 246.149772][T13996] x64_sys_call+0x2770/0x2dc0 [ 246.154487][T13996] do_syscall_64+0xc9/0x1c0 [ 246.159291][T13996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.165232][T13996] [ 246.167575][T13996] read to 0xffff8881024f9c00 of 8 bytes by task 13996 on cpu 1: [ 246.175214][T13996] mtree_range_walk+0x33d/0x460 [ 246.180092][T13996] mas_walk+0x16e/0x320 [ 246.184275][T13996] lock_vma_under_rcu+0x95/0x270 [ 246.189236][T13996] exc_page_fault+0x150/0x650 [ 246.193934][T13996] asm_exc_page_fault+0x26/0x30 [ 246.198810][T13996] [ 246.201137][T13996] value changed: 0xffff8881044a3306 -> 0xffff8881024f9c00 [ 246.208264][T13996] [ 246.210624][T13996] Reported by Kernel Concurrency Sanitizer on: [ 246.216788][T13996] CPU: 1 UID: 0 PID: 13996 Comm: syz.3.3661 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 246.227656][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 246.237723][T13996] ================================================================== [ 246.269119][T13992] loop8: detected capacity change from 0 to 512 [ 246.298457][T13992] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.311301][T13992] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.325418][T13992] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #2: comm syz.8.3659: corrupted inode contents [ 246.338836][T13992] EXT4-fs error (device loop8): ext4_dirty_inode:6042: inode #2: comm syz.8.3659: mark_inode_dirty error [ 246.350447][T13992] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #2: comm syz.8.3659: corrupted inode contents [ 246.365630][T13992] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.3659: mark_inode_dirty error [ 246.773480][T11967] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.