last executing test programs: 4m22.08837132s ago: executing program 32 (id=1774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x6a0}) 4m19.966453464s ago: executing program 33 (id=1806): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) dup(0xffffffffffffffff) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xe000202b}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000040)={0x80000000}) 4m17.235686298s ago: executing program 34 (id=1827): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) statfs(&(0x7f0000000240)='./file0\x00', 0x0) unshare(0x42000000) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010003000000000000000000000000000000000000000020000000000000000000000000000000000000000010000000fffe0200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff01000000000000000000000000000000ffffffffffffffff00000000000000006effffffffffffff00000000000000000000000000000000fdffffff0000000001"], 0xb8}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x78, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) 4m17.080539661s ago: executing program 5 (id=1829): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ff8}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) open(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x1f, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000000)) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000e40), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000e80)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\\', 0x3a, '', 0x3a, './file0', 0x3a, [0x43, 0x2e]}, 0x2a) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m16.129374926s ago: executing program 5 (id=1836): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000100)=0x1, 0x4) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x13) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x220c402, &(0x7f0000000b40)=ANY=[], 0x1, 0x6a5, &(0x7f00000013c0)="$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") openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x88800) sendto$inet6(r0, 0x0, 0x2, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000000140)=0xfffefffc, 0x4) 4m16.057981707s ago: executing program 35 (id=1838): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, @void, @value, @void, @value}, 0x33) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 4m15.944211559s ago: executing program 5 (id=1840): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) unshare(0x22020600) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@gettaction={0x30, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x25dfd9ff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x30}}, 0x20000804) pivot_root(&(0x7f0000000200)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, 0x0, 0x0, 0x4040844) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x17, 0x2000000000000018, &(0x7f0000001200)=ANY=[@ANYBLOB="91c66567727299debdaac3dce79f8a2b578fb6f6f33c1169143f7366d0ff23238ea40e303167d9eccf55a3591cb9f37db203ef954bd9fc60bf727da566ae6ec491fbbe4b79e717f20f697b4205dd09", @ANYRESDEC=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r5}, 0x10) personality(0x40000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000000340)=""/224, 0xe0}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000680)=""/29, 0x1d}, {&(0x7f00000006c0)=""/234, 0xea}], 0x8, 0x4, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m15.639700264s ago: executing program 5 (id=1843): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100006, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095", @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000005000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000035ef362d4cfd524b400"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x81901) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000240)='./bus\x00', r9, &(0x7f00000001c0)='./file0\x00', 0x0) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m15.448502447s ago: executing program 5 (id=1845): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ff8}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) open(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x1f, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000000)) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000e40), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000e80)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\\', 0x3a, '', 0x3a, './file0', 0x3a, [0x43, 0x2e]}, 0x2a) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m15.080731413s ago: executing program 5 (id=1847): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc7152a74922abe14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000c96, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES16, @ANYRES8, @ANYRESOCT], 0x12, 0x9e8, &(0x7f0000000440)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 4m15.072448603s ago: executing program 36 (id=1847): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc7152a74922abe14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000c96, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES16, @ANYRES8, @ANYRESOCT], 0x12, 0x9e8, &(0x7f0000000440)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 3m51.041493702s ago: executing program 9 (id=2142): r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 3m50.936729184s ago: executing program 9 (id=2144): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) unshare(0x22020600) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@gettaction={0x30, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x25dfd9ff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x30}}, 0x20000804) pivot_root(&(0x7f0000000200)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}], 0x2, 0x4040844) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r4}, 0x10) personality(0x40000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) preadv(r1, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000000340)=""/224, 0xe0}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000680)=""/29, 0x1d}, {&(0x7f00000006c0)=""/234, 0xea}], 0x8, 0x4, 0x1ff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 3m50.594180339s ago: executing program 9 (id=2149): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02001900040000000800000001", @ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d3000007bfe03000100000008000b000200000006001600050000000500120000000000f6a0286f6223479df186"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='kfree\x00', r5}, 0x18) mlock(&(0x7f0000e1d000/0xe000)=nil, 0xe000) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c2000002000010300"/28, @ANYRESOCT, @ANYRESDEC=0x0], 0x1c}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x28, 0x2c, 0xff, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "9678e5ec96e49a918138e3d1346cd0fa"}]}}}}}}}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000002480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 3m50.363739673s ago: executing program 9 (id=2151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100006, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095", @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000005000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000035ef362d4cfd524b400"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x81901) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r8, &(0x7f0000000240)='./bus\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m50.315855264s ago: executing program 9 (id=2152): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) epoll_create1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000300)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) r3 = socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r2, 0x3, r3}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 3m50.048666848s ago: executing program 9 (id=2153): acct(&(0x7f0000000140)='./cgroup\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000000000", @ANYBLOB="0003000098120100200012800b000100697036746e6c000010000280040013000500090004000000080004"], 0x48}}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) 3m50.048439878s ago: executing program 37 (id=2153): acct(&(0x7f0000000140)='./cgroup\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000000000", @ANYBLOB="0003000098120100200012800b000100697036746e6c000010000280040013000500090004000000080004"], 0x48}}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) 3m48.912471947s ago: executing program 8 (id=2168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, @void, @value, @void, @value}, 0x33) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, 0x0}, 0x20) 3m48.882295787s ago: executing program 8 (id=2169): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f00000004c0)={'hsr0\x00', 0x40}) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 3m48.018226561s ago: executing program 8 (id=2176): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0xf9d, @rand_addr=' \x01\x00'}}}, 0x32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x5, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) 3m47.912324603s ago: executing program 8 (id=2179): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x81901) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m47.837186994s ago: executing program 8 (id=2180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000140)={0x3, 'syzkaller0\x00', 0x4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[], 0x548}}, 0x0) connect$netlink(r2, &(0x7f0000000080)=@unspec, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0xbf6b}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_usbip_server_init(0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a3000eb100c606a00cd080a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 3m47.292630643s ago: executing program 8 (id=2183): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 3m47.273892343s ago: executing program 38 (id=2183): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 3m47.256768773s ago: executing program 0 (id=2154): r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 3m46.340750028s ago: executing program 0 (id=2192): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) 3m46.284222379s ago: executing program 0 (id=2193): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d5) sendfile(r2, r2, 0x0, 0xfffe80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000000, &(0x7f0000000200)={[{@nobarrier}, {@dioread_nolock}]}, 0x1, 0x527, &(0x7f0000019580)="$eJzs3W1rZFcdAPD/vZPZZndTM1WRtWBbbGW36M5sGttGkXYF0RdSUOv7NSaTEDLJhMykbkLRLH4AQUSFfgDfCH4AQfoRRCjoe1FRRLf6UnvlztyxeZhJhjzN7uT3g5M55z6c/zmXzJ37cLg3gEvruYi4GxGliHgxIqaL6WmRYreb8uXef/j2Qp6SyLI3/5FEUkzr1ZWXJyLierHaZER862sR300Ox21t76zONxr1zaJca69t1FrbO7dX1uaX68v19dnZmVfmXp17ee5OVjhVPysR8dpX/vLTH/3iq6/95nPf++O9v936ft6sL32i2+6IWDhVgAG6dZc726In30ab5xFsRPL+lEujbgUAAMPIj/E/GhGf7hz/T0epczQHAAAAjJPs9an4TxKRAQAAAGMrjYipSNJqMRZgKtK0Wu2O4f14XEsbzVb7s0vNrfXFfF5EJcrp0kqjfqcYK1yJcpKXZ4oxtr3ySwfKsxHxVET8ZPpqp1xdaDYWR33xAwAAAC6J68/uP///93TayQMAAABjpjKwAAAAAIwLp/wAAAAw/pz/AwAAwFj7xhtv5Cnrvcd78a3trdXmW7cX663V6trWQnWhublRXW42lzvP7Fs7rr5Gs7nx+Vjful9r11vtWmt7595ac2u9fW9l3yuwAQAAgAv01LPv/iGJiN0vXu2kKJ4DCFwWX78y1GJ/PveGABeoNOoGACMzMeoGACNTPnYJewgYd8kx8w8P3uleK4zfnk97AACAs3fzk3vv/7/Tmda7GXj8tQHgcWasDwBcPu7uweVVjtKDE61448ybAozIR7ofTwyaP/DhHUPc/+9eY8iyEzUMAAA4M1OdlKTV4jh9KtK0Wo14svNagHKytNKo3ynOD34/XX4iL8901kyOHTMMAAAAAAAAAAAAAAAAAAAAAAAAAHRlWRJZX1G8Fbz/XAAAAODxEZH+NSnO9G9OvzC1/+rAgbd+vfPmz+7Pt9ubMxFXkn9O55OuRET758X0lzKvBAAAAIBHQPc8vficGXVrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg37z98e6GXLjLu378cEZV+8SdisvM5GeWIuPavJCb2rJdEROkM4u8+iIgb/eIn8UGWZZWiFf3iXz3n+JXOpukfP42I62cQHy6zd/P9z91+3780nut89v/+TRTptAbv/9L/7/9KA/Y/Tx4oD/L0e7+qDYz/IOLpif77n178pBt/X4i88PyQffzOt3d2+s7YU2W/+Htj1dprG7XW9s7tlbX55fpyfX12duaVuVfnXp67U1taadSLv33D/PhTv/7gqP5fGxC/sr//h7b/C0P1Pov/vnf/4ce6hXK/+Lee7//7e2NA/LT47ftMkc/n3+zld7v5vZ755e+eOar/iwP6P3lM/28N1f/4wovf/OGf+s45tDUAgIvQ2t5ZnW806ptHZCaHWOaCM68/Gs04w0w8Gs0YVSb7Qff/8XT1nHL1Q5nsNKtPxBk048qh72kpTlphErGb1zXkPyQAADBmPjzoP+oOEgAAAAAAAAAAAAAAAAAAAHCeTvhYssmIOHKZu3tqPhhzdzRdBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA40v8CAAD//+SZylA=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 3m45.345192264s ago: executing program 0 (id=2202): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x81901) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r1, &(0x7f0000000240)='./bus\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m45.238305716s ago: executing program 0 (id=2205): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0xf9d, @rand_addr=' \x01\x00'}}}, 0x32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x5, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) 3m43.864556528s ago: executing program 0 (id=2214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f0000000280)=[{0x5, 0xe, 0x6}, {0x794, 0x1, 0x83, 0x7}, {0x5, 0x0, 0x6, 0x80002001}]}) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x40000000000007b, 0x4004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x1, &(0x7f0000000000)=""/59, 0x0) listen(r3, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000060400000000000000010000050000000000000000010000000000000000003ba9c0c539fc9e28f85528e078b32e4df9cf6b979e3a0cf94ecdfc7e8aca4c023a19dd4b81c4878e47f1b166a05dcae65003dd29e20050"], &(0x7f0000000180)=""/220, 0x3e, 0xdc, 0x1, 0x0, 0x0, @void, @value}, 0x28) r6 = eventfd2(0x0, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r10, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4480}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) io_submit(r5, 0x2, &(0x7f0000000100)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r6}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f00000001c0)="5f18ab32505b5506", 0x8}]) r11 = epoll_create1(0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) preadv(r12, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/72, 0x48}], 0x1, 0x100, 0x400005) epoll_pwait(r11, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 3m43.864164198s ago: executing program 39 (id=2214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f0000000280)=[{0x5, 0xe, 0x6}, {0x794, 0x1, 0x83, 0x7}, {0x5, 0x0, 0x6, 0x80002001}]}) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x40000000000007b, 0x4004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x1, &(0x7f0000000000)=""/59, 0x0) listen(r3, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000060400000000000000010000050000000000000000010000000000000000003ba9c0c539fc9e28f85528e078b32e4df9cf6b979e3a0cf94ecdfc7e8aca4c023a19dd4b81c4878e47f1b166a05dcae65003dd29e20050"], &(0x7f0000000180)=""/220, 0x3e, 0xdc, 0x1, 0x0, 0x0, @void, @value}, 0x28) r6 = eventfd2(0x0, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r10, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4480}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) io_submit(r5, 0x2, &(0x7f0000000100)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r6}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f00000001c0)="5f18ab32505b5506", 0x8}]) r11 = epoll_create1(0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) preadv(r12, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/72, 0x48}], 0x1, 0x100, 0x400005) epoll_pwait(r11, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 3m16.851475795s ago: executing program 3 (id=2600): writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x2, 0x80805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 3m16.697465628s ago: executing program 3 (id=2603): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") capset(&(0x7f0000000100)={0x20071026}, 0x0) mount$nfs(&(0x7f0000000100)='.5.', 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 3m16.56809452s ago: executing program 3 (id=2607): openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 3m16.492287041s ago: executing program 3 (id=2609): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x81901) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m16.403075563s ago: executing program 3 (id=2612): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 3m16.122782227s ago: executing program 3 (id=2616): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000280)=':', 0x1}], 0x1}}], 0x1, 0x40088d5) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 3m16.122675167s ago: executing program 40 (id=2616): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000280)=':', 0x1}], 0x1}}], 0x1, 0x40088d5) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 2.513905099s ago: executing program 4 (id=6612): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000140)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x3}}]}, 0xff, 0x4d1, &(0x7f0000000f00)="$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") chmod(0x0, 0xe0) 2.300315973s ago: executing program 4 (id=6619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00'], 0xb4}}, 0x0) 2.256430004s ago: executing program 4 (id=6623): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}, 0x4008804) 2.184746124s ago: executing program 4 (id=6625): perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="a1ab0000000000000e0032000000080017"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) preadv2(r2, &(0x7f0000000940)=[{&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/205, 0xcd}, {&(0x7f0000000640)=""/242, 0xf2}, {&(0x7f0000000740)=""/227, 0xe3}, {&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000d80)=""/163, 0xa3}, {&(0x7f0000000380)=""/23, 0x17}], 0x7, 0x1, 0xf, 0x5) r3 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000000)=[{r4, 0x4d1}], 0x1, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) 2.088677227s ago: executing program 1 (id=6629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003100000030000000020000000000000001000004000000000000000003000000000000000000000000000002000000000000000000000010020000000000"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) 1.360751908s ago: executing program 4 (id=6635): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8948, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00'], 0xb4}}, 0x0) 733.633438ms ago: executing program 1 (id=6650): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x203470, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r2, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x335, @time={0x80, 0xff}}) socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x80000, 0xf, 0x0, 0x0, 0x5, 0x2]}}) unshare(0x2040400) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 678.975069ms ago: executing program 4 (id=6651): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x203470, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r2, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x335, @time={0x80, 0xff}}) socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x80000, 0xf, 0x0, 0x0, 0x5, 0x2]}}) syz_open_procfs(0xffffffffffffffff, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 266.653365ms ago: executing program 2 (id=6656): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4004, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x8000, 0x0, 0xfffffffb, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) r0 = perf_event_open(&(0x7f0000000e80)={0x0, 0x80, 0x1, 0x5, 0x4, 0x9, 0x0, 0x5, 0x8000, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xd00, 0x2, @perf_config_ext={0x2, 0x7}, 0x100154, 0x61, 0x1, 0x9, 0xfffffffffffffffe, 0x1, 0x6, 0x0, 0x23, 0x0, 0x9ab}, 0x0, 0xa, 0xffffffffffffffff, 0x1) fchmodat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x10) syz_clone3(&(0x7f0000000f00)={0x200000000, &(0x7f00000001c0), &(0x7f0000000bc0), &(0x7f0000000c00), {0x15}, &(0x7f0000002dc0)=""/4096, 0x1000, &(0x7f0000000c40)=""/233, &(0x7f0000000d80)=[0x0], 0x1}, 0x58) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89b0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x5, 0x80a, &(0x7f0000000340)="$eJzs3UFsHFcZAOB/XCdxXIiqgkIUpek0LVIipe7aSV1ZlWi367Ezrb1rdtdVIoTaiDhRFKetEiqRHEhzAYGKKsSBY9sDFzghLiAkkEACTkhw5VapEocWBIIDqJLRzKwTO/baSeomUfk+K56Z997M++ftZv4dr2YmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBIGpO12mgSM3lz/njaX2Oy3ZrdoH55e79eNdmg34ik+BdDQ7GnKtrz+evVu4tfB2JftbQvhorJUFy+f/cDT39ucGB5/Q0C2mqD6xVevHT53MnFxYULdzCQT8B3f7lq8UfDcZMjO501804rn61PZ2neaaUT4+O1J45NddKpfCbrnOh0s9m00c7q3VY7Pdg4lI5OTBxJs5ETrfnm9GR9JksHq8KnHh+r1cbT50fmsnq702o+8fxIp3Esn5nJm9PlikV10eap4o34Qt5Nu1l9Nk1Pn11cOLI6pJ1rgiwaja4q+Whp5dK+xx54//X3/nl2YWyz3R2rjY2Njo6NjY4nEVGrDV4veHLiyadqtcHaDWJNizv6puUetMVHcLh9A738HzORRzPm43ik6/40YjLa0YrZuP4GXlnfs5z/v/jE3/64Ub9vVfn/6opI9u25vrA3yvy/v1ra3y//V31v39En5k/q5/r+X4xLcTnOxclYjMVYiAsr2+3Yqv6SrYt94NbaD29SPx1ZNCOPTrQij9molyVprySNiRiP8ajFS3EspqITaUxFHjORRSdORCe6kZXvqEa0I4t6dKMV7UjjYDTiUKQxGhMxEUcijSxG4kS0Yj6aMR2TUS+3cjrOluN+5Ia4dn/z5V+c+dP7b5ev1nKj0Y2G+I2IstE/Nmi0JpnL/9yyiPjtFhy54eNbWs7/AAAAwKdWUn7HXpz/b4uHyrmpfCb7yiZrDRa/3rgzEQIAAAAfV/nN/75isq2YeyiS4vy/trrRT7bdneAAAACALZGU19glETEcD1dzy5dL1e52bAAAAMDWKL//319MhiOu7Fwudv4PAAAAnyIv/qw3c+M99t97vlhMkhiY25H86u/Rbm9Ljr5z/LHkfL2oqJ+/r1qvN3nx2ha7U3uT6N1QsNzW+ODl+4vlwUa2L1m+ee5HO6rph+XvvYPXVl8dx7O9v0gkSVIEcHWubwCxKoBdvb24FkC5FG/GI1WbR05V01PLNdUdhYen8plspNGaeXo06vVdA93sePf1V85+I8rd/05zdlcSp88uLox87dXFU2Us5Q2Mr57v7e+a+yhuEMtSbwTiobV3Ny42ta28EKPX73DVb23l/g9c3FXMDNxCn9+KA58p2xwYrtoOr97/oaLP0ZF+ez9c7d/omj0fXPvGqqI40Vu6IYpHq9JHDz5aTdaJYmyjKIqxGFsZRW8Qbm0s1o0iHoiItx+5cvzfv2sl2ZHNojjyMaMAuFtOl3f9KbJQlY6qLPTfpUqR/9vtbdtjVd6pVrjZo1xS9tJ7ks+ZN9e/k//NZ/f/LG1wRD9YtTlYfZ4Y3LtOXqmtc0R/7exrv+8d0Y/++IfvfHX/H35623l9aLnJte9SHvzN/QNRRrGzF8XlXk17W/K9a5mkyqrvFuXv9u23MzOWFB8X7vv6+ddi98VLlx8/e/7kmYUzC6+MjR0Zrx2t1Z5Mkt6Lt1R+YpB7AFjHgdhfJfK+z9jp8xSe8gNAlbuPbnRWfV8kD167pKDIia/GYpyKw+XVBhHx8Pr9Dlfr/Kv4VHI4DlRtv9wL+oaz1uEVT3g5vMm55faIXtuxTdsOr3i8zHVf+P4n+HIAwB1xYJM83Df/rzh3P7zJeffwiksKD8ehqu2h5Qj65/KIeObOjgYA/H/I2h8mw91vJ+12PvfS6MTEaL17LEvbrcYLaTufnM7SvNnN2jFYb05n6Vy71W01WjPFzIv5ZNZJO/Nzc612N51qtdO5Vic/Xj75Pe09+r2Tzdab3bzRmZvJ6p0sbbSa3Xqjm07mnUY6N//cTN45lrXLlTtzWSOfyhv1bt5qpp3WfLuRjaRpJ8tWNMwns2Y3n8qL2WY6185n6+2rETEzP5ulk1mn0c7nuq1qg8t95c2pVnu23Oxfd93t0QaAe8PFS5fPnVxcXLhwUzM/iIhVJX+5mbX69z7kxsIAcBdcz9IffPbGOn98BwAAAAAAAAAAAACAe8OtXf93EzM7t3aDQ32qvrRrceHC0pWItVXJ0tLSLXSxMzZps703VFs8UHdk5uqWbGcg1hvne2cm6V/18jPPnOu3+nNX9hzr85aoXCvZ9H/KYNG6utT1jQ+2//ytqurZ29qdgVtf688RcRt9LSUbtLl7xyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Od/AQAA//8WKmR4") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 248.280066ms ago: executing program 6 (id=6657): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000003c0)=[{&(0x7f0000000600)="f11dfab727daea8dd27079e660864fb909787c4c8e45a51d4ce080200705208b67659344a2fa5f32d65ac259f487c9ac2cbb5a681ba744eb", 0x38}], 0x1, 0x0) close(r5) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) splice(r4, 0x0, r5, 0x0, 0x10500, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 19.6202ms ago: executing program 7 (id=6669): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[], 0x11c}}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0xe8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(0xffffffffffffffff) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x20000005) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) socket$kcm(0x2, 0x3, 0x84) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r5 = accept4(r1, 0x0, 0x0, 0x0) write$nbd(r5, &(0x7f0000000440)=ANY=[], 0xd6) r6 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, 0x0) 0s ago: executing program 7 (id=6670): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/253, 0xfd, 0x0, &(0x7f0000000040)=""/46, 0x2e}, &(0x7f0000000200)=0x40) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x4800) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x120c018, &(0x7f00000004c0)={[{@check_relaxed}, {@nocompress}, {@nojoliet}, {@overriderock}, {@uid}, {@dmode={'dmode', 0x3d, 0x1000}}, {@session={'session', 0x3d, 0x6}}, {@map_normal}]}, 0xff, 0x539, &(0x7f0000001540)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/253, 0xfd, 0x0, &(0x7f0000000040)=""/46, 0x2e}, &(0x7f0000000200)=0x40) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) (async) pipe2(0x0, 0x4800) (async) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") (async) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x120c018, &(0x7f00000004c0)={[{@check_relaxed}, {@nocompress}, {@nojoliet}, {@overriderock}, {@uid}, {@dmode={'dmode', 0x3d, 0x1000}}, {@session={'session', 0x3d, 0x6}}, {@map_normal}]}, 0xff, 0x539, &(0x7f0000001540)="$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") (async) kernel console output (not intermixed with test programs): 85] __sock_create+0x2e9/0x5a0 [ 354.386375][T23185] sock_create_kern+0x38/0x50 [ 354.386412][T23185] udp_sock_create4+0x6c/0x2a0 [ 354.386457][T23185] rxrpc_lookup_local+0x846/0xcb0 [ 354.386498][T23185] rxrpc_sendmsg+0x344/0x520 [ 354.386523][T23185] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 354.386547][T23185] __sock_sendmsg+0x140/0x180 [ 354.386776][T23185] ____sys_sendmsg+0x350/0x4e0 [ 354.386811][T23185] __sys_sendmmsg+0x22a/0x4b0 [ 354.386859][T23185] __x64_sys_sendmmsg+0x57/0x70 [ 354.386883][T23185] x64_sys_call+0x2b53/0x2e10 [ 354.386931][T23185] do_syscall_64+0xc9/0x1a0 [ 354.386963][T23185] ? clear_bhb_loop+0x25/0x80 [ 354.386989][T23185] ? clear_bhb_loop+0x25/0x80 [ 354.387015][T23185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.387036][T23185] RIP: 0033:0x7f749a9be169 [ 354.387097][T23185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.387115][T23185] RSP: 002b:00007f7499027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 354.387132][T23185] RAX: ffffffffffffffda RBX: 00007f749abe5fa0 RCX: 00007f749a9be169 [ 354.387144][T23185] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 354.387178][T23185] RBP: 00007f7499027090 R08: 0000000000000000 R09: 0000000000000000 [ 354.387193][T23185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.387208][T23185] R13: 0000000000000000 R14: 00007f749abe5fa0 R15: 00007ffffa8b0fa8 [ 354.387230][T23185] [ 354.648681][T23189] vlan0: entered allmulticast mode [ 354.668557][ T51] bridge_slave_1: left allmulticast mode [ 354.674283][ T51] bridge_slave_1: left promiscuous mode [ 354.680000][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.689811][T23193] loop7: detected capacity change from 0 to 512 [ 354.697272][T23193] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 354.704369][T23198] loop4: detected capacity change from 0 to 256 [ 354.706150][T23193] EXT4-fs (loop7): invalid journal inode [ 354.712541][ T51] bridge_slave_0: left promiscuous mode [ 354.721773][T23193] EXT4-fs (loop7): can't get journal size [ 354.723171][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.739445][T23193] EXT4-fs error (device loop7): ext4_iget_extra_inode:4693: inode #15: comm syz.7.5980: corrupted in-inode xattr: bad e_name length [ 354.758745][T23193] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.5980: couldn't read orphan inode 15 (err -117) [ 354.771715][T23193] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.787620][T23198] FAULT_INJECTION: forcing a failure. [ 354.787620][T23198] name failslab, interval 1, probability 0, space 0, times 0 [ 354.800396][T23198] CPU: 1 UID: 0 PID: 23198 Comm: syz.4.5982 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 354.800427][T23198] Tainted: [W]=WARN [ 354.800434][T23198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 354.800448][T23198] Call Trace: [ 354.800456][T23198] [ 354.800463][T23198] dump_stack_lvl+0xf6/0x150 [ 354.800497][T23198] dump_stack+0x15/0x1a [ 354.800514][T23198] should_fail_ex+0x261/0x270 [ 354.800544][T23198] should_failslab+0x8f/0xb0 [ 354.800650][T23198] kmem_cache_alloc_noprof+0x59/0x340 [ 354.800681][T23198] ? __blockdev_direct_IO+0x130/0x1ef0 [ 354.800711][T23198] __blockdev_direct_IO+0x130/0x1ef0 [ 354.800733][T23198] ? __pfx_fat_get_block+0x10/0x10 [ 354.800800][T23198] ? memcg_list_lru_alloc+0xde/0x4a0 [ 354.800896][T23198] ? obj_cgroup_charge+0xc6/0x170 [ 354.801048][T23198] ? should_fail_ex+0x31/0x270 [ 354.801073][T23198] ? __rcu_read_unlock+0x4e/0x70 [ 354.801107][T23198] fat_direct_IO+0x10a/0x1d0 [ 354.801142][T23198] generic_file_read_iter+0x227/0x330 [ 354.801173][T23198] copy_splice_read+0x390/0x5d0 [ 354.801271][T23198] ? __pfx_filemap_splice_read+0x10/0x10 [ 354.801302][T23198] splice_direct_to_actor+0x28e/0x680 [ 354.801333][T23198] ? __pfx_direct_splice_actor+0x10/0x10 [ 354.801380][T23198] do_splice_direct+0xd9/0x150 [ 354.801416][T23198] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 354.801457][T23198] do_sendfile+0x40a/0x690 [ 354.801523][T23198] __x64_sys_sendfile64+0x113/0x160 [ 354.801550][T23198] x64_sys_call+0xfc3/0x2e10 [ 354.801576][T23198] do_syscall_64+0xc9/0x1a0 [ 354.801607][T23198] ? clear_bhb_loop+0x25/0x80 [ 354.801633][T23198] ? clear_bhb_loop+0x25/0x80 [ 354.801675][T23198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.801694][T23198] RIP: 0033:0x7f3027b2e169 [ 354.801711][T23198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.801792][T23198] RSP: 002b:00007f3026197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 354.801814][T23198] RAX: ffffffffffffffda RBX: 00007f3027d55fa0 RCX: 00007f3027b2e169 [ 354.801900][T23198] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 354.801914][T23198] RBP: 00007f3026197090 R08: 0000000000000000 R09: 0000000000000000 [ 354.801929][T23198] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 354.801980][T23198] R13: 0000000000000000 R14: 00007f3027d55fa0 R15: 00007ffe1003e998 [ 354.802076][T23198] [ 355.199134][T23206] hub 2-0:1.0: USB hub found [ 355.203809][T23206] hub 2-0:1.0: 8 ports detected [ 355.389091][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.402632][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.412608][ T51] bond0 (unregistering): Released all slaves [ 355.423324][ T51] bond1 (unregistering): Released all slaves [ 355.454803][T23213] __nla_validate_parse: 13 callbacks suppressed [ 355.454825][T23213] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5984'. [ 355.478475][T23112] team0: Port device team_slave_0 added [ 355.507102][T23112] team0: Port device team_slave_1 added [ 355.551500][T18805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.569709][T23112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.576708][T23112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.602773][T23112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.619414][T23112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.620476][T23219] FAULT_INJECTION: forcing a failure. [ 355.620476][T23219] name failslab, interval 1, probability 0, space 0, times 0 [ 355.626379][T23112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.626411][T23112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.639211][T23219] CPU: 0 UID: 0 PID: 23219 Comm: syz.1.5988 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 355.639290][T23219] Tainted: [W]=WARN [ 355.639379][T23219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 355.639395][T23219] Call Trace: [ 355.639403][T23219] [ 355.639412][T23219] dump_stack_lvl+0xf6/0x150 [ 355.639444][T23219] dump_stack+0x15/0x1a [ 355.639465][T23219] should_fail_ex+0x261/0x270 [ 355.639497][T23219] should_failslab+0x8f/0xb0 [ 355.639525][T23219] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 355.639641][T23219] ? __d_alloc+0x3d/0x350 [ 355.639676][T23219] __d_alloc+0x3d/0x350 [ 355.639706][T23219] ? mpol_shared_policy_init+0xd2/0x510 [ 355.639810][T23219] d_alloc_pseudo+0x1e/0x80 [ 355.639842][T23219] alloc_file_pseudo+0x75/0x160 [ 355.639880][T23219] __shmem_file_setup+0x1bb/0x1f0 [ 355.639920][T23219] shmem_file_setup+0x3b/0x50 [ 355.639947][T23219] __se_sys_memfd_create+0x2e1/0x5a0 [ 355.640032][T23219] __x64_sys_memfd_create+0x31/0x40 [ 355.640110][T23219] x64_sys_call+0x1163/0x2e10 [ 355.640139][T23219] do_syscall_64+0xc9/0x1a0 [ 355.640170][T23219] ? clear_bhb_loop+0x25/0x80 [ 355.640197][T23219] ? clear_bhb_loop+0x25/0x80 [ 355.640293][T23219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.640320][T23219] RIP: 0033:0x7f1aa70de169 [ 355.640339][T23219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.640362][T23219] RSP: 002b:00007f1aa5746e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 355.640385][T23219] RAX: ffffffffffffffda RBX: 00000000000004bf RCX: 00007f1aa70de169 [ 355.640435][T23219] RDX: 00007f1aa5746ef0 RSI: 0000000000000000 RDI: 00007f1aa7161404 [ 355.640450][T23219] RBP: 0000200000001000 R08: 00007f1aa5746bb7 R09: 00007f1aa5746e40 [ 355.640467][T23219] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 355.640482][T23219] R13: 00007f1aa5746ef0 R14: 00007f1aa5746eb0 R15: 0000200000001580 [ 355.640553][T23219] [ 355.918523][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.926081][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.949449][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.957101][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.969746][ T51] veth1_macvtap: left promiscuous mode [ 355.979069][ T29] audit: type=1400 audit(1745058594.312:12430): avc: denied { write } for pid=23225 comm="syz.1.5990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 356.001105][ T51] veth0_macvtap: left promiscuous mode [ 356.014705][ T51] veth1_vlan: left promiscuous mode [ 356.020226][ T51] veth0_vlan: left promiscuous mode [ 356.026090][ T29] audit: type=1400 audit(1745058594.322:12431): avc: denied { execute_no_trans } for pid=23225 comm="syz.1.5990" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 356.056006][ T29] audit: type=1400 audit(1745058594.342:12432): avc: denied { create } for pid=23225 comm="syz.1.5990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 356.082482][T23229] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 356.138781][ T51] team0 (unregistering): Port device team_slave_1 removed [ 356.148659][ T51] team0 (unregistering): Port device team_slave_0 removed [ 356.215612][T23112] hsr_slave_0: entered promiscuous mode [ 356.222317][T23112] hsr_slave_1: entered promiscuous mode [ 356.261852][ T29] audit: type=1326 audit(1745058594.602:12433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23234 comm="syz.4.5994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3027b2e169 code=0x7ffc0000 [ 356.315702][T23233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5993'. [ 356.355781][T23241] loop7: detected capacity change from 0 to 16384 [ 356.361409][T23243] loop4: detected capacity change from 0 to 512 [ 356.369528][T23243] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 356.398031][T23243] EXT4-fs (loop4): invalid journal inode [ 356.403760][T23243] EXT4-fs (loop4): can't get journal size [ 356.410304][T23243] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.5996: corrupted in-inode xattr: bad e_name length [ 356.424412][T23243] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.5996: couldn't read orphan inode 15 (err -117) [ 356.442252][T23243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.602671][T23248] hub 2-0:1.0: USB hub found [ 356.607704][T23248] hub 2-0:1.0: 8 ports detected [ 356.692400][T22174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.711404][T23248] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5997'. [ 356.760407][T23253] SELinux: policydb string length 1852375040 does not match expected length 8 [ 356.762471][T23250] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5998'. [ 356.780175][T23253] SELinux: failed to load policy [ 356.791196][T23112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 356.802599][T23255] loop4: detected capacity change from 0 to 2048 [ 356.858723][T23112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 356.867222][T23253] sd 0:0:1:0: device reset [ 356.879594][T23112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 356.900877][T23112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 356.957937][T23266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6004'. [ 356.996446][T23271] loop7: detected capacity change from 0 to 16384 [ 357.008424][T23273] loop6: detected capacity change from 0 to 512 [ 357.060266][T23273] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 357.063587][T23112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.081930][T23273] EXT4-fs (loop6): invalid journal inode [ 357.094022][T23278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6009'. [ 357.103130][T23273] EXT4-fs (loop6): can't get journal size [ 357.110186][T23273] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.6008: corrupted in-inode xattr: bad e_name length [ 357.114741][T23112] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.141662][ T173] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.147018][T23281] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 357.148752][ T173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.178896][T23112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 357.179664][T23273] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.6008: couldn't read orphan inode 15 (err -117) [ 357.189310][T23112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.229146][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.236324][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.267394][T23273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.323182][T23285] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6010'. [ 357.451388][T23112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.499050][T19731] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.628375][T23112] veth0_vlan: entered promiscuous mode [ 357.650058][T23112] veth1_vlan: entered promiscuous mode [ 357.690495][T23112] veth0_macvtap: entered promiscuous mode [ 357.701885][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 357.701903][ T29] audit: type=1326 audit(1745058596.042:12491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.4.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3027b2e169 code=0x7ffc0000 [ 357.703818][T23311] FAULT_INJECTION: forcing a failure. [ 357.703818][T23311] name failslab, interval 1, probability 0, space 0, times 0 [ 357.710020][ T29] audit: type=1326 audit(1745058596.042:12492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.4.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f3027b2e169 code=0x7ffc0000 [ 357.731971][T23311] CPU: 0 UID: 0 PID: 23311 Comm: syz.4.6016 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 357.732051][T23311] Tainted: [W]=WARN [ 357.732061][T23311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 357.732078][T23311] Call Trace: [ 357.732085][T23311] [ 357.732094][T23311] dump_stack_lvl+0xf6/0x150 [ 357.732125][T23311] dump_stack+0x15/0x1a [ 357.732146][T23311] should_fail_ex+0x261/0x270 [ 357.732179][T23311] should_failslab+0x8f/0xb0 [ 357.732206][T23311] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 357.732312][T23311] ? sidtab_sid2str_get+0xb8/0x140 [ 357.732337][T23311] ? vsnprintf+0x84d/0x8a0 [ 357.732393][T23311] kmemdup_noprof+0x2b/0x70 [ 357.732492][T23311] sidtab_sid2str_get+0xb8/0x140 [ 357.732518][T23311] security_sid_to_context_core+0x1eb/0x2f0 [ 357.732564][T23311] security_sid_to_context+0x27/0x30 [ 357.732615][T23311] selinux_lsmprop_to_secctx+0x6c/0xf0 [ 357.732643][T23311] security_lsmprop_to_secctx+0x40/0x80 [ 357.732734][T23311] audit_log_task_context+0x7a/0x180 [ 357.732776][T23311] audit_log_task+0xfb/0x250 [ 357.732811][T23311] audit_seccomp+0x62/0x100 [ 357.732843][T23311] __seccomp_filter+0x694/0x10e0 [ 357.732925][T23311] ? vfs_write+0x669/0x950 [ 357.732943][T23311] ? up_write+0x35/0xf0 [ 357.732972][T23311] __secure_computing+0x7e/0x150 [ 357.732997][T23311] syscall_trace_enter+0xcf/0x1f0 [ 357.733143][T23311] ? fpregs_assert_state_consistent+0x83/0xa0 [ 357.733230][T23311] do_syscall_64+0xaa/0x1a0 [ 357.733260][T23311] ? clear_bhb_loop+0x25/0x80 [ 357.733288][T23311] ? clear_bhb_loop+0x25/0x80 [ 357.733402][T23311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.733430][T23311] RIP: 0033:0x7f3027b2cb7c [ 357.733453][T23311] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 357.733476][T23311] RSP: 002b:00007f3026197030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 357.733556][T23311] RAX: ffffffffffffffda RBX: 00007f3027d55fa0 RCX: 00007f3027b2cb7c [ 357.733572][T23311] RDX: 000000000000000f RSI: 00007f30261970a0 RDI: 0000000000000009 [ 357.733588][T23311] RBP: 00007f3026197090 R08: 0000000000000000 R09: 0000000000000000 [ 357.733603][T23311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.733624][T23311] R13: 0000000000000000 R14: 00007f3027d55fa0 R15: 00007ffe1003e998 [ 357.733646][T23311] [ 357.733725][T23311] audit: error in audit_log_task_context [ 357.744493][ T29] audit: type=1326 audit(1745058596.042:12493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.4.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3027b2e169 code=0x7ffc0000 [ 357.744530][ T29] audit: type=1326 audit(1745058596.042:12494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.4.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3027b2e169 code=0x7ffc0000 [ 357.744560][ T29] audit: type=1326 audit(1745058596.042:12495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.4.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3027b2e169 code=0x7ffc0000 [ 357.744595][ T29] audit: type=1326 audit(1745058596.042:12496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.4.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3027b2e169 code=0x7ffc0000 [ 357.773995][T23112] veth1_macvtap: entered promiscuous mode [ 357.782211][ T29] audit: type=1326 audit(1745058596.042:12497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.4.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3027b2e169 code=0x7ffc0000 [ 357.810733][T23112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.811139][ T29] audit: type=1326 audit(1745058596.042:12498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.4.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3027b2e169 code=0x7ffc0000 [ 357.815820][T23112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.820452][ T29] audit: type=1326 audit(1745058596.042:12499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.4.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3027b2e169 code=0x7ffc0000 [ 357.826819][T23112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.826835][T23112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.826847][T23112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.826860][T23112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.826872][T23112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.864111][T23316] loop4: detected capacity change from 0 to 256 [ 357.865432][T23112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.276971][T23112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.277037][T23112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.279379][T23112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.280236][T23112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.280257][T23112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.280269][T23112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.280315][T23112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.280336][T23112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.280353][T23112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.280367][T23112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.280384][T23112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.280398][T23112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.280477][T23112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.281045][T23112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.282032][T23112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.282072][T23112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.282160][T23112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.282270][T23112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.313516][T23332] netlink: 'syz.4.6022': attribute type 10 has an invalid length. [ 358.319779][T23322] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6017'. [ 358.515625][T23332] hsr_slave_0: left promiscuous mode [ 358.522000][T23332] hsr_slave_1: left promiscuous mode [ 358.589561][T23341] loop6: detected capacity change from 0 to 128 [ 358.596052][T23341] vfat: Unknown parameter '' [ 358.626546][T23343] loop6: detected capacity change from 0 to 164 [ 358.655799][T23345] loop6: detected capacity change from 0 to 2048 [ 358.744457][T23350] loop7: detected capacity change from 0 to 256 [ 358.921822][T23382] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6031'. [ 359.089895][T23397] loop7: detected capacity change from 0 to 512 [ 359.115116][T23397] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.170863][T23405] $Hÿ: renamed from bond0 (while UP) [ 359.198003][T23405] $Hÿ: entered promiscuous mode [ 359.203179][T23405] bond_slave_0: entered promiscuous mode [ 359.208947][T23405] bond_slave_1: entered promiscuous mode [ 359.229306][T23389] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6035: bg 0: block 264: padding at end of block bitmap is not set [ 359.334029][T23397] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3758096384 > max in inode 15 [ 359.354352][T23397] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3758096385 > max in inode 15 [ 359.436247][T23450] loop6: detected capacity change from 0 to 2048 [ 359.508570][T23455] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 359.601251][T18805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.756525][T23470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6050'. [ 359.779897][T23473] hub 2-0:1.0: USB hub found [ 359.786743][T23473] hub 2-0:1.0: 8 ports detected [ 360.017288][T23495] FAULT_INJECTION: forcing a failure. [ 360.017288][T23495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.030450][T23495] CPU: 1 UID: 0 PID: 23495 Comm: syz.4.6055 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 360.030527][T23495] Tainted: [W]=WARN [ 360.030535][T23495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 360.030551][T23495] Call Trace: [ 360.030600][T23495] [ 360.030610][T23495] dump_stack_lvl+0xf6/0x150 [ 360.030639][T23495] dump_stack+0x15/0x1a [ 360.030659][T23495] should_fail_ex+0x261/0x270 [ 360.030689][T23495] should_fail+0xb/0x10 [ 360.030714][T23495] should_fail_usercopy+0x1a/0x20 [ 360.030791][T23495] _copy_to_user+0x20/0xa0 [ 360.030819][T23495] bpf_verifier_vlog+0x28c/0x590 [ 360.030846][T23495] __btf_verifier_log+0x85/0xb0 [ 360.030868][T23495] ? should_fail_ex+0xd7/0x270 [ 360.030895][T23495] ? btf_parse_hdr+0x1f1/0x3a0 [ 360.030982][T23495] btf_parse_hdr+0x203/0x3a0 [ 360.031013][T23495] btf_new_fd+0x27b/0x7c0 [ 360.031050][T23495] bpf_btf_load+0x115/0x130 [ 360.031085][T23495] __sys_bpf+0x695/0x800 [ 360.031127][T23495] __x64_sys_bpf+0x43/0x50 [ 360.031197][T23495] x64_sys_call+0x23da/0x2e10 [ 360.031226][T23495] do_syscall_64+0xc9/0x1a0 [ 360.031295][T23495] ? clear_bhb_loop+0x25/0x80 [ 360.031321][T23495] ? clear_bhb_loop+0x25/0x80 [ 360.031361][T23495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.031388][T23495] RIP: 0033:0x7f3027b2e169 [ 360.031451][T23495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.031469][T23495] RSP: 002b:00007f3026197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.031488][T23495] RAX: ffffffffffffffda RBX: 00007f3027d55fa0 RCX: 00007f3027b2e169 [ 360.031504][T23495] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 360.031518][T23495] RBP: 00007f3026197090 R08: 0000000000000000 R09: 0000000000000000 [ 360.031607][T23495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.031622][T23495] R13: 0000000000000001 R14: 00007f3027d55fa0 R15: 00007ffe1003e998 [ 360.031644][T23495] [ 360.450455][T23529] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 360.530452][T23536] FAULT_INJECTION: forcing a failure. [ 360.530452][T23536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.543915][T23536] CPU: 1 UID: 0 PID: 23536 Comm: syz.1.6071 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 360.543948][T23536] Tainted: [W]=WARN [ 360.543955][T23536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 360.543969][T23536] Call Trace: [ 360.543974][T23536] [ 360.543982][T23536] dump_stack_lvl+0xf6/0x150 [ 360.544066][T23536] dump_stack+0x15/0x1a [ 360.544082][T23536] should_fail_ex+0x261/0x270 [ 360.544106][T23536] should_fail+0xb/0x10 [ 360.544126][T23536] should_fail_usercopy+0x1a/0x20 [ 360.544153][T23536] _copy_to_user+0x20/0xa0 [ 360.544189][T23536] simple_read_from_buffer+0xb2/0x130 [ 360.544223][T23536] proc_fail_nth_read+0x103/0x140 [ 360.544259][T23536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.544299][T23536] vfs_read+0x1b2/0x710 [ 360.544315][T23536] ? __rcu_read_unlock+0x4e/0x70 [ 360.544366][T23536] ? __fget_files+0x186/0x1c0 [ 360.544389][T23536] ksys_read+0xeb/0x1b0 [ 360.544501][T23536] __x64_sys_read+0x42/0x50 [ 360.544520][T23536] x64_sys_call+0x2a3b/0x2e10 [ 360.544542][T23536] do_syscall_64+0xc9/0x1a0 [ 360.544567][T23536] ? clear_bhb_loop+0x25/0x80 [ 360.544588][T23536] ? clear_bhb_loop+0x25/0x80 [ 360.544609][T23536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.544709][T23536] RIP: 0033:0x7f1aa70dcb7c [ 360.544745][T23536] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 360.544762][T23536] RSP: 002b:00007f1aa5747030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 360.544781][T23536] RAX: ffffffffffffffda RBX: 00007f1aa7305fa0 RCX: 00007f1aa70dcb7c [ 360.544793][T23536] RDX: 000000000000000f RSI: 00007f1aa57470a0 RDI: 0000000000000006 [ 360.544805][T23536] RBP: 00007f1aa5747090 R08: 0000000000000000 R09: 0000000000000000 [ 360.544816][T23536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.544828][T23536] R13: 0000000000000000 R14: 00007f1aa7305fa0 R15: 00007fff27e59368 [ 360.544857][T23536] [ 360.824641][T23538] __nla_validate_parse: 5 callbacks suppressed [ 360.824706][T23538] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6072'. [ 360.948106][T23556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6073'. [ 360.998481][T23558] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6080'. [ 361.019915][T23558] veth0_macvtap: left promiscuous mode [ 361.028841][T23558] macvtap0: refused to change device tx_queue_len [ 361.089973][T23562] hub 2-0:1.0: USB hub found [ 361.104910][T23562] hub 2-0:1.0: 8 ports detected [ 361.209870][T23562] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6082'. [ 361.287346][T23574] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 361.602745][T23580] loop7: detected capacity change from 0 to 512 [ 361.612401][T23580] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.689205][T23579] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6088: bg 0: block 264: padding at end of block bitmap is not set [ 361.710448][T23582] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3758096384 > max in inode 15 [ 361.721582][T23582] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3758096385 > max in inode 15 [ 361.764309][T23586] vlan0: entered allmulticast mode [ 361.814150][T23588] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6091'. [ 361.892865][T18805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.914821][T23598] tipc: Started in network mode [ 361.919796][T23598] tipc: Node identity ae48d80b07e3, cluster identity 4711 [ 361.927078][T23598] tipc: Enabled bearer , priority 0 [ 361.948979][T23597] tipc: Resetting bearer [ 361.979862][T23605] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 361.995550][T23607] netlink: 'syz.7.6099': attribute type 2 has an invalid length. [ 362.014468][T23597] tipc: Disabling bearer [ 362.022306][T23607] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6099'. [ 362.031354][T23607] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6099'. [ 362.040530][T23609] loop4: detected capacity change from 0 to 2048 [ 362.086432][T23607] loop7: detected capacity change from 0 to 512 [ 362.093289][T23607] EXT4-fs: test_dummy_encryption option not supported [ 362.162399][T23619] vlan0: entered allmulticast mode [ 362.192344][T23621] loop4: detected capacity change from 0 to 1024 [ 362.221541][T23621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.259491][T22174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.276181][T23623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6105'. [ 362.309542][T23633] FAULT_INJECTION: forcing a failure. [ 362.309542][T23633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.316497][T23631] netlink: 'syz.4.6108': attribute type 1 has an invalid length. [ 362.322725][T23633] CPU: 1 UID: 0 PID: 23633 Comm: syz.2.6109 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 362.322775][T23633] Tainted: [W]=WARN [ 362.322784][T23633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 362.322801][T23633] Call Trace: [ 362.322810][T23633] [ 362.322820][T23633] dump_stack_lvl+0xf6/0x150 [ 362.322917][T23633] dump_stack+0x15/0x1a [ 362.322939][T23633] should_fail_ex+0x261/0x270 [ 362.322970][T23633] should_fail+0xb/0x10 [ 362.322997][T23633] should_fail_usercopy+0x1a/0x20 [ 362.323028][T23633] _copy_to_user+0x20/0xa0 [ 362.323088][T23633] simple_read_from_buffer+0xb2/0x130 [ 362.323131][T23633] proc_fail_nth_read+0x103/0x140 [ 362.323176][T23633] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.323228][T23633] vfs_read+0x1b2/0x710 [ 362.323250][T23633] ? __rcu_read_unlock+0x4e/0x70 [ 362.323277][T23633] ? __fget_files+0x186/0x1c0 [ 362.323307][T23633] ksys_read+0xeb/0x1b0 [ 362.323332][T23633] __x64_sys_read+0x42/0x50 [ 362.323373][T23633] x64_sys_call+0x2a3b/0x2e10 [ 362.323400][T23633] do_syscall_64+0xc9/0x1a0 [ 362.323433][T23633] ? clear_bhb_loop+0x25/0x80 [ 362.323516][T23633] ? clear_bhb_loop+0x25/0x80 [ 362.323542][T23633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.323569][T23633] RIP: 0033:0x7f702665cb7c [ 362.323589][T23633] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 362.323612][T23633] RSP: 002b:00007f7024cc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 362.323635][T23633] RAX: ffffffffffffffda RBX: 00007f7026885fa0 RCX: 00007f702665cb7c [ 362.323651][T23633] RDX: 000000000000000f RSI: 00007f7024cc70a0 RDI: 0000000000000007 [ 362.323743][T23633] RBP: 00007f7024cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 362.323758][T23633] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 362.323773][T23633] R13: 0000000000000000 R14: 00007f7026885fa0 R15: 00007ffef1e3a068 [ 362.323798][T23633] [ 362.608277][T23648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6114'. [ 362.641536][T23646] loop6: detected capacity change from 0 to 512 [ 362.655836][T23651] bridge0: entered promiscuous mode [ 362.665593][T23646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.673238][T23651] batadv0: entered promiscuous mode [ 362.687655][T23651] bridge0: left promiscuous mode [ 362.689159][T23660] FAULT_INJECTION: forcing a failure. [ 362.689159][T23660] name failslab, interval 1, probability 0, space 0, times 0 [ 362.705452][T23660] CPU: 0 UID: 0 PID: 23660 Comm: syz.7.6119 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 362.705486][T23660] Tainted: [W]=WARN [ 362.705492][T23660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 362.705504][T23660] Call Trace: [ 362.705512][T23660] [ 362.705522][T23660] dump_stack_lvl+0xf6/0x150 [ 362.705557][T23660] dump_stack+0x15/0x1a [ 362.705584][T23660] should_fail_ex+0x261/0x270 [ 362.705614][T23660] should_failslab+0x8f/0xb0 [ 362.705642][T23660] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 362.705670][T23660] ? __alloc_skb+0x10d/0x320 [ 362.705727][T23660] __alloc_skb+0x10d/0x320 [ 362.705752][T23660] netlink_alloc_large_skb+0xad/0xe0 [ 362.705793][T23660] netlink_sendmsg+0x3da/0x720 [ 362.705823][T23660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.705882][T23660] __sock_sendmsg+0x140/0x180 [ 362.705920][T23660] ____sys_sendmsg+0x350/0x4e0 [ 362.705992][T23660] __sys_sendmsg+0x1a0/0x240 [ 362.706034][T23660] __x64_sys_sendmsg+0x46/0x50 [ 362.706060][T23660] x64_sys_call+0x26f3/0x2e10 [ 362.706081][T23660] do_syscall_64+0xc9/0x1a0 [ 362.706182][T23660] ? clear_bhb_loop+0x25/0x80 [ 362.706204][T23660] ? clear_bhb_loop+0x25/0x80 [ 362.706229][T23660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.706253][T23660] RIP: 0033:0x7f749a9be169 [ 362.706312][T23660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.706340][T23660] RSP: 002b:00007f7499027038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.706363][T23660] RAX: ffffffffffffffda RBX: 00007f749abe5fa0 RCX: 00007f749a9be169 [ 362.706402][T23660] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 362.706417][T23660] RBP: 00007f7499027090 R08: 0000000000000000 R09: 0000000000000000 [ 362.706466][T23660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.706477][T23660] R13: 0000000000000000 R14: 00007f749abe5fa0 R15: 00007ffffa8b0fa8 [ 362.706498][T23660] [ 362.706814][T23651] batadv0: left promiscuous mode [ 362.924848][T23645] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6113: bg 0: block 264: padding at end of block bitmap is not set [ 362.944962][T23650] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3758096384 > max in inode 15 [ 362.955443][T23650] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3758096385 > max in inode 15 [ 363.062300][T19731] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.211097][T23688] loop7: detected capacity change from 0 to 512 [ 363.235653][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 363.235697][ T29] audit: type=1400 audit(1745058601.572:12713): avc: denied { write } for pid=23690 comm="syz.2.6132" path="socket:[71995]" dev="sockfs" ino=71995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 363.238595][T23688] EXT4-fs: test_dummy_encryption option not supported [ 363.306016][ T29] audit: type=1400 audit(1745058601.622:12714): avc: denied { shutdown } for pid=23684 comm="syz.1.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 363.325960][ T29] audit: type=1400 audit(1745058601.622:12715): avc: denied { getopt } for pid=23684 comm="syz.1.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 363.402537][T23688] netem: change failed [ 363.497385][T23702] loop7: detected capacity change from 0 to 1024 [ 363.504601][T23702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.527554][T23702] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.570412][T23702] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 363.593226][T23710] vlan0: entered allmulticast mode [ 363.625691][T18805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.671170][ T29] audit: type=1326 audit(1745058602.012:12716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23711 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3027b2e169 code=0x7ffc0000 [ 363.694338][ T29] audit: type=1326 audit(1745058602.012:12717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23711 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3027b2e169 code=0x7ffc0000 [ 363.717387][ T29] audit: type=1326 audit(1745058602.012:12718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23711 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3027b2e169 code=0x7ffc0000 [ 363.740534][ T29] audit: type=1326 audit(1745058602.012:12719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23711 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3027b2e169 code=0x7ffc0000 [ 363.763641][ T29] audit: type=1326 audit(1745058602.012:12720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23711 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3027b2e169 code=0x7ffc0000 [ 363.792856][ T29] audit: type=1326 audit(1745058602.012:12721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23711 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3027b2e169 code=0x7ffc0000 [ 363.815988][ T29] audit: type=1326 audit(1745058602.012:12722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23711 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3027b2e169 code=0x7ffc0000 [ 363.887089][T23712] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 363.895349][T23712] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 364.131724][T23745] SET target dimension over the limit! [ 364.140967][T23739] loop4: detected capacity change from 0 to 512 [ 364.161718][T23748] vlan0: entered allmulticast mode [ 364.168480][T23739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.242534][T23738] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6149: bg 0: block 264: padding at end of block bitmap is not set [ 364.341956][T23742] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3758096384 > max in inode 15 [ 364.364374][T23742] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3758096385 > max in inode 15 [ 364.490767][T22174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.541892][T23781] netlink: 'syz.1.6165': attribute type 10 has an invalid length. [ 364.550112][T23781] hsr_slave_0: left promiscuous mode [ 364.556035][T23781] hsr_slave_1: left promiscuous mode [ 365.279913][T23850] loop6: detected capacity change from 0 to 2048 [ 365.307183][T23850] loop6: p1 < > p2 p3 p4 < p5 > [ 365.319076][T23850] loop6: p2 size 458752 extends beyond EOD, truncated [ 365.326950][T23850] loop6: p3 start 4284289 is beyond EOD, truncated [ 365.334820][T23850] loop6: p5 size 458752 extends beyond EOD, truncated [ 365.376089][T23870] loop7: detected capacity change from 0 to 256 [ 365.383062][T23870] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 365.395396][T23870] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 365.448652][T23870] FAULT_INJECTION: forcing a failure. [ 365.448652][T23870] name failslab, interval 1, probability 0, space 0, times 0 [ 365.461465][T23870] CPU: 1 UID: 0 PID: 23870 Comm: syz.7.6178 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 365.461503][T23870] Tainted: [W]=WARN [ 365.461511][T23870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 365.461526][T23870] Call Trace: [ 365.461534][T23870] [ 365.461543][T23870] dump_stack_lvl+0xf6/0x150 [ 365.461570][T23870] dump_stack+0x15/0x1a [ 365.461661][T23870] should_fail_ex+0x261/0x270 [ 365.461689][T23870] should_failslab+0x8f/0xb0 [ 365.461715][T23870] kmem_cache_alloc_noprof+0x59/0x340 [ 365.461748][T23870] ? getname_flags+0x81/0x3b0 [ 365.461771][T23870] getname_flags+0x81/0x3b0 [ 365.461844][T23870] __x64_sys_mkdirat+0x41/0x60 [ 365.461950][T23870] x64_sys_call+0x2ce3/0x2e10 [ 365.462044][T23870] do_syscall_64+0xc9/0x1a0 [ 365.462149][T23870] ? clear_bhb_loop+0x25/0x80 [ 365.462174][T23870] ? clear_bhb_loop+0x25/0x80 [ 365.462199][T23870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.462223][T23870] RIP: 0033:0x7f749a9be169 [ 365.462241][T23870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.462263][T23870] RSP: 002b:00007f7499027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 365.462286][T23870] RAX: ffffffffffffffda RBX: 00007f749abe5fa0 RCX: 00007f749a9be169 [ 365.462302][T23870] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 365.462316][T23870] RBP: 00007f7499027090 R08: 0000000000000000 R09: 0000000000000000 [ 365.462330][T23870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.462343][T23870] R13: 0000000000000000 R14: 00007f749abe5fa0 R15: 00007ffffa8b0fa8 [ 365.462365][T23870] [ 365.698683][T23901] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.754280][T23901] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.820903][T23901] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.836881][T23923] __nla_validate_parse: 11 callbacks suppressed [ 365.836897][T23923] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6188'. [ 365.871642][T23901] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.934166][T23931] FAULT_INJECTION: forcing a failure. [ 365.934166][T23931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.947411][T23931] CPU: 1 UID: 0 PID: 23931 Comm: syz.6.6193 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 365.947508][T23931] Tainted: [W]=WARN [ 365.947515][T23931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 365.947527][T23931] Call Trace: [ 365.947599][T23931] [ 365.947609][T23931] dump_stack_lvl+0xf6/0x150 [ 365.947639][T23931] dump_stack+0x15/0x1a [ 365.947659][T23931] should_fail_ex+0x261/0x270 [ 365.947688][T23931] should_fail+0xb/0x10 [ 365.947712][T23931] should_fail_usercopy+0x1a/0x20 [ 365.947735][T23931] _copy_from_user+0x1c/0xa0 [ 365.947818][T23931] sctp_getsockopt_connectx3+0xda/0x310 [ 365.947857][T23931] sctp_getsockopt+0x805/0xab0 [ 365.947895][T23931] sock_common_getsockopt+0x5b/0x70 [ 365.947988][T23931] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 365.948027][T23931] do_sock_getsockopt+0x1fc/0x290 [ 365.948056][T23931] __x64_sys_getsockopt+0x13f/0x1c0 [ 365.948091][T23931] x64_sys_call+0x128f/0x2e10 [ 365.948124][T23931] do_syscall_64+0xc9/0x1a0 [ 365.948149][T23931] ? clear_bhb_loop+0x25/0x80 [ 365.948218][T23931] ? clear_bhb_loop+0x25/0x80 [ 365.948238][T23931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.948257][T23931] RIP: 0033:0x7fb73e0be169 [ 365.948272][T23931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.948293][T23931] RSP: 002b:00007fb73c727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 365.948367][T23931] RAX: ffffffffffffffda RBX: 00007fb73e2e5fa0 RCX: 00007fb73e0be169 [ 365.948379][T23931] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 365.948420][T23931] RBP: 00007fb73c727090 R08: 0000200000000440 R09: 0000000000000000 [ 365.948435][T23931] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.948450][T23931] R13: 0000000000000000 R14: 00007fb73e2e5fa0 R15: 00007ffceccb3488 [ 365.948470][T23931] [ 365.950074][T23901] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.982207][T23933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6194'. [ 366.022797][T23901] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.179623][T23901] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.212637][T23901] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.264510][T23944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6196'. [ 366.418745][T23958] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6204'. [ 366.441952][T23960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6205'. [ 366.459330][T23962] vlan2: entered allmulticast mode [ 366.481769][T23958] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6204'. [ 366.591624][T23980] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6213'. [ 366.628904][T23980] syzkaller0: entered promiscuous mode [ 366.634490][T23980] syzkaller0: entered allmulticast mode [ 366.642832][T23976] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6211'. [ 366.655260][T23978] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 366.663561][T23978] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 366.765087][T23989] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6215'. [ 366.776323][T23989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=23989 comm=syz.7.6215 [ 366.791073][T23991] loop7: detected capacity change from 0 to 16384 [ 367.293638][T23996] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6218'. [ 367.345683][T24007] FAULT_INJECTION: forcing a failure. [ 367.345683][T24007] name failslab, interval 1, probability 0, space 0, times 0 [ 367.358487][T24007] CPU: 0 UID: 0 PID: 24007 Comm: syz.1.6222 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 367.358522][T24007] Tainted: [W]=WARN [ 367.358529][T24007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 367.358540][T24007] Call Trace: [ 367.358547][T24007] [ 367.358554][T24007] dump_stack_lvl+0xf6/0x150 [ 367.358590][T24007] dump_stack+0x15/0x1a [ 367.358715][T24007] should_fail_ex+0x261/0x270 [ 367.358747][T24007] should_failslab+0x8f/0xb0 [ 367.358775][T24007] __kmalloc_noprof+0xad/0x410 [ 367.358810][T24007] ? tcp_sigpool_alloc_ahash+0x87/0x6d0 [ 367.358841][T24007] tcp_sigpool_alloc_ahash+0x87/0x6d0 [ 367.358898][T24007] ? terminate_walk+0x271/0x290 [ 367.358929][T24007] tcp_md5_alloc_sigpool+0x1b/0x60 [ 367.358996][T24007] tcp_md5_do_add+0x86/0x1c0 [ 367.359023][T24007] tcp_v6_parse_md5_keys+0x3ec/0x440 [ 367.359067][T24007] do_tcp_setsockopt+0xf6c/0x1710 [ 367.359176][T24007] ? selinux_socket_setsockopt+0x1d9/0x210 [ 367.359216][T24007] tcp_setsockopt+0x50/0xb0 [ 367.359280][T24007] sock_common_setsockopt+0x64/0x80 [ 367.359320][T24007] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 367.359381][T24007] __sys_setsockopt+0x187/0x200 [ 367.359405][T24007] __x64_sys_setsockopt+0x66/0x80 [ 367.359473][T24007] x64_sys_call+0x2a09/0x2e10 [ 367.359500][T24007] do_syscall_64+0xc9/0x1a0 [ 367.359531][T24007] ? clear_bhb_loop+0x25/0x80 [ 367.359556][T24007] ? clear_bhb_loop+0x25/0x80 [ 367.359579][T24007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.359699][T24007] RIP: 0033:0x7f1aa70de169 [ 367.359737][T24007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.359760][T24007] RSP: 002b:00007f1aa5747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 367.359800][T24007] RAX: ffffffffffffffda RBX: 00007f1aa7305fa0 RCX: 00007f1aa70de169 [ 367.359816][T24007] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000005 [ 367.359830][T24007] RBP: 00007f1aa5747090 R08: 00000000000000d8 R09: 0000000000000000 [ 367.359844][T24007] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000001 [ 367.359883][T24007] R13: 0000000000000000 R14: 00007f1aa7305fa0 R15: 00007fff27e59368 [ 367.359902][T24007] [ 367.369680][T24010] vlan0: entered allmulticast mode [ 367.667911][T24031] loop7: detected capacity change from 0 to 16384 [ 367.689185][T24020] netlink: 'syz.1.6228': attribute type 27 has an invalid length. [ 367.742119][T24020] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.749402][T24020] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.788276][T24034] FAULT_INJECTION: forcing a failure. [ 367.788276][T24034] name failslab, interval 1, probability 0, space 0, times 0 [ 367.801227][T24034] CPU: 1 UID: 0 PID: 24034 Comm: syz.7.6232 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 367.801321][T24034] Tainted: [W]=WARN [ 367.801330][T24034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 367.801382][T24034] Call Trace: [ 367.801388][T24034] [ 367.801397][T24034] dump_stack_lvl+0xf6/0x150 [ 367.801426][T24034] dump_stack+0x15/0x1a [ 367.801447][T24034] should_fail_ex+0x261/0x270 [ 367.801470][T24034] should_failslab+0x8f/0xb0 [ 367.801496][T24034] kmem_cache_alloc_noprof+0x59/0x340 [ 367.801610][T24034] ? __kernfs_new_node+0x6d/0x380 [ 367.801653][T24034] __kernfs_new_node+0x6d/0x380 [ 367.801693][T24034] ? kernfs_activate+0x90/0xa0 [ 367.801762][T24034] ? kernfs_add_one+0x215/0x280 [ 367.801796][T24034] kernfs_new_node+0xd7/0x150 [ 367.801842][T24034] __kernfs_create_file+0x49/0x180 [ 367.801893][T24034] ? __pfx_dev_attr_store+0x10/0x10 [ 367.801921][T24034] sysfs_add_file_mode_ns+0x136/0x1c0 [ 367.801965][T24034] sysfs_create_file_ns+0xdf/0x120 [ 367.802055][T24034] device_create_file+0xa3/0x110 [ 367.802101][T24034] device_add+0x341/0x790 [ 367.802137][T24034] wakeup_source_sysfs_add+0x136/0x1a0 [ 367.802198][T24034] wakeup_source_register+0x106/0x250 [ 367.802260][T24034] ep_modify+0x115/0x440 [ 367.802284][T24034] do_epoll_ctl+0x4bb/0x920 [ 367.802306][T24034] __x64_sys_epoll_ctl+0xcb/0xf0 [ 367.802362][T24034] x64_sys_call+0x2789/0x2e10 [ 367.802389][T24034] do_syscall_64+0xc9/0x1a0 [ 367.802419][T24034] ? clear_bhb_loop+0x25/0x80 [ 367.802445][T24034] ? clear_bhb_loop+0x25/0x80 [ 367.802494][T24034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.802561][T24034] RIP: 0033:0x7f749a9be169 [ 367.802578][T24034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.802600][T24034] RSP: 002b:00007f7499027038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 367.802622][T24034] RAX: ffffffffffffffda RBX: 00007f749abe5fa0 RCX: 00007f749a9be169 [ 367.802637][T24034] RDX: 0000000000000004 RSI: 0000000000000003 RDI: 0000000000000005 [ 367.802651][T24034] RBP: 00007f7499027090 R08: 0000000000000000 R09: 0000000000000000 [ 367.802665][T24034] R10: 0000200000000c40 R11: 0000000000000246 R12: 0000000000000001 [ 367.802679][T24034] R13: 0000000000000000 R14: 00007f749abe5fa0 R15: 00007ffffa8b0fa8 [ 367.802765][T24034] [ 368.060900][T24020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.071537][T24020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.104206][T24020] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.113471][T24020] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.122770][T24020] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.131966][T24020] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.418154][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 368.418171][ T29] audit: type=1400 audit(1745058606.762:12845): avc: denied { create } for pid=24055 comm="syz.2.6239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 368.467423][T24058] loop4: detected capacity change from 0 to 512 [ 368.491618][ T29] audit: type=1326 audit(1745058606.762:12846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.2.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702665e169 code=0x7ffc0000 [ 368.515422][ T29] audit: type=1326 audit(1745058606.762:12847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.2.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f702665e169 code=0x7ffc0000 [ 368.539042][ T29] audit: type=1326 audit(1745058606.762:12848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.2.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702665e169 code=0x7ffc0000 [ 368.562888][ T29] audit: type=1326 audit(1745058606.762:12849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.2.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f702665e169 code=0x7ffc0000 [ 368.586462][ T29] audit: type=1326 audit(1745058606.762:12850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.2.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702665e169 code=0x7ffc0000 [ 368.610454][ T29] audit: type=1326 audit(1745058606.762:12851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.2.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f702665e169 code=0x7ffc0000 [ 368.634075][ T29] audit: type=1326 audit(1745058606.762:12852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.2.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702665e169 code=0x7ffc0000 [ 368.657751][ T29] audit: type=1326 audit(1745058606.762:12853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.2.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f702665e169 code=0x7ffc0000 [ 368.661133][T24058] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 368.681369][ T29] audit: type=1326 audit(1745058606.762:12854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.2.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702665e169 code=0x7ffc0000 [ 368.726258][T24058] EXT4-fs (loop4): invalid journal inode [ 368.738433][T24058] EXT4-fs (loop4): can't get journal size [ 368.765088][T24063] Cannot find del_set index 1 as target [ 368.835227][T24058] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.6241: corrupted in-inode xattr: bad e_name length [ 368.851886][T24058] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.6241: couldn't read orphan inode 15 (err -117) [ 368.866966][T24058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.942621][T24085] loop7: detected capacity change from 0 to 16384 [ 369.182079][T24100] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 369.193021][T24100] SELinux: failed to load policy [ 369.290282][T24104] FAULT_INJECTION: forcing a failure. [ 369.290282][T24104] name failslab, interval 1, probability 0, space 0, times 0 [ 369.303050][T24104] CPU: 1 UID: 0 PID: 24104 Comm: syz.1.6258 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 369.303145][T24104] Tainted: [W]=WARN [ 369.303152][T24104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 369.303164][T24104] Call Trace: [ 369.303170][T24104] [ 369.303178][T24104] dump_stack_lvl+0xf6/0x150 [ 369.303253][T24104] dump_stack+0x15/0x1a [ 369.303292][T24104] should_fail_ex+0x261/0x270 [ 369.303333][T24104] should_failslab+0x8f/0xb0 [ 369.303428][T24104] __kvmalloc_node_noprof+0x12c/0x520 [ 369.303488][T24104] ? xt_alloc_entry_offsets+0x47/0x50 [ 369.303526][T24104] ? mntput_no_expire+0x73/0x3e0 [ 369.303562][T24104] xt_alloc_entry_offsets+0x47/0x50 [ 369.303612][T24104] translate_table+0xa2/0x10b0 [ 369.303639][T24104] ? __memcg_slab_post_alloc_hook+0x473/0x5a0 [ 369.303685][T24104] ? _copy_from_user+0x89/0xa0 [ 369.303789][T24104] do_ip6t_set_ctl+0x663/0x840 [ 369.303818][T24104] ? kstrtouint+0x7b/0xc0 [ 369.303849][T24104] nf_setsockopt+0x195/0x1b0 [ 369.303877][T24104] ipv6_setsockopt+0x10f/0x130 [ 369.303962][T24104] tcp_setsockopt+0x93/0xb0 [ 369.304032][T24104] sock_common_setsockopt+0x64/0x80 [ 369.304070][T24104] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 369.304109][T24104] __sys_setsockopt+0x187/0x200 [ 369.304173][T24104] __x64_sys_setsockopt+0x66/0x80 [ 369.304194][T24104] x64_sys_call+0x2a09/0x2e10 [ 369.304215][T24104] do_syscall_64+0xc9/0x1a0 [ 369.304290][T24104] ? clear_bhb_loop+0x25/0x80 [ 369.304334][T24104] ? clear_bhb_loop+0x25/0x80 [ 369.304359][T24104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.304379][T24104] RIP: 0033:0x7f1aa70de169 [ 369.304402][T24104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.304435][T24104] RSP: 002b:00007f1aa5747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 369.304458][T24104] RAX: ffffffffffffffda RBX: 00007f1aa7305fa0 RCX: 00007f1aa70de169 [ 369.304469][T24104] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 369.304483][T24104] RBP: 00007f1aa5747090 R08: 00000000000003d8 R09: 0000000000000000 [ 369.304498][T24104] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 369.304512][T24104] R13: 0000000000000000 R14: 00007f1aa7305fa0 R15: 00007fff27e59368 [ 369.304535][T24104] [ 369.609506][T24109] netlink: 'syz.1.6261': attribute type 1 has an invalid length. [ 370.017844][T24128] SET target dimension over the limit! [ 370.051838][T24130] loop6: detected capacity change from 0 to 164 [ 370.085077][T24130] iso9660: Unknown parameter 'nocomp€' [ 370.205438][T24139] loop7: detected capacity change from 0 to 16384 [ 370.448326][T22174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.566092][T24160] Cannot find del_set index 1 as target [ 370.580528][T24160] loop4: detected capacity change from 0 to 512 [ 370.601233][T24160] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 370.614655][T24162] SET target dimension over the limit! [ 370.637872][T24160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.646711][T24168] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 370.660942][T24160] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.675224][T24160] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6282: corrupted xattr block 32: bad e_name length [ 370.686399][T24170] loop7: detected capacity change from 0 to 16384 [ 370.690792][T24160] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 370.709902][T24160] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6282: corrupted xattr block 32: bad e_name length [ 370.723722][T24160] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 370.732918][T24160] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6282: corrupted xattr block 32: bad e_name length [ 370.762219][T22174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.798139][T24177] loop6: detected capacity change from 0 to 2048 [ 370.826894][T24177] loop6: p1 < > p2 p3 p4 < p5 > [ 370.834066][T24177] loop6: p2 size 458752 extends beyond EOD, truncated [ 370.843570][T24177] loop6: p3 start 4284289 is beyond EOD, truncated [ 370.853012][T24177] loop6: p5 size 458752 extends beyond EOD, truncated [ 370.914167][T24187] __nla_validate_parse: 18 callbacks suppressed [ 370.914217][T24187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6292'. [ 371.066921][T24170] loop7: detected capacity change from 16384 to 16383 [ 371.156275][T24204] FAULT_INJECTION: forcing a failure. [ 371.156275][T24204] name failslab, interval 1, probability 0, space 0, times 0 [ 371.169091][T24204] CPU: 1 UID: 0 PID: 24204 Comm: syz.7.6300 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 371.169195][T24204] Tainted: [W]=WARN [ 371.169204][T24204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 371.169219][T24204] Call Trace: [ 371.169228][T24204] [ 371.169238][T24204] dump_stack_lvl+0xf6/0x150 [ 371.169267][T24204] dump_stack+0x15/0x1a [ 371.169321][T24204] should_fail_ex+0x261/0x270 [ 371.169346][T24204] should_failslab+0x8f/0xb0 [ 371.169367][T24204] kmem_cache_alloc_noprof+0x59/0x340 [ 371.169402][T24204] ? alloc_vfsmnt+0x2b/0x340 [ 371.169511][T24204] alloc_vfsmnt+0x2b/0x340 [ 371.169543][T24204] clone_mnt+0x45/0x7a0 [ 371.169627][T24204] ? is_subdir+0x87/0x160 [ 371.169658][T24204] copy_tree+0x2ff/0x850 [ 371.169690][T24204] copy_mnt_ns+0x121/0x5e0 [ 371.169727][T24204] ? kmem_cache_alloc_noprof+0x237/0x340 [ 371.169762][T24204] ? create_new_namespaces+0x3c/0x430 [ 371.169800][T24204] create_new_namespaces+0x89/0x430 [ 371.169835][T24204] ? security_capable+0x81/0x90 [ 371.169926][T24204] unshare_nsproxy_namespaces+0xe6/0x120 [ 371.169964][T24204] ksys_unshare+0x3d3/0x700 [ 371.169993][T24204] __x64_sys_unshare+0x1f/0x30 [ 371.170061][T24204] x64_sys_call+0x2c93/0x2e10 [ 371.170130][T24204] do_syscall_64+0xc9/0x1a0 [ 371.170154][T24204] ? clear_bhb_loop+0x25/0x80 [ 371.170240][T24204] ? clear_bhb_loop+0x25/0x80 [ 371.170299][T24204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.170325][T24204] RIP: 0033:0x7f749a9be169 [ 371.170344][T24204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.170419][T24204] RSP: 002b:00007f7499027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 371.170443][T24204] RAX: ffffffffffffffda RBX: 00007f749abe5fa0 RCX: 00007f749a9be169 [ 371.170458][T24204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 [ 371.170499][T24204] RBP: 00007f7499027090 R08: 0000000000000000 R09: 0000000000000000 [ 371.170510][T24204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.170522][T24204] R13: 0000000000000000 R14: 00007f749abe5fa0 R15: 00007ffffa8b0fa8 [ 371.170542][T24204] [ 371.469696][T24211] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6302'. [ 371.530732][T24217] syzkaller0: entered promiscuous mode [ 371.536352][T24217] syzkaller0: entered allmulticast mode [ 371.559659][T24221] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6308'. [ 371.606121][T24225] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6310'. [ 371.710086][T24230] netlink: 6 bytes leftover after parsing attributes in process `syz.7.6312'. [ 371.745429][T24235] futex_wake_op: syz.7.6314 tries to shift op by 32; fix this program [ 371.777012][T24232] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6313'. [ 371.928963][T24247] vlan0: entered allmulticast mode [ 371.980410][T24252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6322'. [ 372.035889][T24254] loop4: detected capacity change from 0 to 512 [ 372.054484][T24254] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 372.067802][T24254] EXT4-fs (loop4): invalid journal inode [ 372.084487][T24254] EXT4-fs (loop4): can't get journal size [ 372.093234][T24254] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.6323: corrupted in-inode xattr: bad e_name length [ 372.139765][T24254] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.6323: couldn't read orphan inode 15 (err -117) [ 372.174175][T24254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.302423][T24270] vlan0: entered allmulticast mode [ 372.655083][T24282] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6335'. [ 373.144027][T24302] netlink: 6 bytes leftover after parsing attributes in process `syz.7.6344'. [ 373.170957][T22174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.217646][T24312] vlan0: entered allmulticast mode [ 373.270497][T24318] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6350'. [ 373.581774][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 373.581794][ T29] audit: type=1326 audit(1745058611.922:12903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24338 comm="syz.1.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 373.611954][ T29] audit: type=1326 audit(1745058611.922:12904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24338 comm="syz.1.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 373.635652][ T29] audit: type=1326 audit(1745058611.922:12905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24338 comm="syz.1.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 373.659527][ T29] audit: type=1326 audit(1745058611.922:12906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24338 comm="syz.1.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 373.683269][ T29] audit: type=1326 audit(1745058611.922:12907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24338 comm="syz.1.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 373.706801][ T29] audit: type=1326 audit(1745058611.922:12908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24338 comm="syz.1.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 373.730514][ T29] audit: type=1326 audit(1745058611.922:12909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24338 comm="syz.1.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 373.754058][ T29] audit: type=1326 audit(1745058611.922:12910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24338 comm="syz.1.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 373.777801][ T29] audit: type=1326 audit(1745058611.922:12911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24338 comm="syz.1.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 373.801461][ T29] audit: type=1326 audit(1745058611.922:12912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24338 comm="syz.1.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 373.929803][T24355] SET target dimension over the limit! [ 374.074955][T24377] SELinux: security policydb version 18 (MLS) not backwards compatible [ 374.099308][T24377] SELinux: failed to load policy [ 374.130349][T24382] loop4: detected capacity change from 0 to 512 [ 374.137745][T24382] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.145358][T24382] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 374.153483][T24382] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 374.161651][T24382] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 374.166372][T24385] SET target dimension over the limit! [ 374.171234][T24382] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 374.186508][T24382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 374.206138][T24382] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 374.273496][T22174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.305006][T24400] loop4: detected capacity change from 0 to 1024 [ 374.323790][T24400] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 374.336275][T24400] loop4: detected capacity change from 0 to 512 [ 374.354383][T24400] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 374.362549][T24400] EXT4-fs (loop4): orphan cleanup on readonly fs [ 374.370743][T24400] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6381: invalid indirect mapped block 256 (level 2) [ 374.384787][T24400] EXT4-fs (loop4): 2 truncates cleaned up [ 374.392290][T24400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 374.405874][T24400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.429879][T24400] loop4: detected capacity change from 0 to 1024 [ 374.437688][T24400] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 374.446712][T24410] loop6: detected capacity change from 0 to 2048 [ 374.448743][T24400] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 374.468388][T24400] JBD2: no valid journal superblock found [ 374.474189][T24400] EXT4-fs (loop4): Could not load journal inode [ 374.488633][T24400] loop4: detected capacity change from 0 to 512 [ 374.495742][T24400] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 374.516919][T24410] loop6: p1 < > p2 p3 p4 < p5 > [ 374.520297][T24400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.527398][T24410] loop6: p2 size 458752 extends beyond EOD, truncated [ 374.536840][T24400] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 374.552789][T24410] loop6: p3 start 4284289 is beyond EOD, truncated [ 374.559829][T24410] loop6: p5 size 458752 extends beyond EOD, truncated [ 374.580820][T22174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.604467][T24421] Cannot find del_set index 1 as target [ 374.613758][T24421] loop4: detected capacity change from 0 to 512 [ 374.621097][T24421] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 374.630689][T24424] vlan0: entered allmulticast mode [ 374.640619][T24421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.653484][T24421] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.665944][T24421] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6390: corrupted xattr block 32: bad e_name length [ 374.679662][T24421] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 374.688857][T24421] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6390: corrupted xattr block 32: bad e_name length [ 374.702928][T24421] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 374.712030][T24421] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6390: corrupted xattr block 32: bad e_name length [ 374.741206][T22174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.817770][T24430] loop6: detected capacity change from 0 to 512 [ 374.826127][T24430] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.892894][T24429] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6395: bg 0: block 264: padding at end of block bitmap is not set [ 374.908962][T24433] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3758096384 > max in inode 15 [ 374.919670][T24433] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3758096385 > max in inode 15 [ 375.017841][T19731] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.032625][T24446] smc: net device bond0 applied user defined pnetid SYZ2 [ 375.041000][T24446] smc: net device bond0 erased user defined pnetid SYZ2 [ 375.138958][T24461] loop7: detected capacity change from 0 to 16384 [ 375.501927][T24475] veth1_macvtap: left promiscuous mode [ 375.507557][T24475] macsec0: entered promiscuous mode [ 375.512874][T24475] macsec0: entered allmulticast mode [ 375.718574][T24486] Cannot find del_set index 1 as target [ 375.729428][T24486] loop7: detected capacity change from 0 to 512 [ 375.736347][T24486] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 375.748728][T24486] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.762932][T24486] ext4 filesystem being mounted at /417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.779090][T24486] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.6416: corrupted xattr block 32: bad e_name length [ 375.793188][T24486] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 375.802937][T24486] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.6416: corrupted xattr block 32: bad e_name length [ 375.819325][T24486] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 375.835489][T24486] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.6416: corrupted xattr block 32: bad e_name length [ 375.864561][T18805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.885149][T24497] Cannot find del_set index 1 as target [ 375.894883][T24497] loop4: detected capacity change from 0 to 512 [ 375.902280][T24497] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 375.918742][T24497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.931854][T24497] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.945032][T24504] __nla_validate_parse: 7 callbacks suppressed [ 375.945080][T24504] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6420'. [ 375.954011][T24497] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6421: corrupted xattr block 32: bad e_name length [ 375.975527][T24497] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 375.985601][T24497] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6421: corrupted xattr block 32: bad e_name length [ 376.000774][T24497] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 376.001789][T24505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6422'. [ 376.012010][T24497] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6421: corrupted xattr block 32: bad e_name length [ 376.054640][T22174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.070308][T24509] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6425'. [ 376.080465][T24509] macsec0: entered promiscuous mode [ 376.085741][T24509] macsec0: entered allmulticast mode [ 376.164537][T24509] FAULT_INJECTION: forcing a failure. [ 376.164537][T24509] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 376.177948][T24509] CPU: 1 UID: 0 PID: 24509 Comm: syz.1.6425 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 376.177987][T24509] Tainted: [W]=WARN [ 376.177996][T24509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 376.178011][T24509] Call Trace: [ 376.178019][T24509] [ 376.178028][T24509] dump_stack_lvl+0xf6/0x150 [ 376.178057][T24509] dump_stack+0x15/0x1a [ 376.178113][T24509] should_fail_ex+0x261/0x270 [ 376.178140][T24509] should_fail_alloc_page+0xfd/0x110 [ 376.178246][T24509] __alloc_frozen_pages_noprof+0x11d/0x360 [ 376.178272][T24509] alloc_pages_mpol+0xb6/0x260 [ 376.178352][T24509] alloc_pages_noprof+0xe8/0x130 [ 376.178462][T24509] pte_alloc_one+0x2f/0x110 [ 376.178494][T24509] handle_mm_fault+0x1202/0x2e80 [ 376.178540][T24509] __get_user_pages+0xf4e/0x2340 [ 376.178591][T24509] __mm_populate+0x25d/0x3c0 [ 376.178681][T24509] __se_sys_remap_file_pages+0x5c1/0x800 [ 376.178817][T24509] ? fput+0x99/0xd0 [ 376.178880][T24509] ? ksys_write+0x180/0x1b0 [ 376.178899][T24509] __x64_sys_remap_file_pages+0x67/0x80 [ 376.178926][T24509] x64_sys_call+0x29b9/0x2e10 [ 376.179108][T24509] do_syscall_64+0xc9/0x1a0 [ 376.179133][T24509] ? clear_bhb_loop+0x25/0x80 [ 376.179153][T24509] ? clear_bhb_loop+0x25/0x80 [ 376.179249][T24509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.179269][T24509] RIP: 0033:0x7f1aa70de169 [ 376.179284][T24509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.179379][T24509] RSP: 002b:00007f1aa5747038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 376.179438][T24509] RAX: ffffffffffffffda RBX: 00007f1aa7305fa0 RCX: 00007f1aa70de169 [ 376.179450][T24509] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000ba1000 [ 376.179461][T24509] RBP: 00007f1aa5747090 R08: 00000000001c0000 R09: 0000000000000000 [ 376.179472][T24509] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 376.179487][T24509] R13: 0000000000000000 R14: 00007f1aa7305fa0 R15: 00007fff27e59368 [ 376.179547][T24509] [ 376.190008][T24516] hub 2-0:1.0: USB hub found [ 376.349129][T24517] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6427'. [ 376.351927][T24516] hub 2-0:1.0: 8 ports detected [ 376.521667][T24531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6433'. [ 376.585404][T24539] netlink: 'syz.4.6436': attribute type 21 has an invalid length. [ 376.602015][T24539] netlink: 'syz.4.6436': attribute type 10 has an invalid length. [ 376.612453][T24539] batman_adv: batadv0: Adding interface: team0 [ 376.618718][T24539] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.644016][T24539] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 376.654522][T24540] netlink: 'syz.4.6436': attribute type 10 has an invalid length. [ 376.662585][T24540] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6436'. [ 376.674586][T24540] team0: entered promiscuous mode [ 376.679840][T24540] team_slave_0: entered promiscuous mode [ 376.685609][T24540] team_slave_1: entered promiscuous mode [ 376.692256][T24540] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.699999][T24540] batman_adv: batadv0: Interface activated: team0 [ 376.706550][T24540] batman_adv: batadv0: Interface deactivated: team0 [ 376.713267][T24540] batman_adv: batadv0: Removing interface: team0 [ 376.727232][T24540] bridge0: port 3(team0) entered blocking state [ 376.733705][T24540] bridge0: port 3(team0) entered disabled state [ 376.742873][T24540] team0: entered allmulticast mode [ 376.748097][T24540] team_slave_0: entered allmulticast mode [ 376.753839][T24540] team_slave_1: entered allmulticast mode [ 376.761504][T24540] bridge0: port 3(team0) entered blocking state [ 376.767843][T24540] bridge0: port 3(team0) entered forwarding state [ 376.801410][T24550] vlan0: entered allmulticast mode [ 376.949384][T24562] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6447'. [ 376.991131][T24566] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6449'. [ 377.011365][T24569] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6447'. [ 377.057050][T24575] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6449'. [ 377.214484][T24590] vlan2: entered allmulticast mode [ 377.470193][T22363] block device autoloading is deprecated and will be removed. [ 377.935254][T24632] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 377.944086][T24632] SELinux: failed to load policy [ 377.970713][T24635] vlan0: entered allmulticast mode [ 378.200204][T24643] loop7: detected capacity change from 0 to 16384 [ 378.341511][T24657] FAULT_INJECTION: forcing a failure. [ 378.341511][T24657] name failslab, interval 1, probability 0, space 0, times 0 [ 378.354343][T24657] CPU: 1 UID: 0 PID: 24657 Comm: syz.2.6488 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 378.354377][T24657] Tainted: [W]=WARN [ 378.354386][T24657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 378.354402][T24657] Call Trace: [ 378.354409][T24657] [ 378.354419][T24657] dump_stack_lvl+0xf6/0x150 [ 378.354448][T24657] dump_stack+0x15/0x1a [ 378.354470][T24657] should_fail_ex+0x261/0x270 [ 378.354493][T24657] should_failslab+0x8f/0xb0 [ 378.354513][T24657] kmem_cache_alloc_noprof+0x59/0x340 [ 378.354539][T24657] ? mas_alloc_nodes+0x1f4/0x4a0 [ 378.354571][T24657] mas_alloc_nodes+0x1f4/0x4a0 [ 378.354606][T24657] mas_preallocate+0x48d/0x6b0 [ 378.354643][T24657] __split_vma+0x23e/0x630 [ 378.354681][T24657] vms_gather_munmap_vmas+0x2a5/0x790 [ 378.354717][T24657] mmap_region+0x46f/0x1490 [ 378.354746][T24657] ? __rb_insert_augmented+0x2be/0x2d0 [ 378.354769][T24657] ? enqueue_task_fair+0x379/0x9b0 [ 378.354809][T24657] do_mmap+0x9ef/0xc80 [ 378.354840][T24657] vm_mmap_pgoff+0x16d/0x2d0 [ 378.354882][T24657] ksys_mmap_pgoff+0x28a/0x340 [ 378.354909][T24657] x64_sys_call+0x1945/0x2e10 [ 378.354943][T24657] do_syscall_64+0xc9/0x1a0 [ 378.354969][T24657] ? clear_bhb_loop+0x25/0x80 [ 378.354995][T24657] ? clear_bhb_loop+0x25/0x80 [ 378.355020][T24657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.355045][T24657] RIP: 0033:0x7f702665e169 [ 378.355063][T24657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.355080][T24657] RSP: 002b:00007f7024cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 378.355097][T24657] RAX: ffffffffffffffda RBX: 00007f7026885fa0 RCX: 00007f702665e169 [ 378.355108][T24657] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 378.355123][T24657] RBP: 00007f7024cc7090 R08: 0000000000000006 R09: 0000000000000000 [ 378.355136][T24657] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 378.355147][T24657] R13: 0000000000000000 R14: 00007f7026885fa0 R15: 00007ffef1e3a068 [ 378.355164][T24657] [ 378.652307][T24667] loop2: detected capacity change from 0 to 764 [ 378.693366][T24663] FAULT_INJECTION: forcing a failure. [ 378.693366][T24663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.706708][T24663] CPU: 0 UID: 0 PID: 24663 Comm: syz.6.6491 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 378.706744][T24663] Tainted: [W]=WARN [ 378.706751][T24663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 378.706844][T24663] Call Trace: [ 378.706851][T24663] [ 378.706859][T24663] dump_stack_lvl+0xf6/0x150 [ 378.706884][T24663] dump_stack+0x15/0x1a [ 378.706900][T24663] should_fail_ex+0x261/0x270 [ 378.706935][T24663] should_fail+0xb/0x10 [ 378.706970][T24663] should_fail_usercopy+0x1a/0x20 [ 378.706995][T24663] _copy_from_user+0x1c/0xa0 [ 378.707068][T24663] copy_msghdr_from_user+0x54/0x2b0 [ 378.707100][T24663] ? __fget_files+0x186/0x1c0 [ 378.707182][T24663] __sys_sendmsg+0x141/0x240 [ 378.707226][T24663] __x64_sys_sendmsg+0x46/0x50 [ 378.707250][T24663] x64_sys_call+0x26f3/0x2e10 [ 378.707297][T24663] do_syscall_64+0xc9/0x1a0 [ 378.707323][T24663] ? clear_bhb_loop+0x25/0x80 [ 378.707345][T24663] ? clear_bhb_loop+0x25/0x80 [ 378.707436][T24663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.707457][T24663] RIP: 0033:0x7fb73e0be169 [ 378.707472][T24663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.707490][T24663] RSP: 002b:00007fb73c727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.707509][T24663] RAX: ffffffffffffffda RBX: 00007fb73e2e5fa0 RCX: 00007fb73e0be169 [ 378.707521][T24663] RDX: 0000000020000800 RSI: 00002000000000c0 RDI: 0000000000000005 [ 378.707534][T24663] RBP: 00007fb73c727090 R08: 0000000000000000 R09: 0000000000000000 [ 378.707598][T24663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.707610][T24663] R13: 0000000000000000 R14: 00007fb73e2e5fa0 R15: 00007ffceccb3488 [ 378.707629][T24663] [ 378.709291][T24671] loop4: detected capacity change from 0 to 256 [ 378.909714][T24671] FAULT_INJECTION: forcing a failure. [ 378.909714][T24671] name failslab, interval 1, probability 0, space 0, times 0 [ 378.922501][T24671] CPU: 0 UID: 0 PID: 24671 Comm: syz.4.6495 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 378.922587][T24671] Tainted: [W]=WARN [ 378.922594][T24671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 378.922618][T24671] Call Trace: [ 378.922625][T24671] [ 378.922633][T24671] dump_stack_lvl+0xf6/0x150 [ 378.922663][T24671] dump_stack+0x15/0x1a [ 378.922681][T24671] should_fail_ex+0x261/0x270 [ 378.922705][T24671] should_failslab+0x8f/0xb0 [ 378.922726][T24671] kmem_cache_alloc_noprof+0x59/0x340 [ 378.922873][T24671] ? __blockdev_direct_IO+0x130/0x1ef0 [ 378.922912][T24671] __blockdev_direct_IO+0x130/0x1ef0 [ 378.922939][T24671] ? page_counter_charge+0x21a/0x240 [ 378.922974][T24671] ? __pfx_fat_get_block+0x10/0x10 [ 378.923014][T24671] ? obj_cgroup_charge+0x124/0x170 [ 378.923049][T24671] ? should_fail_ex+0x31/0x270 [ 378.923073][T24671] ? __rcu_read_unlock+0x4e/0x70 [ 378.923109][T24671] fat_direct_IO+0x10a/0x1d0 [ 378.923192][T24671] generic_file_read_iter+0x227/0x330 [ 378.923219][T24671] copy_splice_read+0x390/0x5d0 [ 378.923280][T24671] ? __pfx_filemap_splice_read+0x10/0x10 [ 378.923312][T24671] splice_direct_to_actor+0x28e/0x680 [ 378.923382][T24671] ? __pfx_direct_splice_actor+0x10/0x10 [ 378.923458][T24671] do_splice_direct+0xd9/0x150 [ 378.923492][T24671] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 378.923564][T24671] do_sendfile+0x40a/0x690 [ 378.923602][T24671] __x64_sys_sendfile64+0x113/0x160 [ 378.923630][T24671] x64_sys_call+0xfc3/0x2e10 [ 378.923710][T24671] do_syscall_64+0xc9/0x1a0 [ 378.923741][T24671] ? clear_bhb_loop+0x25/0x80 [ 378.923768][T24671] ? clear_bhb_loop+0x25/0x80 [ 378.923802][T24671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.923826][T24671] RIP: 0033:0x7f3027b2e169 [ 378.923842][T24671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.923863][T24671] RSP: 002b:00007f3026197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 378.923995][T24671] RAX: ffffffffffffffda RBX: 00007f3027d55fa0 RCX: 00007f3027b2e169 [ 378.924012][T24671] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 378.924077][T24671] RBP: 00007f3026197090 R08: 0000000000000000 R09: 0000000000000000 [ 378.924088][T24671] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 378.924100][T24671] R13: 0000000000000000 R14: 00007f3027d55fa0 R15: 00007ffe1003e998 [ 378.924121][T24671] [ 379.296122][T24681] loop6: detected capacity change from 0 to 128 [ 379.395614][T24693] loop4: detected capacity change from 0 to 512 [ 379.415112][T24693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.431115][T24707] hub 2-0:1.0: USB hub found [ 379.435876][T24707] hub 2-0:1.0: 8 ports detected [ 379.491423][T24692] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6503: bg 0: block 264: padding at end of block bitmap is not set [ 379.496683][T24707] Invalid logical block size (6) [ 379.509728][T24702] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3758096384 > max in inode 15 [ 379.521989][T24702] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3758096385 > max in inode 15 [ 379.588906][T24719] loop2: detected capacity change from 0 to 512 [ 379.600247][T24721] loop7: detected capacity change from 0 to 2048 [ 379.611443][T24719] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 379.632003][T24719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.652622][T24719] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.673785][T24719] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.6511: corrupted xattr block 32: bad e_name length [ 379.689826][T24719] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 379.691498][T22174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.707966][T24719] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.6511: corrupted xattr block 32: bad e_name length [ 379.722704][T24719] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 379.733837][T24719] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.6511: corrupted xattr block 32: bad e_name length [ 379.763001][T24727] loop7: detected capacity change from 0 to 764 [ 379.772475][T23112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.782336][T24727] rock: directory entry would overflow storage [ 379.788581][T24727] rock: sig=0x4654, size=5, remaining=4 [ 379.801828][ T29] kauditd_printk_skb: 1330 callbacks suppressed [ 379.801847][ T29] audit: type=1400 audit(1745058618.142:14243): avc: denied { append } for pid=24726 comm="syz.7.6514" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 379.834368][T24732] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 379.885318][T24741] loop2: detected capacity change from 0 to 512 [ 379.893614][T24741] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 379.919391][T24741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.932554][T24741] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.950861][T24746] loop7: detected capacity change from 0 to 512 [ 379.959259][T24741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.966760][T24741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.976191][T24746] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.990694][T24741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.998231][T24741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.065369][T24739] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6520: bg 0: block 264: padding at end of block bitmap is not set [ 380.099992][T24750] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3758096384 > max in inode 15 [ 380.110434][T24750] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3758096385 > max in inode 15 [ 380.288349][T24757] loop6: detected capacity change from 0 to 2048 [ 380.349271][ T29] audit: type=1326 audit(1745058618.692:14244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24758 comm="syz.1.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 380.408756][ T29] audit: type=1326 audit(1745058618.692:14245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24758 comm="syz.1.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 380.432447][ T29] audit: type=1326 audit(1745058618.692:14246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24758 comm="syz.1.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 380.456112][ T29] audit: type=1326 audit(1745058618.692:14247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24758 comm="syz.1.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 380.479647][ T29] audit: type=1326 audit(1745058618.692:14248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24758 comm="syz.1.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 380.503342][ T29] audit: type=1326 audit(1745058618.692:14249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24758 comm="syz.1.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 380.526959][ T29] audit: type=1326 audit(1745058618.692:14250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24758 comm="syz.1.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 380.550704][ T29] audit: type=1326 audit(1745058618.692:14251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24758 comm="syz.1.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 380.574343][ T29] audit: type=1326 audit(1745058618.692:14252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24758 comm="syz.1.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa70de169 code=0x7ffc0000 [ 380.656291][T23112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.670455][T24771] FAULT_INJECTION: forcing a failure. [ 380.670455][T24771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.683674][T24771] CPU: 1 UID: 0 PID: 24771 Comm: syz.6.6530 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 380.683792][T24771] Tainted: [W]=WARN [ 380.683801][T24771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 380.683815][T24771] Call Trace: [ 380.683822][T24771] [ 380.683832][T24771] dump_stack_lvl+0xf6/0x150 [ 380.683881][T24771] dump_stack+0x15/0x1a [ 380.683900][T24771] should_fail_ex+0x261/0x270 [ 380.683923][T24771] should_fail+0xb/0x10 [ 380.683961][T24771] should_fail_usercopy+0x1a/0x20 [ 380.683988][T24771] _copy_to_user+0x20/0xa0 [ 380.684022][T24771] simple_read_from_buffer+0xb2/0x130 [ 380.684062][T24771] proc_fail_nth_read+0x103/0x140 [ 380.684169][T24771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.684210][T24771] vfs_read+0x1b2/0x710 [ 380.684231][T24771] ? __rcu_read_unlock+0x4e/0x70 [ 380.684333][T24771] ? __fget_files+0x186/0x1c0 [ 380.684364][T24771] ksys_read+0xeb/0x1b0 [ 380.684388][T24771] __x64_sys_read+0x42/0x50 [ 380.684409][T24771] x64_sys_call+0x2a3b/0x2e10 [ 380.684435][T24771] do_syscall_64+0xc9/0x1a0 [ 380.684506][T24771] ? clear_bhb_loop+0x25/0x80 [ 380.684557][T24771] ? clear_bhb_loop+0x25/0x80 [ 380.684583][T24771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.684680][T24771] RIP: 0033:0x7fb73e0bcb7c [ 380.684709][T24771] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 380.684731][T24771] RSP: 002b:00007fb73c727030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.684758][T24771] RAX: ffffffffffffffda RBX: 00007fb73e2e5fa0 RCX: 00007fb73e0bcb7c [ 380.684774][T24771] RDX: 000000000000000f RSI: 00007fb73c7270a0 RDI: 0000000000000004 [ 380.684857][T24771] RBP: 00007fb73c727090 R08: 0000000000000000 R09: 0000000000000000 [ 380.684872][T24771] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 380.684887][T24771] R13: 0000000000000000 R14: 00007fb73e2e5fa0 R15: 00007ffceccb3488 [ 380.684911][T24771] [ 380.941069][T18805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.970892][T24785] netlink: 'syz.6.6536': attribute type 10 has an invalid length. [ 380.981209][T24786] netlink: 'syz.7.6535': attribute type 21 has an invalid length. [ 380.990083][T24785] batman_adv: batadv0: Adding interface: team0 [ 380.996443][T24785] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.021698][T24785] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 381.034774][T24785] netlink: 'syz.6.6536': attribute type 10 has an invalid length. [ 381.042718][T24785] __nla_validate_parse: 12 callbacks suppressed [ 381.042734][T24785] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6536'. [ 381.044081][T24786] netlink: 'syz.7.6535': attribute type 10 has an invalid length. [ 381.050849][T24785] team0: entered promiscuous mode [ 381.058212][T24786] netlink: 2 bytes leftover after parsing attributes in process `syz.7.6535'. [ 381.080010][T24785] team_slave_0: entered promiscuous mode [ 381.085729][T24785] team_slave_1: entered promiscuous mode [ 381.092619][T24785] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.099761][T24785] batman_adv: batadv0: Interface activated: team0 [ 381.106278][T24785] batman_adv: batadv0: Interface deactivated: team0 [ 381.113115][T24785] batman_adv: batadv0: Removing interface: team0 [ 381.120412][T24785] bridge0: port 3(team0) entered blocking state [ 381.126913][T24785] bridge0: port 3(team0) entered disabled state [ 381.133303][T24785] team0: entered allmulticast mode [ 381.138496][T24785] team_slave_0: entered allmulticast mode [ 381.144233][T24785] team_slave_1: entered allmulticast mode [ 381.151643][T24785] bridge0: port 3(team0) entered blocking state [ 381.157938][T24785] bridge0: port 3(team0) entered forwarding state [ 381.202555][T24795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6539'. [ 381.254302][T24803] loop2: detected capacity change from 0 to 512 [ 381.262537][T24803] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 381.276185][T24803] EXT4-fs (loop2): invalid journal inode [ 381.282163][T24803] EXT4-fs (loop2): can't get journal size [ 381.289545][T24803] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.6544: corrupted in-inode xattr: bad e_name length [ 381.313733][T24803] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.6544: couldn't read orphan inode 15 (err -117) [ 381.329677][T24803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.347734][T24811] loop7: detected capacity change from 0 to 512 [ 381.358736][T24811] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.401286][T24810] loop6: detected capacity change from 0 to 1024 [ 381.422553][T24810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.488409][T24811] netlink: 6 bytes leftover after parsing attributes in process `syz.7.6545'. [ 381.501121][T19731] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.546201][T24818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6548'. [ 381.618817][T24805] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6545: bg 0: block 264: padding at end of block bitmap is not set [ 381.655555][T24821] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3758096384 > max in inode 15 [ 381.668695][T24821] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3758096385 > max in inode 15 [ 382.122840][T24847] FAULT_INJECTION: forcing a failure. [ 382.122840][T24847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.135981][T24847] CPU: 0 UID: 0 PID: 24847 Comm: syz.4.6560 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 382.136040][T24847] Tainted: [W]=WARN [ 382.136048][T24847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 382.136141][T24847] Call Trace: [ 382.136149][T24847] [ 382.136157][T24847] dump_stack_lvl+0xf6/0x150 [ 382.136180][T24847] dump_stack+0x15/0x1a [ 382.136196][T24847] should_fail_ex+0x261/0x270 [ 382.136219][T24847] should_fail+0xb/0x10 [ 382.136242][T24847] should_fail_usercopy+0x1a/0x20 [ 382.136318][T24847] _copy_from_user+0x1c/0xa0 [ 382.136353][T24847] copy_msghdr_from_user+0x54/0x2b0 [ 382.136384][T24847] ? __fget_files+0x186/0x1c0 [ 382.136407][T24847] __sys_sendmsg+0x141/0x240 [ 382.136450][T24847] __x64_sys_sendmsg+0x46/0x50 [ 382.136543][T24847] x64_sys_call+0x26f3/0x2e10 [ 382.136570][T24847] do_syscall_64+0xc9/0x1a0 [ 382.136606][T24847] ? clear_bhb_loop+0x25/0x80 [ 382.136679][T24847] ? clear_bhb_loop+0x25/0x80 [ 382.136706][T24847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.136801][T24847] RIP: 0033:0x7f3027b2e169 [ 382.136818][T24847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.136840][T24847] RSP: 002b:00007f3026197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.136862][T24847] RAX: ffffffffffffffda RBX: 00007f3027d55fa0 RCX: 00007f3027b2e169 [ 382.136877][T24847] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 382.136944][T24847] RBP: 00007f3026197090 R08: 0000000000000000 R09: 0000000000000000 [ 382.136959][T24847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.136974][T24847] R13: 0000000000000000 R14: 00007f3027d55fa0 R15: 00007ffe1003e998 [ 382.136998][T24847] [ 382.415909][T23112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.441680][T24854] loop6: detected capacity change from 0 to 512 [ 382.448428][T18805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.458059][T24854] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 382.473739][T24854] EXT4-fs (loop6): 1 truncate cleaned up [ 382.484833][T24854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.501424][T24854] FAULT_INJECTION: forcing a failure. [ 382.501424][T24854] name failslab, interval 1, probability 0, space 0, times 0 [ 382.514239][T24854] CPU: 1 UID: 0 PID: 24854 Comm: syz.6.6565 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 382.514280][T24854] Tainted: [W]=WARN [ 382.514289][T24854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 382.514305][T24854] Call Trace: [ 382.514314][T24854] [ 382.514356][T24854] dump_stack_lvl+0xf6/0x150 [ 382.514462][T24854] dump_stack+0x15/0x1a [ 382.514479][T24854] should_fail_ex+0x261/0x270 [ 382.514508][T24854] should_failslab+0x8f/0xb0 [ 382.514533][T24854] kmem_cache_alloc_noprof+0x59/0x340 [ 382.514629][T24854] ? getname_flags+0x81/0x3b0 [ 382.514659][T24854] getname_flags+0x81/0x3b0 [ 382.514686][T24854] __x64_sys_unlink+0x21/0x40 [ 382.514708][T24854] x64_sys_call+0x2358/0x2e10 [ 382.514761][T24854] do_syscall_64+0xc9/0x1a0 [ 382.514790][T24854] ? clear_bhb_loop+0x25/0x80 [ 382.514814][T24854] ? clear_bhb_loop+0x25/0x80 [ 382.514845][T24854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.514876][T24854] RIP: 0033:0x7fb73e0be169 [ 382.514891][T24854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.514909][T24854] RSP: 002b:00007fb73c727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 382.514926][T24854] RAX: ffffffffffffffda RBX: 00007fb73e2e5fa0 RCX: 00007fb73e0be169 [ 382.514944][T24854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 382.514957][T24854] RBP: 00007fb73c727090 R08: 0000000000000000 R09: 0000000000000000 [ 382.514969][T24854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.514983][T24854] R13: 0000000000000000 R14: 00007fb73e2e5fa0 R15: 00007ffceccb3488 [ 382.515007][T24854] [ 382.701387][T19731] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.721783][T24869] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 382.784681][T24874] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6571'. [ 382.816390][T24876] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6572'. [ 382.881553][T24877] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6572'. [ 382.999980][T24880] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6573'. [ 383.314186][T24886] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 383.343811][T24889] loop4: detected capacity change from 0 to 2048 [ 383.432449][T24893] smc: net device bond0 applied user defined pnetid SYZ0 [ 383.441894][T24890] loop6: detected capacity change from 0 to 512 [ 383.451665][T24893] FAULT_INJECTION: forcing a failure. [ 383.451665][T24893] name failslab, interval 1, probability 0, space 0, times 0 [ 383.464388][T24893] CPU: 0 UID: 0 PID: 24893 Comm: syz.2.6578 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 383.464420][T24893] Tainted: [W]=WARN [ 383.464428][T24893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 383.464444][T24893] Call Trace: [ 383.464453][T24893] [ 383.464463][T24893] dump_stack_lvl+0xf6/0x150 [ 383.464494][T24893] dump_stack+0x15/0x1a [ 383.464515][T24893] should_fail_ex+0x261/0x270 [ 383.464543][T24893] should_failslab+0x8f/0xb0 [ 383.464568][T24893] __kmalloc_noprof+0xad/0x410 [ 383.464654][T24893] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 383.464800][T24893] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 383.464835][T24893] ? ns_capable+0x7d/0xb0 [ 383.464875][T24893] genl_rcv_msg+0x486/0x6f0 [ 383.464917][T24893] ? __pfx_smc_pnet_flush+0x10/0x10 [ 383.464953][T24893] ? pick_next_task_fair+0x20/0x2c0 [ 383.464978][T24893] ? _raw_spin_unlock+0x26/0x50 [ 383.465005][T24893] ? __schedule+0x85f/0xb70 [ 383.465118][T24893] ? __cond_resched+0x53/0x90 [ 383.465172][T24893] netlink_rcv_skb+0x12f/0x230 [ 383.465189][T24893] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.465228][T24893] genl_rcv+0x28/0x40 [ 383.465282][T24893] netlink_unicast+0x605/0x6c0 [ 383.465343][T24893] netlink_sendmsg+0x609/0x720 [ 383.465367][T24893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.465387][T24893] __sock_sendmsg+0x140/0x180 [ 383.465473][T24893] ____sys_sendmsg+0x350/0x4e0 [ 383.465508][T24893] __sys_sendmsg+0x1a0/0x240 [ 383.465550][T24893] __x64_sys_sendmsg+0x46/0x50 [ 383.465573][T24893] x64_sys_call+0x26f3/0x2e10 [ 383.465667][T24893] do_syscall_64+0xc9/0x1a0 [ 383.465698][T24893] ? clear_bhb_loop+0x25/0x80 [ 383.465736][T24893] ? clear_bhb_loop+0x25/0x80 [ 383.465763][T24893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.465789][T24893] RIP: 0033:0x7f702665e169 [ 383.465809][T24893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.465828][T24893] RSP: 002b:00007f7024ca6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.465851][T24893] RAX: ffffffffffffffda RBX: 00007f7026886080 RCX: 00007f702665e169 [ 383.465885][T24893] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 383.465899][T24893] RBP: 00007f7024ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 383.465910][T24893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.465921][T24893] R13: 0000000000000000 R14: 00007f7026886080 R15: 00007ffef1e3a068 [ 383.466018][T24893] [ 383.718839][T24890] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 383.755947][T24890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.771514][T24890] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.785617][T24900] netlink: 'syz.7.6580': attribute type 21 has an invalid length. [ 383.789166][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6575'. [ 383.802566][T24890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.810044][T24890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.840918][T24890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.848450][T24890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.862214][T24902] netlink: 'syz.7.6580': attribute type 10 has an invalid length. [ 383.909150][T24908] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 383.919275][T24909] netlink: 'syz.7.6580': attribute type 10 has an invalid length. [ 383.952059][T24914] macvtap0: entered promiscuous mode [ 383.958576][T24914] team0: Device macvtap0 failed to register rx_handler [ 384.148865][T19731] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.166327][T24930] loop7: detected capacity change from 0 to 16384 [ 384.276952][T24939] netlink: 'syz.1.6597': attribute type 21 has an invalid length. [ 384.290068][T24939] netlink: 'syz.1.6597': attribute type 10 has an invalid length. [ 384.301345][T24939] batman_adv: batadv0: Adding interface: team0 [ 384.307671][T24939] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.332967][T24939] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 384.343032][T24940] netlink: 'syz.1.6597': attribute type 10 has an invalid length. [ 384.351668][T24940] team0: entered promiscuous mode [ 384.356815][T24940] team_slave_0: entered promiscuous mode [ 384.362737][T24940] team_slave_1: entered promiscuous mode [ 384.369197][T24940] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.376395][T24940] batman_adv: batadv0: Interface activated: team0 [ 384.382972][T24940] batman_adv: batadv0: Interface deactivated: team0 [ 384.389733][T24940] batman_adv: batadv0: Removing interface: team0 [ 384.397943][T24940] bridge0: port 3(team0) entered blocking state [ 384.404248][T24940] bridge0: port 3(team0) entered disabled state [ 384.410824][T24940] team0: entered allmulticast mode [ 384.415970][T24940] team_slave_0: entered allmulticast mode [ 384.421795][T24940] team_slave_1: entered allmulticast mode [ 384.444407][T24942] loop6: detected capacity change from 0 to 512 [ 384.451610][T24942] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 384.468645][T24942] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.481259][T24942] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.506286][T19731] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.600928][T24960] loop2: detected capacity change from 0 to 512 [ 384.630711][T24960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.719688][T24959] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6606: bg 0: block 264: padding at end of block bitmap is not set [ 384.756766][T24968] loop7: detected capacity change from 16384 to 16383 [ 384.827078][T24971] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3758096384 > max in inode 15 [ 384.842268][T24978] loop4: detected capacity change from 0 to 512 [ 384.859852][T24971] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3758096385 > max in inode 15 [ 384.870227][T24978] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 384.917172][T24978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.932963][T24978] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.964776][T24986] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 384.994818][T22174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.023156][T23112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.039508][T24994] vlan0: entered allmulticast mode [ 385.047639][T24996] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 385.056366][T24996] SELinux: failed to load policy [ 385.258523][T25019] serio: Serial port ptm0 [ 385.724338][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 385.724353][ T29] audit: type=1400 audit(1745058624.062:14269): avc: denied { bind } for pid=25029 comm="syz.6.6633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 385.725779][T25030] FAULT_INJECTION: forcing a failure. [ 385.725779][T25030] name failslab, interval 1, probability 0, space 0, times 0 [ 385.762925][T25030] CPU: 0 UID: 0 PID: 25030 Comm: syz.6.6633 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 385.762963][T25030] Tainted: [W]=WARN [ 385.762970][T25030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 385.762988][T25030] Call Trace: [ 385.762994][T25030] [ 385.763004][T25030] dump_stack_lvl+0xf6/0x150 [ 385.763032][T25030] dump_stack+0x15/0x1a [ 385.763048][T25030] should_fail_ex+0x261/0x270 [ 385.763147][T25030] should_failslab+0x8f/0xb0 [ 385.763168][T25030] __kmalloc_cache_noprof+0x55/0x320 [ 385.763205][T25030] ? tipc_group_create+0x63/0x2b0 [ 385.763247][T25030] tipc_group_create+0x63/0x2b0 [ 385.763332][T25030] tipc_sk_join+0x13f/0x2f0 [ 385.763361][T25030] tipc_setsockopt+0x641/0x6c0 [ 385.763394][T25030] ? __pfx_tipc_setsockopt+0x10/0x10 [ 385.763427][T25030] __sys_setsockopt+0x187/0x200 [ 385.763477][T25030] __x64_sys_setsockopt+0x66/0x80 [ 385.763579][T25030] x64_sys_call+0x2a09/0x2e10 [ 385.763603][T25030] do_syscall_64+0xc9/0x1a0 [ 385.763627][T25030] ? clear_bhb_loop+0x25/0x80 [ 385.763691][T25030] ? clear_bhb_loop+0x25/0x80 [ 385.763711][T25030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.763812][T25030] RIP: 0033:0x7fb73e0be169 [ 385.763826][T25030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.763842][T25030] RSP: 002b:00007fb73c727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 385.763886][T25030] RAX: ffffffffffffffda RBX: 00007fb73e2e5fa0 RCX: 00007fb73e0be169 [ 385.763902][T25030] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000008 [ 385.763914][T25030] RBP: 00007fb73c727090 R08: 0000000000000010 R09: 0000000000000000 [ 385.763925][T25030] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 385.763937][T25030] R13: 0000000000000000 R14: 00007fb73e2e5fa0 R15: 00007ffceccb3488 [ 385.763961][T25030] [ 385.984768][T25034] loop7: detected capacity change from 0 to 16384 [ 385.994557][T25032] vlan0: entered allmulticast mode [ 386.086322][ T29] audit: type=1326 audit(1745058624.422:14270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25046 comm="syz.7.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749a9be169 code=0x7ffc0000 [ 386.117729][T25048] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 386.149933][ T29] audit: type=1326 audit(1745058624.422:14271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25046 comm="syz.7.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749a9be169 code=0x7ffc0000 [ 386.173611][ T29] audit: type=1326 audit(1745058624.422:14272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25046 comm="syz.7.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f749a9be169 code=0x7ffc0000 [ 386.197373][ T29] audit: type=1326 audit(1745058624.422:14273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25046 comm="syz.7.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749a9be169 code=0x7ffc0000 [ 386.221129][ T29] audit: type=1326 audit(1745058624.422:14274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25046 comm="syz.7.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f749a9be169 code=0x7ffc0000 [ 386.244911][ T29] audit: type=1326 audit(1745058624.422:14275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25046 comm="syz.7.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749a9be169 code=0x7ffc0000 [ 386.268558][ T29] audit: type=1326 audit(1745058624.422:14276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25046 comm="syz.7.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f749a9be169 code=0x7ffc0000 [ 386.292178][ T29] audit: type=1326 audit(1745058624.422:14277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25046 comm="syz.7.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749a9be169 code=0x7ffc0000 [ 386.315776][ T29] audit: type=1326 audit(1745058624.422:14278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25046 comm="syz.7.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f749a9be169 code=0x7ffc0000 [ 386.320151][T25058] __nla_validate_parse: 7 callbacks suppressed [ 386.320172][T25058] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6644'. [ 386.371726][T25060] FAULT_INJECTION: forcing a failure. [ 386.371726][T25060] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 386.385194][T25060] CPU: 1 UID: 0 PID: 25060 Comm: syz.1.6646 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 386.385222][T25060] Tainted: [W]=WARN [ 386.385228][T25060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 386.385239][T25060] Call Trace: [ 386.385255][T25060] [ 386.385262][T25060] dump_stack_lvl+0xf6/0x150 [ 386.385284][T25060] dump_stack+0x15/0x1a [ 386.385301][T25060] should_fail_ex+0x261/0x270 [ 386.385322][T25060] should_fail_alloc_page+0xfd/0x110 [ 386.385343][T25060] __alloc_frozen_pages_noprof+0x11d/0x360 [ 386.385421][T25060] alloc_pages_mpol+0xb6/0x260 [ 386.385454][T25060] vma_alloc_folio_noprof+0x19c/0x300 [ 386.385484][T25060] do_wp_page+0x64f/0x24e0 [ 386.385505][T25060] ? __rcu_read_lock+0x36/0x50 [ 386.385531][T25060] handle_mm_fault+0xc6c/0x2e80 [ 386.385560][T25060] ? mas_walk+0x204/0x320 [ 386.385580][T25060] ? __rcu_read_unlock+0x4e/0x70 [ 386.385670][T25060] exc_page_fault+0x3b9/0x6a0 [ 386.385690][T25060] asm_exc_page_fault+0x26/0x30 [ 386.385707][T25060] RIP: 0033:0x7f1aa6fa0be3 [ 386.385720][T25060] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 386.385736][T25060] RSP: 002b:00007f1aa57464a0 EFLAGS: 00010202 [ 386.385797][T25060] RAX: 0000000000000400 RBX: 00007f1aa5746540 RCX: 00007f1a9d327000 [ 386.385807][T25060] RDX: 00007f1aa57466e0 RSI: 0000000000000059 RDI: 00007f1aa57465e0 [ 386.385818][T25060] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000af [ 386.385828][T25060] R10: 00000000000000c6 R11: 00007f1aa5746540 R12: 0000000000000001 [ 386.385838][T25060] R13: 00007f1aa717bf40 R14: 0000000000000020 R15: 00007f1aa57465e0 [ 386.385855][T25060] [ 386.385864][T25060] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 386.420155][T25057] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6644'. [ 386.528668][T25067] vlan0: entered allmulticast mode [ 387.078370][T25086] loop2: detected capacity change from 0 to 764 [ 387.091190][T25086] rock: directory entry would overflow storage [ 387.097447][T25086] rock: sig=0x4654, size=5, remaining=4 [ 387.140768][T25091] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6659'. [ 387.151864][T25091] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6659'. [ 387.205518][T25100] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 387.249533][T25106] loop7: detected capacity change from 0 to 2048 [ 387.349172][T25116] loop7: detected capacity change from 0 to 2048 [ 387.397990][T25116] Alternate GPT is invalid, using primary GPT. [ 387.404372][T25116] loop7: p1 p2 p3 [ 387.418257][T25118] ================================================================== [ 387.426378][T25118] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 387.434105][T25118] [ 387.436421][T25118] write to 0xffff88810fb7d010 of 8 bytes by task 25115 on cpu 0: [ 387.444131][T25118] mas_wr_store_entry+0x1266/0x2460 [ 387.449331][T25118] mas_store_prealloc+0x6d5/0x960 [ 387.454359][T25118] commit_merge+0x685/0x710 [ 387.458885][T25118] vma_expand+0x1d9/0x380 [ 387.463216][T25118] vma_merge_new_range+0x2c2/0x340 [ 387.468339][T25118] mmap_region+0x805/0x1490 [ 387.472868][T25118] do_mmap+0x9ef/0xc80 [ 387.476934][T25118] vm_mmap_pgoff+0x16d/0x2d0 [ 387.481534][T25118] ksys_mmap_pgoff+0xd0/0x340 [ 387.486211][T25118] x64_sys_call+0x1945/0x2e10 [ 387.490897][T25118] do_syscall_64+0xc9/0x1a0 [ 387.495407][T25118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.501304][T25118] [ 387.503623][T25118] read to 0xffff88810fb7d010 of 8 bytes by task 25118 on cpu 1: [ 387.511248][T25118] mtree_range_walk+0x1b3/0x460 [ 387.516136][T25118] mas_walk+0x16e/0x320 [ 387.520309][T25118] lock_vma_under_rcu+0xa7/0x340 [ 387.525261][T25118] exc_page_fault+0x150/0x6a0 [ 387.529940][T25118] asm_exc_page_fault+0x26/0x30 [ 387.534789][T25118] [ 387.537106][T25118] value changed: 0x00007f7498fe5fff -> 0xffffffff8561e830 [ 387.544212][T25118] [ 387.546533][T25118] Reported by Kernel Concurrency Sanitizer on: [ 387.552682][T25118] CPU: 1 UID: 0 PID: 25118 Comm: syz.7.6670 Tainted: G W 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 387.566765][T25118] Tainted: [W]=WARN [ 387.570578][T25118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 387.580636][T25118] ==================================================================