last executing test programs: 16.039178424s ago: executing program 2 (id=170): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) 16.002806585s ago: executing program 2 (id=173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x84, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x39}}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000060}, 0x81) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) init_module(&(0x7f0000001380)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x66, 0xb3, 0xe1, 0x4, 0x2, 0x3, 0x7f, 0x12, 0x40, 0x1ff, 0x6, 0x5, 0x38, 0x3, 0x9, 0x7, 0x4}, [{0x60000000, 0x40, 0x4, 0x6, 0x2, 0x2, 0x4000000000000000, 0x3}, {0x0, 0xca, 0x23b6, 0x8, 0x8, 0x3, 0x9, 0x5}, {0x5, 0x6, 0x9, 0x6, 0x6, 0x800, 0xd03, 0x7e5}], "5191c4a671f970b45e575cd2f3ac6449f665fd439fefc2ee02d1565d9872e77607b135f659d21eeff232bc4b3a987b981f76426daf91ef353b51e0f568b1251174ad3406f38599504bde767c7c967718c76018066af1d2990f33d3ed64bce4d2e052f3c2d55853426a1a6e4e6ca730b3cfc2ccc68d1b2235b85425fe308dc00501884ad908aae06f6532fae1db30afdd1d370d016ac3d1f0e95723363ba077886433acf50099fa2ca21b0d1d683ab28cb933d3e7a764c545080587734b14368f73baac7b3794d1c29299b2aa7e792eb1305f4933358d769530dc5132eb64a4d865c1fd9a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xbcc, &(0x7f0000000180)='\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00'], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000200)='./file0\x00', 0x404600, 0x110) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000002}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x10000000, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20048880) 15.914557876s ago: executing program 2 (id=176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x8c, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x958}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x101}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x681b}]}]}, 0x8c}}, 0x20044000) 15.890704716s ago: executing program 2 (id=177): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080000000000000002000002907800000000e00003f962aa273a001100907800000000"], 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) prctl$PR_SET_NAME(0xf, 0x0) sendfile(r4, r4, 0x0, 0x7a680000) truncate(&(0x7f0000000200)='./file2\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x301001, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r7}, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x20000b) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff00000071120a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80600a, 0x0) 15.521998531s ago: executing program 2 (id=190): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="60afc502da2a201b2593086506763d74ddc1cda37433efc0fbf5c14d40d35a1cdbe60e84814dfd69a72b372d6dc46755af6a64", 0x33}], 0x1, 0x5, 0x6, 0x10) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x52b242d) keyctl$search(0xa, r1, 0x0, 0x0, r1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x1a) close(r5) 14.245709557s ago: executing program 2 (id=215): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) (fail_nth: 7) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./bus\x00', 0xe, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {}, {@noload}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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") msgsnd(0x0, 0x0, 0x8, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 14.215505377s ago: executing program 32 (id=215): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) (fail_nth: 7) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./bus\x00', 0xe, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {}, {@noload}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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") msgsnd(0x0, 0x0, 0x8, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 2.064100674s ago: executing program 4 (id=462): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) (fail_nth: 7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.024815684s ago: executing program 3 (id=463): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400880, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000040)={0xa, "c3f40df23f548abe7c6b167a9f1d5f500077f47eaac62d703dabf2e4ce2fecf4f3ec33978c15a54e288b5ac506f086347ae3a8e961c749e5039c61ceb17d7ffbef4443f7d4b97bb7dae097d8483be94a087c4d9dd43fa037db773e3fbb3cbfb68c31c0c47fa8ae6f680694b1e742c95fb0adde72a0a9a8ddd19c20a5a2344dd909fd81793f15c7b1adff34ec01085e78b3541062c0539c56694ea123858e30b9811b4c1a0bff9cdf0dacd21053a724279c267f1932ca1c2926d8cb296041ecad928fc1156c122113badd5d6aae5e486d4a0841696635bae1cb13e4c8d5a9baff556bd1e26ab57d677bf275a0ba62fffc2f8bd2799b9556122860731612e10eca29e8ed3c942950cf78ee42659d673829ff097c83ff1e0c5c920a03e5e79b02a868f00bbd9998add4ab18fc5421f096d1080323385f5bf83e0cc39a1987816f4107e8ed8d137e45224499f288989b02ba41d6802ede6949bef72867c762605cc2c247b280260502e28b52e80948972717cdb091c9ac7ff71aafe520c66f19858d6782e62bb372603d51444e26c62f0efb518f52bf4663b3926a52b34a5611372374fa09c8459b900649b66a83db9f1e89393ec4e2e953f536785450d881cfc8cf70e4799de22310e842ca7bfbf761baa03e933eee762de439e3de7a6ad632ca23021445a7dba51a021169e688163fa61e392912eeb00adb27f1d61bae1fabebb1"}) r1 = fspick(r0, &(0x7f0000000280)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x101200, 0x184) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r3, &(0x7f0000000340)='system_u:object_r:ssh_exec_t:s0\x00', 0x20) quotactl$Q_GETNEXTQUOTA(0x7fffffffc0000483, &(0x7f0000000380)=@sg0, 0xffffffffffffffff, &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) socket$packet(0x11, 0x0, 0x300) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4, {0x401}}, './file0\x00'}) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000580)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f00000005c0)=[@ioring_restriction_register_op={0x0, 0x1d}, @ioring_restriction_sqe_flags_required={0x3, 0x19}], 0x2) pause() r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r8) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048880}, 0x40400d1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)) fallocate(r9, 0x1a, 0x7fff, 0x19) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r6, 0xc0a85322, &(0x7f0000000780)) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, r11, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x810) unlink(&(0x7f0000000980)='./file1\x00') r12 = openat$autofs(0xffffffffffffff9c, &(0x7f00000009c0), 0x48e440, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r12, 0xc0189379, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) fsmount(r4, 0x0, 0xf3) 1.905818026s ago: executing program 5 (id=467): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x24, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x178}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.884589966s ago: executing program 5 (id=469): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x7, 0x6, 0x0, 0xfffffffd, 0x8, 0x9, 0x2}, &(0x7f00000002c0)=0x9c) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.758796508s ago: executing program 4 (id=470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002e0001000000100000000000010100800c0001000300"], 0x114}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) set_tid_address(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000556d4cb555193f2f1bca0456af463b0400000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)) 1.340789403s ago: executing program 4 (id=474): socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="000000000000000000050000e259bab14402b0ecb4dedc210000000000002000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1.283336173s ago: executing program 4 (id=476): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', r1, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001780)={&(0x7f0000001080)='mm_page_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x1000000000000010, 0x80802, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, 0x0, &(0x7f0000000040)) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) sendmsg(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8302d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='ext4_sync_file_exit\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x0, &(0x7f0000000040)}) fspick(0xffffffffffffff9c, 0x0, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x3) sendmsg$can_bcm(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100000029080002ffffffff00400000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000250000005c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"], 0x80}}, 0x0) 1.171485625s ago: executing program 3 (id=481): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xc2}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r1) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}}, 0x20000040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='mm_page_free\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.133856555s ago: executing program 1 (id=482): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00'}, 0x18) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x14, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x24004894) 1.022891627s ago: executing program 3 (id=484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x100000000}, 0x10017, 0xffffffff, 0x2, 0x9, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[], 0xffdd) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.008006657s ago: executing program 5 (id=486): r0 = io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x840, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r2, 0x0, 0x0, 0x30, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x7ffffffd, 0x348, 0x0, 0x250, 0xffffffff, 0x188, 0xe0, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x300, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800d379cc7076b77d05000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) r5 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r5, 0x1, 0x3, &(0x7f00000015c0)=""/190, &(0x7f0000001680)=0xbe) sendto$x25(0xffffffffffffffff, &(0x7f0000000140)="aac5025a76de4bbc7c974e8ed1dc9ac810cb86b02dfc92f5c5c235300eede0476a047bf1db25d94f0607592dbbc33c763bce81e6995bccc577ed11c37220dca26f3cf61c060b063e4e257f7f9aa78131a807bf9dd24b7f976355d4dc23a31740a9a57aa9fd3837e080d4", 0x6a, 0x4000000, &(0x7f00000001c0), 0x12) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x400c80, 0x0) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000300)={{r6}, "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"}) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0xe4e01, 0x0) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000000)='9', 0x1}, {&(0x7f00000019c0)="b0", 0x1}], 0x2) 859.468589ms ago: executing program 5 (id=487): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x2ab}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003500)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xf, 0x2}, {0x801, 0x7}}}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8050}, 0x20040054) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x10000000, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x9c}}, 0x0) 755.72455ms ago: executing program 1 (id=488): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00'}, 0x18) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x14, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x24004894) 656.149501ms ago: executing program 1 (id=489): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 631.062592ms ago: executing program 3 (id=490): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x84, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x39}}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000060}, 0x81) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x10000002}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x10000000, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20048880) 630.453042ms ago: executing program 1 (id=491): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYRES64=r1, @ANYRESOCT=r2, @ANYRES64=r0], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_open_dev$usbfs(0x0, 0x80, 0x805) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept$inet6(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010023010000000000000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) geteuid() getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000100020000000000040000000000000008000100", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r11, @ANYBLOB="100000"], 0x3c, 0x3) write$nci(r7, 0x0, 0x9) 608.269462ms ago: executing program 5 (id=492): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0xee00]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) setregid(0x0, r0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5e) creat(&(0x7f00000000c0)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1400"], &(0x7f0000002300), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x2d0, 0x178, 0x178, 0x2d0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}, {[{}, {0xe}]}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5}, {0x1, 0x4, 0x5}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x100}, 0x18) r6 = request_key(&(0x7f0000000300)='id_resolver\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") keyctl$unlink(0x9, r6, r6) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) chdir(&(0x7f0000000240)='./file0\x00') faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000) 522.449723ms ago: executing program 3 (id=494): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xc2}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r1) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}}, 0x20000040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='mm_page_free\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 489.798284ms ago: executing program 0 (id=495): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = timerfd_create(0x0, 0x80000) timerfd_gettime(r3, &(0x7f0000000040)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="07ef004000000000000008"], 0x14}}, 0x4000080) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r9, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x35dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r12 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r11, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) socket(0xf, 0xa, 0x80000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r8, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="040026bd7000fcdbdf2511000000050012000000000005001200090000000c0006003cd9004c9caf7e1908000300", @ANYRES32=r13, @ANYBLOB="0c1b06000300000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x1400c094}, 0x814) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000002", @ANYRES16=r7, @ANYBLOB="00022dbd7000ffdbdf252b00000008000200", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x40040) r14 = dup(r4) write$UHID_INPUT(r14, &(0x7f0000000a00)={0xf, {"a2e3ad21ed0d1bf91b28090955f70e06d038e7ff7fc6e5539b0d650e8b089b3f36076c090890e0878f0e1ac6e7049b3360959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07450936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0xfffffffffffffd6a}}, 0x1006) 449.128084ms ago: executing program 5 (id=496): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x2) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x40, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 405.477385ms ago: executing program 4 (id=497): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) unshare(0xa000200) 403.194545ms ago: executing program 0 (id=498): bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002e0001000000100000000000010100800c0001000300"], 0x114}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) set_tid_address(0x0) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)) 369.992495ms ago: executing program 4 (id=499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9) io_setup(0x60a, &(0x7f0000000240)=0x0) io_pgetevents(r4, 0x5, 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, 0x0) io_destroy(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') read$msr(r5, &(0x7f0000000040)=""/59, 0xffb5) r6 = eventfd(0xf) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x40000, 0x0) finit_module(r7, 0x0, 0x0) r8 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r9 = eventfd(0xfffffe83) io_submit(r4, 0x7, &(0x7f0000000940)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0xf4fe, r2, &(0x7f0000000440)="8720a4df87b7613aef8f19babe1df6d92e50da6b84842f3f1d7b85083fa5f91617a1", 0x22, 0x756, 0x0, 0x3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x194e, r1, &(0x7f00000004c0)="9ff83155c079eed9a1fa9ffb740b4dcbde1a4849cf18521c5fe51ed2f0f253cd40f76c9e123bee708bc8d8a8744f92281b6bcb09568a724a6195adc5d512c3904f173734913bef2fd078a9b13e403344ca42d19ad23b00a01cb809f8b3a679390abcdefbb5bd", 0x66, 0x2, 0x0, 0x2, r5}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0xfff, r0, &(0x7f0000000580)="14b344d3f419648c1e1a32a565aade9e8ff07d1222", 0x15, 0x3, 0x0, 0x1, r6}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x40, r2, &(0x7f00000006c0)="84132c90feb4eb3622846c619051146a1083f660517aba93596c41b1d4bd897cf7a0f8e0eb2f1320c4691b314b7d6296a0f3f2782630992d48a421e6469e024b453179f85d041310272a35d1f268836c40fb937506af42f29d48ab278e254927350604ad545cd1b4b5ea7dde7cf6c6e5f9734bba9f", 0x75, 0x2, 0x0, 0x1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x4, r1, &(0x7f0000000740)="e46bdbbff6a9494835c5eacee5a61dbdc38ec4f43096cb97144947bfabd26e7cda3ae00dee9aa2b914fa8c3207b1467db1246c3ad556b43ffd5b", 0x3a, 0x9, 0x0, 0x1, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0x40, r8, &(0x7f0000000800)="899546717804064fa565b08dde0d4073849d46c45759507773084655b4a052531f0af8b3fcbdc6d264e3a4", 0x2b, 0x2, 0x0, 0x3, r9}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0xe, r3, &(0x7f0000000a00)="f4b6e10768798bff561e452de209eea6c75ef30e3d27c674d71647b9ec823f179f7976bc51442a2f79430e877129e3a167306fe308bfa1344c2b4fba403f66839ee85f993815558892acb34b3c8d85a743f6579fdfaab5e589c64fc3d61e1da6ede50f72f4fca74fa5cd94aa01c9bc49d27db9badf9e10b133a823da5aea86c113d5c60b924544ad72210a13a96c5449089190d0960e43937215a0681937273ec47d8c22a8722ed918acf0010ca591759567211990aa", 0xb6, 0xe8f6, 0x0, 0x2}]) iopl(0x3) keyctl$read(0xb, 0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r10}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r10, {0x7}}, './file0\x00'}) ioctl$EVIOCGSND(r11, 0x8040451a, &(0x7f0000000280)=""/62) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="020200090a00000000000000000000000300060000000000020000007f000001000000000000000002000100000000000000000400000000030005000000000002"], 0x50}}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x9, &(0x7f0000000300)=[{0x6, 0xc0, 0xff}, {0x8, 0xe5, 0x4, 0x7d}, {0x7, 0x4, 0x6, 0x2de}, {0x74d, 0x6, 0x1, 0xffffffff}, {0x2, 0x1, 0x4, 0x9fb9}, {0x7bc8, 0x3, 0x3, 0x1}, {0x5, 0x2, 0x5, 0x6}, {0x800, 0xf, 0x9, 0x4}, {0x400, 0x1, 0xfb, 0x2}]}) r14 = timerfd_create(0x0, 0x0) timerfd_settime(r14, 0x3, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) 350.573365ms ago: executing program 0 (id=500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x100000000}, 0x10017, 0xffffffff, 0x2, 0x9, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xffdd) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 315.345346ms ago: executing program 1 (id=501): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 222.692467ms ago: executing program 1 (id=502): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@remote}, {@in6=@private1, 0x0, 0x6c}, @in=@loopback, {0x0, 0x80000000000000, 0x0, 0x8, 0x54, 0x8, 0x0, 0x7}, {0x0, 0x2}, {0x0, 0x3, 0x3db4}, 0x0, 0x10004000, 0x2, 0x0, 0x0, 0x70}, [@algo_auth={0x48, 0x1, {{'sha224-ce\x00'}}}, @algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x180}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create(0x7) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341) syz_clone3(&(0x7f00000002c0)={0x24000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x33}, &(0x7f0000000200)=""/61, 0x3d, &(0x7f00000016c0)=""/4096, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4, {r1}}, 0x58) ptrace$setregset(0x4205, r3, 0x201, &(0x7f0000000480)={&(0x7f0000000780)="4d63733cea4dc914a0fc09604e7fa3db2e5957a9d985fc7e79fcef575a82fb0827fd5c16d836a4ca411515f2527eb5264a1a241ea32685dab3353bd2de25e93c66fb555233b5e01cdbe19f5331c3e4cc1b77ff62a0c7d8aa7ace735d6477332c6e75cdd91109d31709e5b044a011019a42b21ff6fe10e383521fa23c8005017cd446be3973841386dc6b668951e52f73b8e3473992fbc815b023c85446705eb2895d6dcc2f0334a22555371574e2017661c60a431b3bddcbf62f398fcc68b03f2d1e16c0b094aeb6ff83eb970d539a520b59015d49", 0xd5}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x80045515, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="120000000c0000000800000002"], 0x50) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd740000000000250000000e0001006e657464657673696d0000000f00027673696d3000"/50, @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 222.351267ms ago: executing program 3 (id=503): r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1180, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) getpgrp(0x0) ptrace(0x10, r0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0xa, 0x4) ptrace$pokeuser(0x6, r0, 0x378, 0x1) io_uring_setup(0x51d2, &(0x7f0000000400)={0x0, 0x631d, 0x1000, 0x2, 0x402d7}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=") sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_create(0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x900) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xfdef}}, 0x0) 165.643988ms ago: executing program 0 (id=504): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00'}, 0x18) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x14, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x24004894) 73.715229ms ago: executing program 0 (id=505): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0x8}, 0x18) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000000000), 0x800, &(0x7f0000000080)=ANY=[]) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="177b4ba47847ba6fd0221809a24ad813e600644de58d2288a853e24a0c940a3bf581d8c7b57fa307a75e44890c078cd85d14257bc9a6ef3a0b50df7aa27463285db3fe34aa8c75a02f696c63776bf366da708b1db82f0f073918fb1337f2eefb476149916d8ad4d8f8b98ecaccf28447310893a2f879c8f882d9f1f7cc3cd322b532953f02b5181819322545234c51d0ab93900b49307bb587af579933ca62776a0a0e9e5e35afc1312a29a4b81fd9502fb1248d228d4381512dd142e59c8123133a7351c72664f2261746b16444711d17d6d3f16a", @ANYRES64=0x0], 0x10) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=506): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000240)=0x6, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): 1 [ 32.740181][ T3447] R13: 0000000000000000 R14: 00007fc93fa85fa0 R15: 00007ffcd50ba308 [ 32.740204][ T3447] [ 32.984545][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.003877][ T3303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.012732][ T3303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.012776][ T3303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.012810][ T3303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.019909][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.019953][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.019964][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.019977][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.019986][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.020051][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.020069][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.020081][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.020624][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.026795][ T3456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8'. [ 33.029711][ T3316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.029752][ T3316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.029845][ T3316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.029897][ T3316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.096927][ T3464] loop1: detected capacity change from 0 to 512 [ 33.112149][ T3465] loop2: detected capacity change from 0 to 128 [ 33.236161][ T3471] loop4: detected capacity change from 0 to 128 [ 33.289601][ T3471] ======================================================= [ 33.289601][ T3471] WARNING: The mand mount option has been deprecated and [ 33.289601][ T3471] and is ignored by this kernel. Remove the mand [ 33.289601][ T3471] option from the mount to silence this warning. [ 33.289601][ T3471] ======================================================= [ 33.341750][ T3460] loop2: detected capacity change from 0 to 128 [ 33.345560][ T3471] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 33.363616][ T3471] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.376654][ T3471] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.378543][ T3460] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.402811][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.429703][ T3460] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.528236][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.564533][ T3480] bridge_slave_0: left allmulticast mode [ 33.570263][ T3480] bridge_slave_0: left promiscuous mode [ 33.576090][ T3480] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.577382][ T3487] SELinux: ebitmap: truncated map [ 33.595235][ T3489] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.611549][ T3487] SELinux: failed to load policy [ 33.621527][ T3480] bridge_slave_1: left allmulticast mode [ 33.627253][ T3480] bridge_slave_1: left promiscuous mode [ 33.633080][ T3480] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.658304][ T3480] bond0: (slave bond_slave_0): Releasing backup interface [ 33.692479][ T3480] bond0: (slave bond_slave_1): Releasing backup interface [ 33.743611][ T3480] team0: Port device team_slave_0 removed [ 33.765281][ T3480] team0: Port device team_slave_1 removed [ 33.790053][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.797519][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.855000][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.862579][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.918545][ T3489] 8021q: VLANs not supported on nlmon0 [ 33.974887][ T3505] IPVS: length: 55 != 24 [ 33.985496][ C1] hrtimer: interrupt took 35748 ns [ 33.996615][ T3480] syz.0.12 (3480) used greatest stack depth: 10912 bytes left [ 34.116092][ T3505] can0: slcan on ttyS3. [ 34.138098][ T3513] loop4: detected capacity change from 0 to 128 [ 34.164847][ T3513] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.189126][ T3499] can0 (unregistered): slcan off ttyS3. [ 34.201134][ T3511] netlink: 'syz.0.21': attribute type 1 has an invalid length. [ 34.212243][ T3513] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.221051][ T3499] Falling back ldisc for ttyS3. [ 34.273491][ T3513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.282658][ T3513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.350752][ T3527] loop3: detected capacity change from 0 to 1024 [ 34.380949][ T3527] EXT4-fs: Ignoring removed bh option [ 34.386478][ T3527] EXT4-fs: inline encryption not supported [ 34.447807][ T3541] loop1: detected capacity change from 0 to 1024 [ 34.459142][ T3527] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.472982][ T3541] EXT4-fs: Ignoring removed bh option [ 34.478892][ T3541] EXT4-fs: inline encryption not supported [ 34.494612][ T3547] loop0: detected capacity change from 0 to 1024 [ 34.502408][ T3541] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.504700][ T3527] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 34.522490][ T3547] EXT4-fs: Ignoring removed bh option [ 34.527960][ T3547] EXT4-fs: inline encryption not supported [ 34.534326][ T3544] 8021q: VLANs not supported on nlmon0 [ 34.556074][ T3541] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 34.606191][ T3541] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 2: comm syz.1.28: lblock 2 mapped to illegal pblock 2 (length 1) [ 34.633052][ T3527] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.25: lblock 2 mapped to illegal pblock 2 (length 1) [ 34.647090][ T3541] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 48: comm syz.1.28: lblock 0 mapped to illegal pblock 48 (length 1) [ 34.674301][ T3527] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.25: lblock 0 mapped to illegal pblock 48 (length 1) [ 34.675698][ T3547] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.701917][ T3527] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.25: Failed to acquire dquot type 0 [ 34.702751][ T3541] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.28: Failed to acquire dquot type 0 [ 34.719168][ T3566] FAULT_INJECTION: forcing a failure. [ 34.719168][ T3566] name failslab, interval 1, probability 0, space 0, times 0 [ 34.726865][ T3547] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 34.736802][ T3566] CPU: 1 UID: 0 PID: 3566 Comm: syz.2.32 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 34.736885][ T3566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 34.736900][ T3566] Call Trace: [ 34.736910][ T3566] [ 34.736920][ T3566] __dump_stack+0x1d/0x30 [ 34.736947][ T3566] dump_stack_lvl+0xe8/0x140 [ 34.736972][ T3566] dump_stack+0x15/0x1b [ 34.737053][ T3566] should_fail_ex+0x265/0x280 [ 34.737153][ T3566] should_failslab+0x8c/0xb0 [ 34.737190][ T3566] kmem_cache_alloc_noprof+0x50/0x310 [ 34.737233][ T3566] ? security_file_alloc+0x32/0x100 [ 34.737268][ T3566] security_file_alloc+0x32/0x100 [ 34.737308][ T3566] init_file+0x5c/0x1d0 [ 34.737349][ T3566] alloc_empty_file+0x8b/0x200 [ 34.737413][ T3566] alloc_file_pseudo+0xc6/0x160 [ 34.737477][ T3566] anon_inode_getfile+0xa0/0x120 [ 34.737516][ T3566] __se_sys_perf_event_open+0xb3d/0x1170 [ 34.737557][ T3566] __x64_sys_perf_event_open+0x67/0x80 [ 34.737587][ T3566] x64_sys_call+0x27ec/0x2fb0 [ 34.737632][ T3566] do_syscall_64+0xd0/0x1a0 [ 34.737668][ T3566] ? clear_bhb_loop+0x25/0x80 [ 34.737696][ T3566] ? clear_bhb_loop+0x25/0x80 [ 34.737723][ T3566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.737830][ T3566] RIP: 0033:0x7f1bca17e969 [ 34.737850][ T3566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.737872][ T3566] RSP: 002b:00007f1bc87e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 34.737897][ T3566] RAX: ffffffffffffffda RBX: 00007f1bca3a5fa0 RCX: 00007f1bca17e969 [ 34.737916][ T3566] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000008c0 [ 34.737932][ T3566] RBP: 00007f1bc87e7090 R08: 0000000000000000 R09: 0000000000000000 [ 34.737947][ T3566] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 34.738026][ T3566] R13: 0000000000000001 R14: 00007f1bca3a5fa0 R15: 00007fff097db5f8 [ 34.738048][ T3566] [ 34.749659][ T3547] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 2: comm syz.0.29: lblock 2 mapped to illegal pblock 2 (length 1) [ 34.766158][ T3547] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 48: comm syz.0.29: lblock 0 mapped to illegal pblock 48 (length 1) [ 34.784392][ T3541] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 34.785673][ T3547] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.29: Failed to acquire dquot type 0 [ 34.790406][ T3527] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 34.969989][ T3541] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.28: mark_inode_dirty error [ 34.983421][ T3547] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 34.989724][ T3527] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.25: mark_inode_dirty error [ 35.002579][ T3547] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #11: comm syz.0.29: mark_inode_dirty error [ 35.042548][ T3541] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 35.042630][ T3541] EXT4-fs (loop1): 1 orphan inode deleted [ 35.043088][ T3541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.043155][ T3527] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 35.043247][ T3527] EXT4-fs (loop3): 1 orphan inode deleted [ 35.043537][ T3547] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 35.043631][ T3547] EXT4-fs (loop0): 1 orphan inode deleted [ 35.043780][ T3527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.044177][ T3547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.089421][ T51] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 35.105778][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 0 [ 35.176318][ T51] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 35.194646][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 0 [ 35.206266][ T51] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 35.222091][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 0 [ 35.234869][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.235049][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.246227][ T3303] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 35.266401][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.267235][ T3312] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 35.288509][ T3312] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 35.290133][ T3304] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 35.311210][ T3312] EXT4-fs error (device loop0): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 35.313571][ T3304] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 35.332031][ T3303] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 35.334464][ T3304] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 35.343403][ T3303] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 35.400042][ T3581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.35'. [ 35.428776][ T3583] process 'syz.4.38' launched './file1' with NULL argv: empty string added [ 35.475725][ T3590] 8021q: VLANs not supported on nlmon0 [ 35.528318][ T3592] loop1: detected capacity change from 0 to 2048 [ 35.575491][ T3602] loop2: detected capacity change from 0 to 1024 [ 35.586066][ T3602] EXT4-fs: Ignoring removed bh option [ 35.625939][ T3602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.677687][ T3609] loop1: detected capacity change from 0 to 256 [ 35.693123][ T3609] 9pnet_fd: Insufficient options for proto=fd [ 35.714615][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.755936][ T3616] FAULT_INJECTION: forcing a failure. [ 35.755936][ T3616] name failslab, interval 1, probability 0, space 0, times 0 [ 35.768784][ T3616] CPU: 1 UID: 0 PID: 3616 Comm: syz.3.52 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 35.768880][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 35.768895][ T3616] Call Trace: [ 35.768902][ T3616] [ 35.768912][ T3616] __dump_stack+0x1d/0x30 [ 35.768958][ T3616] dump_stack_lvl+0xe8/0x140 [ 35.768983][ T3616] dump_stack+0x15/0x1b [ 35.769003][ T3616] should_fail_ex+0x265/0x280 [ 35.769034][ T3616] should_failslab+0x8c/0xb0 [ 35.769137][ T3616] __kmalloc_noprof+0xa5/0x3e0 [ 35.769159][ T3616] ? alloc_pipe_info+0x1c9/0x350 [ 35.769207][ T3616] alloc_pipe_info+0x1c9/0x350 [ 35.769255][ T3616] splice_direct_to_actor+0x592/0x680 [ 35.769277][ T3616] ? kstrtouint_from_user+0x9f/0xf0 [ 35.769373][ T3616] ? __pfx_direct_splice_actor+0x10/0x10 [ 35.769396][ T3616] ? __rcu_read_unlock+0x4f/0x70 [ 35.769418][ T3616] ? get_pid_task+0x96/0xd0 [ 35.769439][ T3616] ? avc_policy_seqno+0x15/0x30 [ 35.769544][ T3616] do_splice_direct+0xda/0x150 [ 35.769569][ T3616] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 35.769627][ T3616] do_sendfile+0x380/0x640 [ 35.769670][ T3616] __x64_sys_sendfile64+0x105/0x150 [ 35.769699][ T3616] x64_sys_call+0xb39/0x2fb0 [ 35.769782][ T3616] do_syscall_64+0xd0/0x1a0 [ 35.769811][ T3616] ? clear_bhb_loop+0x25/0x80 [ 35.769852][ T3616] ? clear_bhb_loop+0x25/0x80 [ 35.769873][ T3616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.769894][ T3616] RIP: 0033:0x7fa990e7e969 [ 35.769908][ T3616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.769926][ T3616] RSP: 002b:00007fa98f4e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 35.770017][ T3616] RAX: ffffffffffffffda RBX: 00007fa9910a5fa0 RCX: 00007fa990e7e969 [ 35.770029][ T3616] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 35.770041][ T3616] RBP: 00007fa98f4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 35.770052][ T3616] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 35.770064][ T3616] R13: 0000000000000000 R14: 00007fa9910a5fa0 R15: 00007ffd1790ba18 [ 35.770113][ T3616] [ 36.039931][ T3630] loop3: detected capacity change from 0 to 512 [ 36.114798][ T3635] loop3: detected capacity change from 0 to 512 [ 36.121502][ T3635] EXT4-fs: dax option not supported [ 36.166848][ T3640] netlink: 100 bytes leftover after parsing attributes in process `syz.3.60'. [ 36.177244][ T3638] capability: warning: `syz.0.61' uses deprecated v2 capabilities in a way that may be insecure [ 36.201118][ T3638] loop0: detected capacity change from 0 to 1024 [ 36.208160][ T3638] EXT4-fs: Ignoring removed orlov option [ 36.225072][ T3638] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 36.293361][ T3638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.346414][ T3665] loop3: detected capacity change from 0 to 128 [ 36.380732][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.412625][ T3671] 8021q: VLANs not supported on nlmon0 [ 36.438859][ T3662] loop4: detected capacity change from 0 to 8192 [ 36.500644][ T3662] loop4: p2 p3 p4 [ 36.528329][ T3662] loop4: p2 start 452985600 is beyond EOD, truncated [ 36.535154][ T3662] loop4: p3 size 33554432 extends beyond EOD, truncated [ 36.555550][ T3688] Illegal XDP return value 4294967274 on prog (id 53) dev syz_tun, expect packet loss! [ 36.576039][ T3662] loop4: p4 start 8388607 is beyond EOD, truncated [ 36.636895][ T3662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 36.647391][ T3662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 36.866451][ T3736] FAULT_INJECTION: forcing a failure. [ 36.866451][ T3736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.879661][ T3736] CPU: 0 UID: 0 PID: 3736 Comm: syz.4.74 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 36.879757][ T3736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 36.879772][ T3736] Call Trace: [ 36.879780][ T3736] [ 36.879788][ T3736] __dump_stack+0x1d/0x30 [ 36.879809][ T3736] dump_stack_lvl+0xe8/0x140 [ 36.879828][ T3736] dump_stack+0x15/0x1b [ 36.879916][ T3736] should_fail_ex+0x265/0x280 [ 36.880051][ T3736] should_fail+0xb/0x20 [ 36.880085][ T3736] should_fail_usercopy+0x1a/0x20 [ 36.880107][ T3736] strncpy_from_user+0x25/0x230 [ 36.880145][ T3736] ? kmem_cache_alloc_noprof+0x186/0x310 [ 36.880243][ T3736] ? getname_flags+0x80/0x3b0 [ 36.880466][ T3736] getname_flags+0xae/0x3b0 [ 36.880572][ T3736] __x64_sys_symlink+0x33/0x60 [ 36.880717][ T3736] x64_sys_call+0x2d8d/0x2fb0 [ 36.880738][ T3736] do_syscall_64+0xd0/0x1a0 [ 36.880765][ T3736] ? clear_bhb_loop+0x25/0x80 [ 36.880790][ T3736] ? clear_bhb_loop+0x25/0x80 [ 36.880856][ T3736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.880879][ T3736] RIP: 0033:0x7fb47315e969 [ 36.880897][ T3736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.880913][ T3736] RSP: 002b:00007fb4717c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 36.880931][ T3736] RAX: ffffffffffffffda RBX: 00007fb473385fa0 RCX: 00007fb47315e969 [ 36.880942][ T3736] RDX: 0000000000000000 RSI: 0000200000030780 RDI: 0000000000000000 [ 36.881005][ T3736] RBP: 00007fb4717c7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.881020][ T3736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.881031][ T3736] R13: 0000000000000000 R14: 00007fb473385fa0 R15: 00007ffebefa17c8 [ 36.881049][ T3736] [ 37.246057][ T3761] 8021q: VLANs not supported on nlmon0 [ 37.255566][ T3759] SELinux: ebitmap: truncated map [ 37.263802][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 37.263820][ T29] audit: type=1400 audit(1745832037.137:431): avc: denied { create } for pid=3739 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.291017][ T3759] SELinux: failed to load policy [ 37.366921][ T3767] loop3: detected capacity change from 0 to 1024 [ 37.374034][ T3767] EXT4-fs: Ignoring removed orlov option [ 37.386838][ T3767] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 37.426230][ T3767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.436637][ T3785] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 37.436637][ T3785] program syz.0.86 not setting count and/or reply_len properly [ 37.442580][ T29] audit: type=1400 audit(1745832037.307:432): avc: denied { write } for pid=3784 comm="syz.0.86" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 37.457930][ T3783] ref_ctr_offset mismatch. inode: 0x5a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 37.478843][ T29] audit: type=1400 audit(1745832037.307:433): avc: denied { open } for pid=3784 comm="syz.0.86" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 37.478915][ T29] audit: type=1400 audit(1745832037.307:434): avc: denied { ioctl } for pid=3784 comm="syz.0.86" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 37.554826][ T3788] hsr0: entered promiscuous mode [ 37.574051][ T29] audit: type=1400 audit(1745832037.447:435): avc: denied { write } for pid=3791 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.593236][ T29] audit: type=1400 audit(1745832037.447:436): avc: denied { setopt } for pid=3791 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 37.612934][ T29] audit: type=1400 audit(1745832037.467:437): avc: denied { read } for pid=3793 comm="syz.0.89" name="usbmon4" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.636198][ T29] audit: type=1400 audit(1745832037.467:438): avc: denied { open } for pid=3793 comm="syz.0.89" path="/dev/usbmon4" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.644383][ T3796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.90'. [ 37.659859][ T29] audit: type=1400 audit(1745832037.467:439): avc: denied { ioctl } for pid=3793 comm="syz.0.89" path="/dev/usbmon4" dev="devtmpfs" ino=154 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.659899][ T29] audit: type=1400 audit(1745832037.477:440): avc: denied { read } for pid=3791 comm="syz.4.88" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 37.720780][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.736857][ T3796] netlink: 'syz.0.90': attribute type 3 has an invalid length. [ 37.745242][ T3796] netlink: 20 bytes leftover after parsing attributes in process `syz.0.90'. [ 37.756844][ T3796] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.765705][ T3796] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.774549][ T3796] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.783437][ T3796] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.797708][ T3802] Zero length message leads to an empty skb [ 37.834358][ T3802] Invalid ELF header type: 2 != 1 [ 37.840339][ T3796] syz.0.90 (3796) used greatest stack depth: 10888 bytes left [ 37.855356][ T3803] SELinux: ebitmap: truncated map [ 37.862811][ T3803] SELinux: failed to load policy [ 37.886587][ T3810] FAULT_INJECTION: forcing a failure. [ 37.886587][ T3810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.899797][ T3810] CPU: 0 UID: 0 PID: 3810 Comm: syz.1.95 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 37.899829][ T3810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 37.899844][ T3810] Call Trace: [ 37.899851][ T3810] [ 37.899858][ T3810] __dump_stack+0x1d/0x30 [ 37.899884][ T3810] dump_stack_lvl+0xe8/0x140 [ 37.899914][ T3810] dump_stack+0x15/0x1b [ 37.899935][ T3810] should_fail_ex+0x265/0x280 [ 37.899994][ T3810] should_fail+0xb/0x20 [ 37.900092][ T3810] should_fail_usercopy+0x1a/0x20 [ 37.900110][ T3810] _copy_from_user+0x1c/0xb0 [ 37.900207][ T3810] __se_sys_add_key+0x209/0x350 [ 37.900246][ T3810] __x64_sys_add_key+0x67/0x80 [ 37.900352][ T3810] x64_sys_call+0x1d0d/0x2fb0 [ 37.900392][ T3810] do_syscall_64+0xd0/0x1a0 [ 37.900416][ T3810] ? clear_bhb_loop+0x25/0x80 [ 37.900442][ T3810] ? clear_bhb_loop+0x25/0x80 [ 37.900511][ T3810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.900537][ T3810] RIP: 0033:0x7fc93f85e969 [ 37.900555][ T3810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.900606][ T3810] RSP: 002b:00007fc93dec7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 37.900628][ T3810] RAX: ffffffffffffffda RBX: 00007fc93fa85fa0 RCX: 00007fc93f85e969 [ 37.900643][ T3810] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000200000000040 [ 37.900657][ T3810] RBP: 00007fc93dec7090 R08: fffffffffffffffd R09: 0000000000000000 [ 37.900671][ T3810] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 37.900724][ T3810] R13: 0000000000000000 R14: 00007fc93fa85fa0 R15: 00007ffcd50ba308 [ 37.900748][ T3810] [ 38.119277][ T3816] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 38.119277][ T3816] program syz.1.98 not setting count and/or reply_len properly [ 38.145957][ T3820] FAULT_INJECTION: forcing a failure. [ 38.145957][ T3820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.154720][ T3814] loop4: detected capacity change from 0 to 1024 [ 38.159077][ T3820] CPU: 1 UID: 0 PID: 3820 Comm: syz.3.99 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 38.159215][ T3820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 38.159233][ T3820] Call Trace: [ 38.159241][ T3820] [ 38.159259][ T3820] __dump_stack+0x1d/0x30 [ 38.159365][ T3820] dump_stack_lvl+0xe8/0x140 [ 38.159391][ T3820] dump_stack+0x15/0x1b [ 38.159456][ T3820] should_fail_ex+0x265/0x280 [ 38.159496][ T3820] should_fail+0xb/0x20 [ 38.159607][ T3820] should_fail_usercopy+0x1a/0x20 [ 38.159631][ T3820] strncpy_from_user+0x25/0x230 [ 38.159668][ T3820] strncpy_from_user_nofault+0x68/0xf0 [ 38.159748][ T3820] bpf_probe_read_compat_str+0xb4/0x130 [ 38.159828][ T3820] bpf_prog_e42f6260c1b72fb3+0x3e/0x40 [ 38.159850][ T3820] bpf_trace_run3+0x10c/0x1d0 [ 38.159879][ T3820] ? user_path_at+0x109/0x130 [ 38.159905][ T3820] ? user_path_at+0x109/0x130 [ 38.159927][ T3820] kmem_cache_free+0x246/0x2f0 [ 38.159992][ T3820] user_path_at+0x109/0x130 [ 38.160016][ T3820] vfs_open_tree+0xef/0x540 [ 38.160057][ T3820] __x64_sys_open_tree+0x45/0xc0 [ 38.160088][ T3820] x64_sys_call+0x28d3/0x2fb0 [ 38.160114][ T3820] do_syscall_64+0xd0/0x1a0 [ 38.160192][ T3820] ? clear_bhb_loop+0x25/0x80 [ 38.160219][ T3820] ? clear_bhb_loop+0x25/0x80 [ 38.160327][ T3820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.160355][ T3820] RIP: 0033:0x7fa990e7e969 [ 38.160374][ T3820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.160397][ T3820] RSP: 002b:00007fa98f4e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 38.160421][ T3820] RAX: ffffffffffffffda RBX: 00007fa9910a5fa0 RCX: 00007fa990e7e969 [ 38.160515][ T3820] RDX: 0000000000081000 RSI: 0000200000000280 RDI: ffffffffffffffff [ 38.160531][ T3820] RBP: 00007fa98f4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.160546][ T3820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.160562][ T3820] R13: 0000000000000000 R14: 00007fa9910a5fa0 R15: 00007ffd1790ba18 [ 38.160587][ T3820] [ 38.382196][ T3822] xt_connbytes: Forcing CT accounting to be enabled [ 38.382279][ T3822] Cannot find add_set index 0 as target [ 38.407300][ T3830] 8021q: VLANs not supported on nlmon0 [ 38.434477][ T3822] loop2: detected capacity change from 0 to 1024 [ 38.442641][ T3822] EXT4-fs: Ignoring removed orlov option [ 38.460348][ T3822] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 38.526551][ T3822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.554477][ T3845] loop3: detected capacity change from 0 to 1024 [ 38.577053][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.588391][ T3845] EXT4-fs: Ignoring removed bh option [ 38.599170][ T3849] loop4: detected capacity change from 0 to 512 [ 38.600399][ T3845] EXT4-fs: inline encryption not supported [ 38.617491][ T3845] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.633163][ T3845] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 38.654237][ T3826] Invalid ELF header magic: != ELF [ 38.654843][ T3845] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.107: lblock 2 mapped to illegal pblock 2 (length 1) [ 38.684567][ T3845] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.107: lblock 0 mapped to illegal pblock 48 (length 1) [ 38.699947][ T3849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.715541][ T3849] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.727902][ T3845] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.107: Failed to acquire dquot type 0 [ 38.746132][ T3845] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 38.780367][ T3858] mmap: syz.0.111 (3858) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.804913][ T3845] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.107: mark_inode_dirty error [ 38.817484][ T3858] FAULT_INJECTION: forcing a failure. [ 38.817484][ T3858] name failslab, interval 1, probability 0, space 0, times 0 [ 38.830506][ T3858] CPU: 0 UID: 0 PID: 3858 Comm: syz.0.111 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 38.830578][ T3858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 38.830595][ T3858] Call Trace: [ 38.830621][ T3858] [ 38.830629][ T3858] __dump_stack+0x1d/0x30 [ 38.830649][ T3858] dump_stack_lvl+0xe8/0x140 [ 38.830667][ T3858] dump_stack+0x15/0x1b [ 38.830682][ T3858] should_fail_ex+0x265/0x280 [ 38.830746][ T3858] should_failslab+0x8c/0xb0 [ 38.830773][ T3858] kmem_cache_alloc_node_noprof+0x57/0x320 [ 38.830806][ T3858] ? __alloc_skb+0x101/0x320 [ 38.830916][ T3858] __alloc_skb+0x101/0x320 [ 38.830991][ T3858] ? audit_log_start+0x365/0x6c0 [ 38.831076][ T3858] audit_log_start+0x380/0x6c0 [ 38.831106][ T3858] audit_seccomp+0x48/0x100 [ 38.831132][ T3858] ? __seccomp_filter+0x68c/0x10d0 [ 38.831157][ T3858] __seccomp_filter+0x69d/0x10d0 [ 38.831194][ T3858] ? mas_find+0x4ea/0x610 [ 38.831233][ T3858] __secure_computing+0x82/0x150 [ 38.831256][ T3858] syscall_trace_enter+0xcf/0x1e0 [ 38.831282][ T3858] do_syscall_64+0xaa/0x1a0 [ 38.831369][ T3858] ? clear_bhb_loop+0x25/0x80 [ 38.831394][ T3858] ? clear_bhb_loop+0x25/0x80 [ 38.831418][ T3858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.831463][ T3858] RIP: 0033:0x7f2a4bc2d37c [ 38.831481][ T3858] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 38.831502][ T3858] RSP: 002b:00007f2a4a297030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 38.831521][ T3858] RAX: ffffffffffffffda RBX: 00007f2a4be55fa0 RCX: 00007f2a4bc2d37c [ 38.831607][ T3858] RDX: 000000000000000f RSI: 00007f2a4a2970a0 RDI: 0000000000000003 [ 38.831619][ T3858] RBP: 00007f2a4a297090 R08: 0000000000000000 R09: 0000000000000000 [ 38.831630][ T3858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.831644][ T3858] R13: 0000000000000000 R14: 00007f2a4be55fa0 R15: 00007ffc150ff098 [ 38.831662][ T3858] [ 39.038675][ T3845] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 39.049092][ T3845] EXT4-fs (loop3): 1 orphan inode deleted [ 39.055166][ T3845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.082030][ T51] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 39.118712][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 0 [ 39.142403][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.163160][ T3303] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 39.188565][ T3861] xt_CT: You must specify a L4 protocol and not use inversions on it [ 39.198131][ T3861] x_tables: duplicate underflow at hook 1 [ 39.216586][ T3303] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 39.233472][ T3868] loop2: detected capacity change from 0 to 8192 [ 39.242130][ T3303] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 39.266564][ T3871] FAULT_INJECTION: forcing a failure. [ 39.266564][ T3871] name failslab, interval 1, probability 0, space 0, times 0 [ 39.279311][ T3871] CPU: 0 UID: 0 PID: 3871 Comm: syz.1.116 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 39.279373][ T3871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 39.279405][ T3871] Call Trace: [ 39.279412][ T3871] [ 39.279421][ T3871] __dump_stack+0x1d/0x30 [ 39.279446][ T3871] dump_stack_lvl+0xe8/0x140 [ 39.279547][ T3871] dump_stack+0x15/0x1b [ 39.279580][ T3871] should_fail_ex+0x265/0x280 [ 39.279611][ T3871] should_failslab+0x8c/0xb0 [ 39.279670][ T3871] kmem_cache_alloc_node_noprof+0x57/0x320 [ 39.279754][ T3871] ? __alloc_skb+0x101/0x320 [ 39.279801][ T3871] __alloc_skb+0x101/0x320 [ 39.279839][ T3871] netlink_alloc_large_skb+0xba/0xf0 [ 39.279929][ T3871] netlink_sendmsg+0x3cf/0x6b0 [ 39.279966][ T3871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.279999][ T3871] __sock_sendmsg+0x142/0x180 [ 39.280023][ T3871] ____sys_sendmsg+0x31e/0x4e0 [ 39.280112][ T3871] ___sys_sendmsg+0x17b/0x1d0 [ 39.280146][ T3871] __x64_sys_sendmsg+0xd4/0x160 [ 39.280262][ T3871] x64_sys_call+0x2999/0x2fb0 [ 39.280289][ T3871] do_syscall_64+0xd0/0x1a0 [ 39.280316][ T3871] ? clear_bhb_loop+0x25/0x80 [ 39.280340][ T3871] ? clear_bhb_loop+0x25/0x80 [ 39.280366][ T3871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.280420][ T3871] RIP: 0033:0x7fc93f85e969 [ 39.280434][ T3871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.280450][ T3871] RSP: 002b:00007fc93dec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.280489][ T3871] RAX: ffffffffffffffda RBX: 00007fc93fa85fa0 RCX: 00007fc93f85e969 [ 39.280508][ T3871] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 39.280519][ T3871] RBP: 00007fc93dec7090 R08: 0000000000000000 R09: 0000000000000000 [ 39.280533][ T3871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.280548][ T3871] R13: 0000000000000000 R14: 00007fc93fa85fa0 R15: 00007ffcd50ba308 [ 39.280576][ T3871] [ 39.298868][ T3875] loop3: detected capacity change from 0 to 1024 [ 39.354894][ T3484] loop2: p1 p3 p4 [ 39.449405][ T3875] EXT4-fs: Ignoring removed bh option [ 39.456900][ T3484] loop2: p1 size 3506438656 extends beyond EOD, [ 39.485978][ T3875] EXT4-fs: inline encryption not supported [ 39.486570][ T3484] truncated [ 39.525023][ T3484] loop2: p3 start 218103808 is beyond EOD, truncated [ 39.526744][ T3875] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.531831][ T3484] loop2: p4 size 50331648 extends beyond EOD, truncated [ 39.557368][ T3875] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 39.582955][ T3875] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.114: lblock 2 mapped to illegal pblock 2 (length 1) [ 39.604528][ T3875] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.114: lblock 0 mapped to illegal pblock 48 (length 1) [ 39.604845][ T3868] loop2: p1 p3 p4 [ 39.623806][ T3875] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.114: Failed to acquire dquot type 0 [ 39.632178][ T3868] loop2: p1 size 3506438656 extends beyond EOD, truncated [ 39.643814][ T3875] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 39.655929][ T3875] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.114: mark_inode_dirty error [ 39.670623][ T3868] loop2: p3 start 218103808 is beyond EOD, truncated [ 39.677596][ T3868] loop2: p4 size 50331648 extends beyond EOD, truncated [ 39.685872][ T3882] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 39.702831][ T3882] SELinux: failed to load policy [ 39.707838][ T3875] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 39.733781][ T3875] EXT4-fs (loop3): 1 orphan inode deleted [ 39.734662][ T51] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 39.749713][ T3875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.771009][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 39.786472][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 39.798840][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 39.816226][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 0 [ 39.833906][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.863643][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.873673][ T3303] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 39.878334][ T3886] loop2: detected capacity change from 0 to 1024 [ 39.896437][ T3888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 39.905295][ T3888] tc_dump_action: action bad kind [ 39.909726][ T3886] EXT4-fs: Ignoring removed orlov option [ 39.934519][ T3886] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 39.973832][ T3892] loop4: detected capacity change from 0 to 1024 [ 39.974347][ T3303] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 40.000450][ T3892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.014086][ T3886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.027195][ T3303] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 40.030498][ T3892] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.150745][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.169728][ T3892] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 40.198321][ T3892] System zones: 0-1, 3-36 [ 40.204906][ T3899] loop1: detected capacity change from 0 to 8192 [ 40.231320][ T3909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8297 sclass=netlink_route_socket pid=3909 comm=syz.3.128 [ 40.232377][ T3892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.261080][ T3899] loop1: p2 p3 p4 [ 40.270042][ T3899] loop1: p2 start 452985600 is beyond EOD, truncated [ 40.276784][ T3899] loop1: p3 size 33554432 extends beyond EOD, truncated [ 40.289886][ T3911] loop3: detected capacity change from 0 to 128 [ 40.306607][ T3911] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 40.317196][ T3899] loop1: p4 start 8388607 is beyond EOD, truncated [ 40.331690][ T3899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 40.345502][ T3911] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 40.353068][ T3911] FAT-fs (loop3): Filesystem has been set read-only [ 40.360893][ T3899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 40.391507][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.487806][ T3921] netlink: 48 bytes leftover after parsing attributes in process `syz.3.131'. [ 40.591029][ T3923] SELinux: ebitmap: truncated map [ 40.601252][ T3923] SELinux: failed to load policy [ 40.726437][ T3930] FAULT_INJECTION: forcing a failure. [ 40.726437][ T3930] name failslab, interval 1, probability 0, space 0, times 0 [ 40.739167][ T3930] CPU: 1 UID: 0 PID: 3930 Comm: syz.3.135 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 40.739198][ T3930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 40.739263][ T3930] Call Trace: [ 40.739269][ T3930] [ 40.739275][ T3930] __dump_stack+0x1d/0x30 [ 40.739295][ T3930] dump_stack_lvl+0xe8/0x140 [ 40.739334][ T3930] dump_stack+0x15/0x1b [ 40.739354][ T3930] should_fail_ex+0x265/0x280 [ 40.739392][ T3930] should_failslab+0x8c/0xb0 [ 40.739442][ T3930] kmem_cache_alloc_node_noprof+0x57/0x320 [ 40.739511][ T3930] ? __alloc_skb+0x101/0x320 [ 40.739543][ T3930] __alloc_skb+0x101/0x320 [ 40.739587][ T3930] ? audit_log_start+0x365/0x6c0 [ 40.739647][ T3930] audit_log_start+0x380/0x6c0 [ 40.739677][ T3930] audit_seccomp+0x48/0x100 [ 40.739760][ T3930] ? __seccomp_filter+0x68c/0x10d0 [ 40.739784][ T3930] __seccomp_filter+0x69d/0x10d0 [ 40.739889][ T3930] __secure_computing+0x82/0x150 [ 40.739913][ T3930] syscall_trace_enter+0xcf/0x1e0 [ 40.739939][ T3930] do_syscall_64+0xaa/0x1a0 [ 40.739964][ T3930] ? clear_bhb_loop+0x25/0x80 [ 40.739989][ T3930] ? clear_bhb_loop+0x25/0x80 [ 40.740066][ T3930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.740140][ T3930] RIP: 0033:0x7fa990e7d37c [ 40.740220][ T3930] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 40.740242][ T3930] RSP: 002b:00007fa98f4e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.740264][ T3930] RAX: ffffffffffffffda RBX: 00007fa9910a5fa0 RCX: 00007fa990e7d37c [ 40.740278][ T3930] RDX: 000000000000000f RSI: 00007fa98f4e70a0 RDI: 0000000000000004 [ 40.740291][ T3930] RBP: 00007fa98f4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 40.740302][ T3930] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.740313][ T3930] R13: 0000000000000000 R14: 00007fa9910a5fa0 R15: 00007ffd1790ba18 [ 40.740332][ T3930] [ 40.981602][ T3934] Invalid ELF header type: 2 != 1 [ 41.008278][ T3937] loop1: detected capacity change from 0 to 512 [ 41.015208][ T3937] EXT4-fs: Ignoring removed orlov option [ 41.036106][ T3937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.048938][ T3937] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.235827][ T3951] SELinux: ebitmap: truncated map [ 41.242277][ T3951] SELinux: failed to load policy [ 41.272348][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.291432][ T3955] vhci_hcd: invalid port number 96 [ 41.296625][ T3955] vhci_hcd: default hub control req: 6000 vfffc i0060 l0 [ 41.309632][ T3955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.322685][ T3955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.390040][ T3877] syz.0.118 (3877) used greatest stack depth: 6904 bytes left [ 41.407010][ T3963] netlink: 'syz.1.149': attribute type 1 has an invalid length. [ 41.544970][ T3970] loop3: detected capacity change from 0 to 8192 [ 41.568429][ T3979] SELinux: ebitmap: truncated map [ 41.574330][ T3979] SELinux: failed to load policy [ 41.599460][ T3970] loop3: p2 p3 p4 [ 41.603367][ T3970] loop3: p2 start 452985600 is beyond EOD, truncated [ 41.610167][ T3970] loop3: p3 size 33554432 extends beyond EOD, truncated [ 41.617652][ T3970] loop3: p4 start 8388607 is beyond EOD, truncated [ 41.631474][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 41.641511][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 41.942817][ T3993] loop4: detected capacity change from 0 to 2048 [ 41.965676][ T3998] FAULT_INJECTION: forcing a failure. [ 41.965676][ T3998] name failslab, interval 1, probability 0, space 0, times 0 [ 41.978540][ T3998] CPU: 1 UID: 0 PID: 3998 Comm: syz.2.162 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 41.978572][ T3998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 41.978588][ T3998] Call Trace: [ 41.978596][ T3998] [ 41.978606][ T3998] __dump_stack+0x1d/0x30 [ 41.978629][ T3998] dump_stack_lvl+0xe8/0x140 [ 41.978780][ T3998] dump_stack+0x15/0x1b [ 41.978826][ T3998] should_fail_ex+0x265/0x280 [ 41.978872][ T3998] should_failslab+0x8c/0xb0 [ 41.978904][ T3998] kmem_cache_alloc_node_noprof+0x57/0x320 [ 41.979001][ T3998] ? __alloc_skb+0x101/0x320 [ 41.979097][ T3998] __alloc_skb+0x101/0x320 [ 41.979184][ T3998] netlink_alloc_large_skb+0xba/0xf0 [ 41.979270][ T3998] netlink_sendmsg+0x3cf/0x6b0 [ 41.979389][ T3998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.979430][ T3998] __sock_sendmsg+0x142/0x180 [ 41.979455][ T3998] ____sys_sendmsg+0x31e/0x4e0 [ 41.979543][ T3998] ___sys_sendmsg+0x17b/0x1d0 [ 41.979587][ T3998] __x64_sys_sendmsg+0xd4/0x160 [ 41.979617][ T3998] x64_sys_call+0x2999/0x2fb0 [ 41.979722][ T3998] do_syscall_64+0xd0/0x1a0 [ 41.979745][ T3998] ? clear_bhb_loop+0x25/0x80 [ 41.979821][ T3998] ? clear_bhb_loop+0x25/0x80 [ 41.979886][ T3998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.979998][ T3998] RIP: 0033:0x7f1bca17e969 [ 41.980013][ T3998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.980031][ T3998] RSP: 002b:00007f1bc87e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.980053][ T3998] RAX: ffffffffffffffda RBX: 00007f1bca3a5fa0 RCX: 00007f1bca17e969 [ 41.980069][ T3998] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 41.980083][ T3998] RBP: 00007f1bc87e7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.980098][ T3998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.980125][ T3998] R13: 0000000000000000 R14: 00007f1bca3a5fa0 R15: 00007fff097db5f8 [ 41.980147][ T3998] [ 42.234496][ T4003] netlink: 'syz.3.163': attribute type 1 has an invalid length. [ 42.314668][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 42.314685][ T29] audit: type=1326 audit(1745832042.187:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47315e969 code=0x7ffc0000 [ 42.354286][ T4009] SELinux: ebitmap: truncated map [ 42.359712][ T4009] SELinux: failed to load policy [ 42.363678][ T29] audit: type=1326 audit(1745832042.187:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47315e969 code=0x7ffc0000 [ 42.376574][ T4013] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 42.376574][ T4013] program syz.3.168 not setting count and/or reply_len properly [ 42.388101][ T29] audit: type=1400 audit(1745832042.227:806): avc: denied { load_policy } for pid=4008 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 42.429286][ T29] audit: type=1326 audit(1745832042.247:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb47315e969 code=0x7ffc0000 [ 42.452642][ T29] audit: type=1326 audit(1745832042.247:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47315e969 code=0x7ffc0000 [ 42.476060][ T29] audit: type=1326 audit(1745832042.247:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47315e969 code=0x7ffc0000 [ 42.499481][ T29] audit: type=1326 audit(1745832042.297:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fb47315e969 code=0x7ffc0000 [ 42.522829][ T29] audit: type=1326 audit(1745832042.297:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47315e969 code=0x7ffc0000 [ 42.546315][ T29] audit: type=1326 audit(1745832042.297:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47315e969 code=0x7ffc0000 [ 42.622281][ T4022] Invalid ELF header type: 2 != 1 [ 42.659438][ T29] audit: type=1326 audit(1745832042.527:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93f85e969 code=0x7ffc0000 [ 42.699525][ T4032] netlink: 244 bytes leftover after parsing attributes in process `syz.0.175'. [ 42.722081][ T4015] loop1: detected capacity change from 0 to 1024 [ 42.780851][ T4036] loop2: detected capacity change from 0 to 2048 [ 42.802644][ T4036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.805036][ T4015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.841252][ T4015] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.876193][ T4050] SELinux: ebitmap: truncated map [ 42.881827][ T4050] SELinux: failed to load policy [ 42.886876][ T4036] syz_tun: entered allmulticast mode [ 42.931441][ T4054] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 42.931441][ T4054] program syz.3.182 not setting count and/or reply_len properly [ 42.954044][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.021681][ T4060] Invalid ELF header type: 2 != 1 [ 43.044058][ T4035] syz_tun: left allmulticast mode [ 43.063041][ T3307] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /31/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 43.101178][ T4070] FAULT_INJECTION: forcing a failure. [ 43.101178][ T4070] name failslab, interval 1, probability 0, space 0, times 0 [ 43.113905][ T4070] CPU: 1 UID: 0 PID: 4070 Comm: syz.0.191 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 43.113964][ T4070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 43.113978][ T4070] Call Trace: [ 43.113985][ T4070] [ 43.113993][ T4070] __dump_stack+0x1d/0x30 [ 43.114025][ T4070] dump_stack_lvl+0xe8/0x140 [ 43.114044][ T4070] dump_stack+0x15/0x1b [ 43.114132][ T4070] should_fail_ex+0x265/0x280 [ 43.114170][ T4070] should_failslab+0x8c/0xb0 [ 43.114206][ T4070] kmem_cache_alloc_node_noprof+0x57/0x320 [ 43.114308][ T4070] ? __alloc_skb+0x101/0x320 [ 43.114393][ T4070] __alloc_skb+0x101/0x320 [ 43.114428][ T4070] ? audit_log_start+0x365/0x6c0 [ 43.114511][ T4070] audit_log_start+0x380/0x6c0 [ 43.114579][ T4070] audit_seccomp+0x48/0x100 [ 43.114641][ T4070] ? __seccomp_filter+0x68c/0x10d0 [ 43.114738][ T4070] __seccomp_filter+0x69d/0x10d0 [ 43.114762][ T4070] ? __cond_resched+0x4e/0x90 [ 43.114802][ T4070] __secure_computing+0x82/0x150 [ 43.114827][ T4070] syscall_trace_enter+0xcf/0x1e0 [ 43.114850][ T4070] do_syscall_64+0xaa/0x1a0 [ 43.114936][ T4070] ? clear_bhb_loop+0x25/0x80 [ 43.114963][ T4070] ? clear_bhb_loop+0x25/0x80 [ 43.114989][ T4070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.115010][ T4070] RIP: 0033:0x7f2a4bc2d37c [ 43.115050][ T4070] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 43.115069][ T4070] RSP: 002b:00007f2a4a297030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.115128][ T4070] RAX: ffffffffffffffda RBX: 00007f2a4be55fa0 RCX: 00007f2a4bc2d37c [ 43.115221][ T4070] RDX: 000000000000000f RSI: 00007f2a4a2970a0 RDI: 0000000000000007 [ 43.115236][ T4070] RBP: 00007f2a4a297090 R08: 0000000000000000 R09: 0000000000000000 [ 43.115251][ T4070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.115266][ T4070] R13: 0000000000000000 R14: 00007f2a4be55fa0 R15: 00007ffc150ff098 [ 43.115288][ T4070] [ 43.353495][ T3307] EXT4-fs error (device loop2): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 43.378162][ T4078] loop3: detected capacity change from 0 to 512 [ 43.384722][ T3307] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '..' [ 43.387020][ T4078] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 43.398008][ T3307] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /31/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 43.409491][ T4078] System zones: 1-12 [ 43.435657][ T3307] EXT4-fs error (device loop2): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 43.436851][ T4078] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #2: comm syz.3.194: corrupted xattr block 255: invalid header [ 43.469897][ T4078] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 43.472853][ T4083] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 43.472853][ T4083] program syz.0.196 not setting count and/or reply_len properly [ 43.478727][ T4078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.497178][ T3307] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '..' [ 43.507821][ T4078] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #2: comm syz.3.194: corrupted xattr block 255: invalid header [ 43.532613][ T4078] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 43.539635][ T3307] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /31/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 43.565383][ T3307] EXT4-fs error (device loop2): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 43.587320][ T3307] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '..' [ 43.599318][ T3307] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /31/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 43.624475][ T4078] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.641441][ T3307] EXT4-fs error (device loop2): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 43.662155][ T3307] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '..' [ 43.674106][ T3307] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /31/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 43.729982][ T3307] EXT4-fs error (device loop2): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 43.773035][ T4092] ipvlan2: entered promiscuous mode [ 43.781781][ T4092] bridge0: port 3(ipvlan2) entered blocking state [ 43.788326][ T4092] bridge0: port 3(ipvlan2) entered disabled state [ 43.796728][ T3307] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '..' [ 43.796797][ T4092] ipvlan2: entered allmulticast mode [ 43.813836][ T4092] bridge0: entered allmulticast mode [ 43.821415][ T4092] ipvlan2: left allmulticast mode [ 43.826593][ T4092] bridge0: left allmulticast mode [ 43.861024][ T3307] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '..' [ 43.901912][ T3307] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '..' [ 43.914265][ T4089] loop1: detected capacity change from 0 to 1024 [ 43.929364][ T4089] EXT4-fs: Ignoring removed bh option [ 43.929513][ T3307] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '..' [ 43.989227][ T3307] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '..' [ 44.002113][ T3307] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '..' [ 44.050051][ T4089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.107958][ T4115] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 44.107958][ T4115] program syz.4.207 not setting count and/or reply_len properly [ 44.192520][ T4124] 9pnet_fd: Insufficient options for proto=fd [ 44.209773][ T4089] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 44.250357][ T4089] EXT4-fs (loop1): Remounting filesystem read-only [ 44.333508][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.347274][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.390404][ T4137] loop3: detected capacity change from 0 to 2048 [ 44.397839][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.442490][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.451343][ T4137] Alternate GPT is invalid, using primary GPT. [ 44.459309][ T4137] loop3: p2 p3 p7 [ 44.496939][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.517292][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.630356][ T12] bridge_slave_1: left allmulticast mode [ 44.636077][ T12] bridge_slave_1: left promiscuous mode [ 44.642418][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.654578][ T12] bridge_slave_0: left allmulticast mode [ 44.660516][ T12] bridge_slave_0: left promiscuous mode [ 44.666447][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.690043][ T4155] loop3: detected capacity change from 0 to 512 [ 44.702491][ T4155] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.221: corrupted in-inode xattr: invalid ea_ino [ 44.720559][ T4155] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.221: couldn't read orphan inode 15 (err -117) [ 44.739291][ T4155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.801530][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.811694][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.822266][ T12] bond0 (unregistering): Released all slaves [ 44.889605][ T12] hsr_slave_0: left promiscuous mode [ 44.901618][ T12] hsr_slave_1: left promiscuous mode [ 44.909789][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.917282][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.927327][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.934845][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.960510][ T12] veth1_macvtap: left promiscuous mode [ 44.972624][ T12] veth0_macvtap: left promiscuous mode [ 44.984805][ T12] veth1_vlan: left promiscuous mode [ 44.992999][ T12] veth0_vlan: left promiscuous mode [ 45.019656][ T4180] FAULT_INJECTION: forcing a failure. [ 45.019656][ T4180] name failslab, interval 1, probability 0, space 0, times 0 [ 45.032379][ T4180] CPU: 0 UID: 0 PID: 4180 Comm: syz.0.225 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 45.032405][ T4180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.032435][ T4180] Call Trace: [ 45.032442][ T4180] [ 45.032451][ T4180] __dump_stack+0x1d/0x30 [ 45.032476][ T4180] dump_stack_lvl+0xe8/0x140 [ 45.032500][ T4180] dump_stack+0x15/0x1b [ 45.032547][ T4180] should_fail_ex+0x265/0x280 [ 45.032606][ T4180] should_failslab+0x8c/0xb0 [ 45.032636][ T4180] __kmalloc_noprof+0xa5/0x3e0 [ 45.032657][ T4180] ? context_struct_to_string+0x24d/0x3a0 [ 45.032697][ T4180] context_struct_to_string+0x24d/0x3a0 [ 45.032811][ T4180] security_sid_to_context_core+0x215/0x2e0 [ 45.032855][ T4180] security_sid_to_context+0x27/0x40 [ 45.032883][ T4180] sel_write_context+0x12f/0x200 [ 45.032936][ T4180] selinux_transaction_write+0xc3/0x110 [ 45.032978][ T4180] ? __pfx_selinux_transaction_write+0x10/0x10 [ 45.033104][ T4180] vfs_write+0x266/0x8d0 [ 45.033129][ T4180] ? __rcu_read_unlock+0x4f/0x70 [ 45.033148][ T4180] ? __fget_files+0x184/0x1c0 [ 45.033214][ T4180] ksys_write+0xda/0x1a0 [ 45.033238][ T4180] __x64_sys_write+0x40/0x50 [ 45.033292][ T4180] x64_sys_call+0x2cdd/0x2fb0 [ 45.033313][ T4180] do_syscall_64+0xd0/0x1a0 [ 45.033340][ T4180] ? clear_bhb_loop+0x25/0x80 [ 45.033365][ T4180] ? clear_bhb_loop+0x25/0x80 [ 45.033384][ T4180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.033454][ T4180] RIP: 0033:0x7f2a4bc2e969 [ 45.033473][ T4180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.033491][ T4180] RSP: 002b:00007f2a4a297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.033508][ T4180] RAX: ffffffffffffffda RBX: 00007f2a4be55fa0 RCX: 00007f2a4bc2e969 [ 45.033520][ T4180] RDX: 000000000000001d RSI: 0000200000000340 RDI: 0000000000000006 [ 45.033535][ T4180] RBP: 00007f2a4a297090 R08: 0000000000000000 R09: 0000000000000000 [ 45.033550][ T4180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.033562][ T4180] R13: 0000000000000000 R14: 00007f2a4be55fa0 R15: 00007ffc150ff098 [ 45.033621][ T4180] [ 45.327922][ T4186] loop4: detected capacity change from 0 to 512 [ 45.342248][ T4186] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.363182][ T4186] EXT4-fs (loop4): 1 orphan inode deleted [ 45.371623][ T4186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.386443][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 45.417486][ T12] team0 (unregistering): Port device team_slave_1 removed [ 45.418042][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.434347][ T4186] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.434603][ T12] team0 (unregistering): Port device team_slave_0 removed [ 45.455737][ T4199] xt_addrtype: ipv6 does not support BROADCAST matching [ 45.533564][ T4193] netlink: 92 bytes leftover after parsing attributes in process `syz.1.229'. [ 45.544727][ T4186] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 45.581108][ T4203] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 45.653756][ T4139] chnl_net:caif_netlink_parms(): no params data found [ 45.691416][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.704389][ T4217] loop1: detected capacity change from 0 to 764 [ 45.731069][ T4217] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 45.746642][ T4229] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 45.746642][ T4229] program syz.4.236 not setting count and/or reply_len properly [ 45.774401][ T4217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 45.783905][ T4139] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.791097][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.814187][ T4139] bridge_slave_0: entered allmulticast mode [ 45.821116][ T4139] bridge_slave_0: entered promiscuous mode [ 45.831524][ T4139] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.838712][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.858125][ T4139] bridge_slave_1: entered allmulticast mode [ 45.866899][ T4139] bridge_slave_1: entered promiscuous mode [ 45.925179][ T4139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.958882][ T4139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.973583][ T4244] SELinux: ebitmap: truncated map [ 45.982673][ T4244] SELinux: failed to load policy [ 46.005909][ T4139] team0: Port device team_slave_0 added [ 46.023740][ T4139] team0: Port device team_slave_1 added [ 46.045383][ T4254] loop1: detected capacity change from 0 to 512 [ 46.070115][ T4139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.077461][ T4139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.077497][ T4254] journal_path: Non-blockdev passed as './bus' [ 46.077528][ T4139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.103565][ T4254] EXT4-fs: error: could not find journal device path [ 46.142790][ T4139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.149844][ T4139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.175861][ T4139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.187717][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.195039][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.203959][ T4254] bridge0: entered allmulticast mode [ 46.219159][ T4260] bridge_slave_1: left allmulticast mode [ 46.225156][ T4260] bridge_slave_1: left promiscuous mode [ 46.231107][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.240068][ T4260] bridge_slave_0: left allmulticast mode [ 46.245774][ T4260] bridge_slave_0: left promiscuous mode [ 46.251578][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.321858][ T4139] hsr_slave_0: entered promiscuous mode [ 46.328100][ T4266] FAULT_INJECTION: forcing a failure. [ 46.328100][ T4266] name failslab, interval 1, probability 0, space 0, times 0 [ 46.328147][ T4139] hsr_slave_1: entered promiscuous mode [ 46.340840][ T4266] CPU: 1 UID: 0 PID: 4266 Comm: syz.4.242 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 46.340910][ T4266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.340954][ T4266] Call Trace: [ 46.340962][ T4266] [ 46.340973][ T4266] __dump_stack+0x1d/0x30 [ 46.341000][ T4266] dump_stack_lvl+0xe8/0x140 [ 46.341075][ T4266] dump_stack+0x15/0x1b [ 46.341135][ T4266] should_fail_ex+0x265/0x280 [ 46.341176][ T4266] should_failslab+0x8c/0xb0 [ 46.341248][ T4266] __kmalloc_noprof+0xa5/0x3e0 [ 46.341271][ T4266] ? context_struct_to_string+0x24d/0x3a0 [ 46.341308][ T4266] ? kfree+0x26f/0x310 [ 46.341347][ T4266] context_struct_to_string+0x24d/0x3a0 [ 46.341408][ T4266] security_sid_to_context_core+0x215/0x2e0 [ 46.341543][ T4266] security_sid_to_context+0x27/0x40 [ 46.341578][ T4266] sel_write_context+0x12f/0x200 [ 46.341622][ T4266] selinux_transaction_write+0xc3/0x110 [ 46.341688][ T4266] ? __pfx_selinux_transaction_write+0x10/0x10 [ 46.341732][ T4266] vfs_write+0x266/0x8d0 [ 46.341790][ T4266] ? __rcu_read_unlock+0x4f/0x70 [ 46.341866][ T4266] ? __fget_files+0x184/0x1c0 [ 46.341904][ T4266] ksys_write+0xda/0x1a0 [ 46.341937][ T4266] __x64_sys_write+0x40/0x50 [ 46.341969][ T4266] x64_sys_call+0x2cdd/0x2fb0 [ 46.342067][ T4266] do_syscall_64+0xd0/0x1a0 [ 46.342094][ T4266] ? clear_bhb_loop+0x25/0x80 [ 46.342122][ T4266] ? clear_bhb_loop+0x25/0x80 [ 46.342195][ T4266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.342221][ T4266] RIP: 0033:0x7fb47315e969 [ 46.342243][ T4266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.342266][ T4266] RSP: 002b:00007fb4717c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 46.342290][ T4266] RAX: ffffffffffffffda RBX: 00007fb473385fa0 RCX: 00007fb47315e969 [ 46.342305][ T4266] RDX: 000000000000001d RSI: 0000200000000340 RDI: 0000000000000006 [ 46.342322][ T4266] RBP: 00007fb4717c7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.342338][ T4266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.342354][ T4266] R13: 0000000000000000 R14: 00007fb473385fa0 R15: 00007ffebefa17c8 [ 46.342405][ T4266] [ 46.570102][ T4139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.577681][ T4139] Cannot create hsr debugfs directory [ 46.696086][ T4276] SELinux: ebitmap: truncated map [ 46.708236][ T4279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.247'. [ 46.730672][ T4281] 8021q: VLANs not supported on nlmon0 [ 46.740087][ T4276] SELinux: failed to load policy [ 46.791317][ T4290] netlink: 'syz.3.249': attribute type 1 has an invalid length. [ 46.830327][ T4139] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.855075][ T4299] Invalid ELF header type: 2 != 1 [ 46.863842][ T4139] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.890103][ T4139] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.908424][ T9] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 46.916031][ T9] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 46.923533][ T9] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 46.931251][ T9] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 46.938848][ T9] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 46.946342][ T9] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 46.959888][ T9] hid-generic 0021:0009:0000.0001: hidraw0: HID v0.07 Device [syz0] on syz1 [ 46.991008][ T4139] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.038007][ T4313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 47.093384][ T4321] 8021q: VLANs not supported on nlmon0 [ 47.191294][ T4329] SELinux: ebitmap: truncated map [ 47.201510][ T4139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.235689][ T4329] SELinux: failed to load policy [ 47.237555][ T4139] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.263129][ T4100] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.270249][ T4100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.306798][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.313948][ T4100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.341030][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 47.341044][ T29] audit: type=1400 audit(1745832047.217:983): avc: denied { write } for pid=4344 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.378813][ T4348] 9pnet_fd: Insufficient options for proto=fd [ 47.409494][ T4351] FAULT_INJECTION: forcing a failure. [ 47.409494][ T4351] name failslab, interval 1, probability 0, space 0, times 0 [ 47.422208][ T4351] CPU: 1 UID: 0 PID: 4351 Comm: syz.0.267 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 47.422241][ T4351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.422256][ T4351] Call Trace: [ 47.422264][ T4351] [ 47.422273][ T4351] __dump_stack+0x1d/0x30 [ 47.422311][ T4351] dump_stack_lvl+0xe8/0x140 [ 47.422378][ T4351] dump_stack+0x15/0x1b [ 47.422398][ T4351] should_fail_ex+0x265/0x280 [ 47.422437][ T4351] ? __se_sys_mount+0xef/0x2e0 [ 47.422468][ T4351] should_failslab+0x8c/0xb0 [ 47.422545][ T4351] __kmalloc_cache_noprof+0x4c/0x320 [ 47.422569][ T4351] ? memdup_user+0x99/0xd0 [ 47.422593][ T4351] __se_sys_mount+0xef/0x2e0 [ 47.422618][ T4351] ? fput+0x8f/0xc0 [ 47.422633][ T4351] ? ksys_write+0x16e/0x1a0 [ 47.422736][ T4351] __x64_sys_mount+0x67/0x80 [ 47.422760][ T4351] x64_sys_call+0xd36/0x2fb0 [ 47.422782][ T4351] do_syscall_64+0xd0/0x1a0 [ 47.422858][ T4351] ? clear_bhb_loop+0x25/0x80 [ 47.422930][ T4351] ? clear_bhb_loop+0x25/0x80 [ 47.422950][ T4351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.422969][ T4351] RIP: 0033:0x7f2a4bc2e969 [ 47.422985][ T4351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.423035][ T4351] RSP: 002b:00007f2a4a297038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 47.423059][ T4351] RAX: ffffffffffffffda RBX: 00007f2a4be55fa0 RCX: 00007f2a4bc2e969 [ 47.423074][ T4351] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 47.423090][ T4351] RBP: 00007f2a4a297090 R08: 0000200000000ec0 R09: 0000000000000000 [ 47.423105][ T4351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.423120][ T4351] R13: 0000000000000000 R14: 00007f2a4be55fa0 R15: 00007ffc150ff098 [ 47.423189][ T4351] [ 47.510260][ T4355] loop3: detected capacity change from 0 to 256 [ 47.656018][ T29] audit: type=1400 audit(1745832047.527:984): avc: denied { create } for pid=4353 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 47.726962][ T4139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.774244][ T29] audit: type=1400 audit(1745832047.637:985): avc: denied { map } for pid=4373 comm="syz.0.270" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 47.798746][ T29] audit: type=1400 audit(1745832047.647:986): avc: denied { create } for pid=4373 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 47.873285][ T4384] 8021q: VLANs not supported on nlmon0 [ 47.905488][ T4387] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 47.919063][ T29] audit: type=1400 audit(1745832047.777:987): avc: denied { audit_read } for pid=4385 comm="syz.1.271" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.970597][ T4398] vlan2: entered allmulticast mode [ 47.975878][ T4398] bridge_slave_0: entered allmulticast mode [ 48.015555][ T4397] SELinux: ebitmap: truncated map [ 48.027706][ T4405] bridge_slave_0: entered promiscuous mode [ 48.046555][ T4397] SELinux: failed to load policy [ 48.051686][ T29] audit: type=1326 audit(1745832047.927:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4bc2e969 code=0x7ffc0000 [ 48.051725][ T29] audit: type=1326 audit(1745832047.927:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2a4bc2e969 code=0x7ffc0000 [ 48.134209][ T4415] loop3: detected capacity change from 0 to 1024 [ 48.143350][ T4415] EXT4-fs: Ignoring removed orlov option [ 48.169209][ T4415] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 48.183553][ T29] audit: type=1326 audit(1745832047.977:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4bc2e969 code=0x7ffc0000 [ 48.206887][ T29] audit: type=1326 audit(1745832047.977:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a4bc2e969 code=0x7ffc0000 [ 48.225155][ T4139] veth0_vlan: entered promiscuous mode [ 48.230185][ T29] audit: type=1326 audit(1745832047.977:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4bc2e969 code=0x7ffc0000 [ 48.266725][ T4415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.280988][ T4139] veth1_vlan: entered promiscuous mode [ 48.304229][ T4139] veth0_macvtap: entered promiscuous mode [ 48.321191][ T4139] veth1_macvtap: entered promiscuous mode [ 48.343129][ T4139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.353653][ T4139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.363635][ T4139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.374154][ T4139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.384045][ T4139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.390761][ T4410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 48.394574][ T4139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.408589][ T4410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 48.415318][ T4139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.444387][ T4139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.454786][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.454995][ T4139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.473872][ T4139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.484361][ T4139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.494263][ T4139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.504781][ T4139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.515892][ T4139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.533149][ T4139] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.541972][ T4139] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.550730][ T4139] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.559526][ T4139] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.567391][ T4435] loop4: detected capacity change from 0 to 256 [ 48.575445][ T4437] netlink: 16 bytes leftover after parsing attributes in process `syz.3.282'. [ 48.615835][ T4434] netlink: 28 bytes leftover after parsing attributes in process `syz.4.281'. [ 48.719481][ T4385] bridge_slave_0: left promiscuous mode [ 48.818409][ T4458] SELinux: ebitmap: truncated map [ 48.836271][ T4458] SELinux: failed to load policy [ 48.951930][ T4479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.293'. [ 48.966232][ T4484] loop3: detected capacity change from 0 to 1024 [ 49.003119][ T4484] EXT4-fs: Ignoring removed orlov option [ 49.009460][ T4484] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 49.057746][ T4484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.078585][ T4494] loop5: detected capacity change from 0 to 1024 [ 49.119366][ T4496] netlink: 'syz.4.297': attribute type 1 has an invalid length. [ 49.568704][ T4494] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.851579][ T4494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.882846][ T4511] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 49.917308][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.030473][ T4139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.043597][ T4526] loop3: detected capacity change from 0 to 128 [ 50.073611][ T4531] loop4: detected capacity change from 0 to 1024 [ 50.125010][ T4526] FAULT_INJECTION: forcing a failure. [ 50.125010][ T4526] name failslab, interval 1, probability 0, space 0, times 0 [ 50.137774][ T4526] CPU: 0 UID: 0 PID: 4526 Comm: syz.3.305 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 50.137806][ T4526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.137844][ T4526] Call Trace: [ 50.137898][ T4526] [ 50.137907][ T4526] __dump_stack+0x1d/0x30 [ 50.137933][ T4526] dump_stack_lvl+0xe8/0x140 [ 50.137956][ T4526] dump_stack+0x15/0x1b [ 50.137976][ T4526] should_fail_ex+0x265/0x280 [ 50.138021][ T4526] ? call_usermodehelper_setup+0x72/0x190 [ 50.138129][ T4526] should_failslab+0x8c/0xb0 [ 50.138160][ T4526] ? __pfx_free_modprobe_argv+0x10/0x10 [ 50.138243][ T4526] __kmalloc_cache_noprof+0x4c/0x320 [ 50.138267][ T4526] ? __kmalloc_node_track_caller_noprof+0x1e5/0x410 [ 50.138293][ T4526] ? __pfx_free_modprobe_argv+0x10/0x10 [ 50.138319][ T4526] call_usermodehelper_setup+0x72/0x190 [ 50.138439][ T4526] __request_module+0x264/0x3e0 [ 50.138472][ T4526] crypto_alg_mod_lookup+0xe4/0x490 [ 50.138503][ T4526] crypto_alloc_tfm_node+0xb5/0x2b0 [ 50.138537][ T4526] crypto_alloc_aead+0x2d/0x40 [ 50.138564][ T4526] tls_set_sw_offload+0x65a/0xba0 [ 50.138590][ T4526] tls_setsockopt+0xa02/0xce0 [ 50.138637][ T4526] sock_common_setsockopt+0x66/0x80 [ 50.138666][ T4526] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 50.138692][ T4526] __sys_setsockopt+0x181/0x200 [ 50.138775][ T4526] __x64_sys_setsockopt+0x64/0x80 [ 50.138882][ T4526] x64_sys_call+0x2bd5/0x2fb0 [ 50.138902][ T4526] do_syscall_64+0xd0/0x1a0 [ 50.138922][ T4526] ? clear_bhb_loop+0x25/0x80 [ 50.139028][ T4526] ? clear_bhb_loop+0x25/0x80 [ 50.139068][ T4526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.139088][ T4526] RIP: 0033:0x7fa990e7e969 [ 50.139130][ T4526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.139146][ T4526] RSP: 002b:00007fa98f4e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 50.139164][ T4526] RAX: ffffffffffffffda RBX: 00007fa9910a5fa0 RCX: 00007fa990e7e969 [ 50.139179][ T4526] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000008 [ 50.139274][ T4526] RBP: 00007fa98f4e7090 R08: 0000000000000038 R09: 0000000000000000 [ 50.139289][ T4526] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 50.139303][ T4526] R13: 0000000000000000 R14: 00007fa9910a5fa0 R15: 00007ffd1790ba18 [ 50.139325][ T4526] [ 50.412404][ T4543] netlink: 'syz.1.309': attribute type 1 has an invalid length. [ 50.543478][ T4561] FAULT_INJECTION: forcing a failure. [ 50.543478][ T4561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.556657][ T4561] CPU: 0 UID: 0 PID: 4561 Comm: syz.1.317 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 50.556685][ T4561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.556699][ T4561] Call Trace: [ 50.556707][ T4561] [ 50.556716][ T4561] __dump_stack+0x1d/0x30 [ 50.556866][ T4561] dump_stack_lvl+0xe8/0x140 [ 50.556893][ T4561] dump_stack+0x15/0x1b [ 50.556907][ T4561] should_fail_ex+0x265/0x280 [ 50.557008][ T4561] should_fail+0xb/0x20 [ 50.557079][ T4561] should_fail_usercopy+0x1a/0x20 [ 50.557096][ T4561] _copy_from_iter+0xcf/0xdd0 [ 50.557111][ T4561] ? __build_skb_around+0x1a0/0x200 [ 50.557138][ T4561] ? __alloc_skb+0x223/0x320 [ 50.557178][ T4561] netlink_sendmsg+0x471/0x6b0 [ 50.557211][ T4561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.557241][ T4561] __sock_sendmsg+0x142/0x180 [ 50.557306][ T4561] ____sys_sendmsg+0x31e/0x4e0 [ 50.557338][ T4561] ___sys_sendmsg+0x17b/0x1d0 [ 50.557367][ T4561] __x64_sys_sendmsg+0xd4/0x160 [ 50.557395][ T4561] x64_sys_call+0x2999/0x2fb0 [ 50.557420][ T4561] do_syscall_64+0xd0/0x1a0 [ 50.557439][ T4561] ? clear_bhb_loop+0x25/0x80 [ 50.557509][ T4561] ? clear_bhb_loop+0x25/0x80 [ 50.557527][ T4561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.557564][ T4561] RIP: 0033:0x7fc93f85e969 [ 50.557577][ T4561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.557657][ T4561] RSP: 002b:00007fc93dec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.557681][ T4561] RAX: ffffffffffffffda RBX: 00007fc93fa85fa0 RCX: 00007fc93f85e969 [ 50.557697][ T4561] RDX: 0000000020000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 50.557707][ T4561] RBP: 00007fc93dec7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.557717][ T4561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.557728][ T4561] R13: 0000000000000000 R14: 00007fc93fa85fa0 R15: 00007ffcd50ba308 [ 50.557744][ T4561] [ 50.832762][ T4568] __nla_validate_parse: 2 callbacks suppressed [ 50.832779][ T4568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'. [ 50.856796][ T4524] 9pnet_fd: p9_fd_create_tcp (4524): problem connecting socket to 127.0.0.1 [ 50.928524][ T4574] sctp: [Deprecated]: syz.3.322 (pid 4574) Use of int in max_burst socket option. [ 50.928524][ T4574] Use struct sctp_assoc_value instead [ 50.988127][ T4576] loop5: detected capacity change from 0 to 512 [ 51.009599][ T4576] EXT4-fs: Ignoring removed orlov option [ 51.042173][ T4576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.056187][ T4576] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.108351][ T4599] netlink: 'syz.3.331': attribute type 39 has an invalid length. [ 51.129642][ T4139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.280570][ T4612] bond0: (slave bond_slave_0): Releasing backup interface [ 51.290715][ T4612] bond0: (slave bond_slave_1): Releasing backup interface [ 51.302474][ T4612] team0: Port device team_slave_0 removed [ 51.311853][ T4612] team0: Port device team_slave_1 removed [ 51.318803][ T4612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.326309][ T4612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.336422][ T4612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.344013][ T4612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.611456][ T4635] netlink: 'syz.3.347': attribute type 1 has an invalid length. [ 51.829659][ T4658] bridge_slave_0: left allmulticast mode [ 51.835443][ T4658] bridge_slave_0: left promiscuous mode [ 51.841211][ T4658] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.851879][ T4658] bridge_slave_1: left allmulticast mode [ 51.857651][ T4658] bridge_slave_1: left promiscuous mode [ 51.864180][ T4658] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.892619][ T3369] hid-generic 0000:0004:0006.0002: unknown main item tag 0x0 [ 51.900186][ T3369] hid-generic 0000:0004:0006.0002: unknown main item tag 0x0 [ 51.907588][ T3369] hid-generic 0000:0004:0006.0002: unknown main item tag 0x0 [ 51.915027][ T3369] hid-generic 0000:0004:0006.0002: unknown main item tag 0x0 [ 51.922520][ T3369] hid-generic 0000:0004:0006.0002: unknown main item tag 0x0 [ 51.929961][ T3369] hid-generic 0000:0004:0006.0002: unknown main item tag 0x0 [ 51.937434][ T3369] hid-generic 0000:0004:0006.0002: unknown main item tag 0x0 [ 51.945096][ T3369] hid-generic 0000:0004:0006.0002: unknown main item tag 0x0 [ 51.952571][ T3369] hid-generic 0000:0004:0006.0002: unknown main item tag 0x0 [ 51.960141][ T3369] hid-generic 0000:0004:0006.0002: unknown main item tag 0x0 [ 51.967545][ T3369] hid-generic 0000:0004:0006.0002: unknown main item tag 0x0 [ 51.971600][ T4664] SELinux: ebitmap: truncated map [ 51.975014][ T3369] hid-generic 0000:0004:0006.0002: unknown main item tag 0x0 [ 51.983020][ T4664] SELinux: failed to load policy [ 51.987389][ T3369] hid-generic 0000:0004:0006.0002: unknown main item tag 0x0 [ 51.999898][ T3369] hid-generic 0000:0004:0006.0002: unknown main item tag 0x0 [ 52.007307][ T3369] hid-generic 0000:0004:0006.0002: unknown main item tag 0x0 [ 52.014757][ T3369] hid-generic 0000:0004:0006.0002: unknown main item tag 0x0 [ 52.022927][ T4658] bond0: (slave bond_slave_0): Releasing backup interface [ 52.127174][ T4658] bond0: (slave bond_slave_1): Releasing backup interface [ 52.150499][ T3369] hid-generic 0000:0004:0006.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 52.192505][ T4658] team0: Port device team_slave_0 removed [ 52.202101][ T4677] netlink: 'syz.5.360': attribute type 1 has an invalid length. [ 52.215221][ T4678] netlink: 40 bytes leftover after parsing attributes in process `syz.3.359'. [ 52.228116][ T4658] team0: Port device team_slave_1 removed [ 52.246003][ T4658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.253539][ T4658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.270363][ T4658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.277852][ T4658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.366496][ T4688] veth0_vlan: entered allmulticast mode [ 52.384582][ T4690] ªªªªªª: renamed from vlan0 [ 52.458782][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 52.458797][ T29] audit: type=1400 audit(1745832052.327:1191): avc: denied { connect } for pid=4693 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.500724][ T29] audit: type=1400 audit(1745832052.367:1192): avc: denied { write } for pid=4693 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.520125][ T29] audit: type=1400 audit(1745832052.367:1193): avc: denied { ioctl } for pid=4693 comm="syz.4.366" path="socket:[9269]" dev="sockfs" ino=9269 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.544807][ T29] audit: type=1326 audit(1745832052.367:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4693 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47315e969 code=0x7ffc0000 [ 52.568277][ T29] audit: type=1326 audit(1745832052.367:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4693 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fb47315e969 code=0x7ffc0000 [ 52.591736][ T29] audit: type=1326 audit(1745832052.367:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4693 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47315e969 code=0x7ffc0000 [ 52.615210][ T29] audit: type=1326 audit(1745832052.367:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4693 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb47315e969 code=0x7ffc0000 [ 52.638543][ T29] audit: type=1326 audit(1745832052.367:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4693 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47315e969 code=0x7ffc0000 [ 52.639406][ T4694] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 52.662127][ T29] audit: type=1326 audit(1745832052.367:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4693 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47315e969 code=0x7ffc0000 [ 52.662161][ T29] audit: type=1326 audit(1745832052.367:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4693 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb47315e969 code=0x7ffc0000 [ 52.666793][ T4645] Process accounting resumed [ 52.760830][ T4700] SELinux: ebitmap: truncated map [ 52.766381][ T4700] SELinux: failed to load policy [ 52.811645][ T4710] FAULT_INJECTION: forcing a failure. [ 52.811645][ T4710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.824940][ T4710] CPU: 0 UID: 0 PID: 4710 Comm: syz.4.371 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 52.825060][ T4710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.825072][ T4710] Call Trace: [ 52.825077][ T4710] [ 52.825158][ T4710] __dump_stack+0x1d/0x30 [ 52.825183][ T4710] dump_stack_lvl+0xe8/0x140 [ 52.825205][ T4710] dump_stack+0x15/0x1b [ 52.825243][ T4710] should_fail_ex+0x265/0x280 [ 52.825299][ T4710] should_fail+0xb/0x20 [ 52.825395][ T4710] should_fail_usercopy+0x1a/0x20 [ 52.825461][ T4710] _copy_from_iter+0xcf/0xdd0 [ 52.825485][ T4710] ? __build_skb_around+0x1a0/0x200 [ 52.825525][ T4710] ? __alloc_skb+0x223/0x320 [ 52.825565][ T4710] netlink_sendmsg+0x471/0x6b0 [ 52.825677][ T4710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.825718][ T4710] __sock_sendmsg+0x142/0x180 [ 52.825774][ T4710] ____sys_sendmsg+0x31e/0x4e0 [ 52.825820][ T4710] ___sys_sendmsg+0x17b/0x1d0 [ 52.825862][ T4710] __x64_sys_sendmsg+0xd4/0x160 [ 52.825889][ T4710] x64_sys_call+0x2999/0x2fb0 [ 52.825938][ T4710] do_syscall_64+0xd0/0x1a0 [ 52.825965][ T4710] ? clear_bhb_loop+0x25/0x80 [ 52.825992][ T4710] ? clear_bhb_loop+0x25/0x80 [ 52.826019][ T4710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.826046][ T4710] RIP: 0033:0x7fb47315e969 [ 52.826083][ T4710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.826105][ T4710] RSP: 002b:00007fb4717c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.826128][ T4710] RAX: ffffffffffffffda RBX: 00007fb473385fa0 RCX: 00007fb47315e969 [ 52.826141][ T4710] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 52.826156][ T4710] RBP: 00007fb4717c7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.826170][ T4710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.826329][ T4710] R13: 0000000000000000 R14: 00007fb473385fa0 R15: 00007ffebefa17c8 [ 52.826352][ T4710] [ 52.835875][ T4708] netlink: 'syz.0.374': attribute type 1 has an invalid length. [ 52.919361][ T4717] 9pnet_fd: Insufficient options for proto=fd [ 53.079532][ T4721] FAULT_INJECTION: forcing a failure. [ 53.079532][ T4721] name failslab, interval 1, probability 0, space 0, times 0 [ 53.092366][ T4721] CPU: 0 UID: 0 PID: 4721 Comm: syz.4.379 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 53.092395][ T4721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.092495][ T4721] Call Trace: [ 53.092504][ T4721] [ 53.092513][ T4721] __dump_stack+0x1d/0x30 [ 53.092538][ T4721] dump_stack_lvl+0xe8/0x140 [ 53.092563][ T4721] dump_stack+0x15/0x1b [ 53.092659][ T4721] should_fail_ex+0x265/0x280 [ 53.092697][ T4721] ? __se_sys_mount+0xef/0x2e0 [ 53.092794][ T4721] should_failslab+0x8c/0xb0 [ 53.092828][ T4721] __kmalloc_cache_noprof+0x4c/0x320 [ 53.092853][ T4721] ? memdup_user+0x99/0xd0 [ 53.092884][ T4721] __se_sys_mount+0xef/0x2e0 [ 53.092921][ T4721] ? fput+0x8f/0xc0 [ 53.092938][ T4721] ? ksys_write+0x16e/0x1a0 [ 53.092962][ T4721] __x64_sys_mount+0x67/0x80 [ 53.093040][ T4721] x64_sys_call+0xd36/0x2fb0 [ 53.093203][ T4721] do_syscall_64+0xd0/0x1a0 [ 53.093228][ T4721] ? clear_bhb_loop+0x25/0x80 [ 53.093309][ T4721] ? clear_bhb_loop+0x25/0x80 [ 53.093338][ T4721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.093361][ T4721] RIP: 0033:0x7fb47315e969 [ 53.093375][ T4721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.093437][ T4721] RSP: 002b:00007fb4717c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 53.093459][ T4721] RAX: ffffffffffffffda RBX: 00007fb473385fa0 RCX: 00007fb47315e969 [ 53.093474][ T4721] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 53.093489][ T4721] RBP: 00007fb4717c7090 R08: 0000200000000ec0 R09: 0000000000000000 [ 53.093503][ T4721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.093518][ T4721] R13: 0000000000000000 R14: 00007fb473385fa0 R15: 00007ffebefa17c8 [ 53.093560][ T4721] [ 53.118715][ T4726] loop3: detected capacity change from 0 to 1764 [ 53.301810][ T4734] SELinux: ebitmap: truncated map [ 53.307172][ T4734] SELinux: failed to load policy [ 53.432205][ T4755] loop4: detected capacity change from 0 to 1024 [ 53.439451][ T4755] EXT4-fs: Ignoring removed orlov option [ 53.447180][ T4755] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 53.472145][ T4755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.504479][ T4762] FAULT_INJECTION: forcing a failure. [ 53.504479][ T4762] name failslab, interval 1, probability 0, space 0, times 0 [ 53.517252][ T4762] CPU: 1 UID: 0 PID: 4762 Comm: syz.1.393 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 53.517285][ T4762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.517297][ T4762] Call Trace: [ 53.517302][ T4762] [ 53.517309][ T4762] __dump_stack+0x1d/0x30 [ 53.517328][ T4762] dump_stack_lvl+0xe8/0x140 [ 53.517393][ T4762] dump_stack+0x15/0x1b [ 53.517415][ T4762] should_fail_ex+0x265/0x280 [ 53.517462][ T4762] should_failslab+0x8c/0xb0 [ 53.517488][ T4762] kmem_cache_alloc_node_noprof+0x57/0x320 [ 53.517518][ T4762] ? __alloc_skb+0x101/0x320 [ 53.517618][ T4762] __alloc_skb+0x101/0x320 [ 53.517644][ T4762] netlink_alloc_large_skb+0xba/0xf0 [ 53.517670][ T4762] netlink_sendmsg+0x3cf/0x6b0 [ 53.517748][ T4762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.517776][ T4762] __sock_sendmsg+0x142/0x180 [ 53.517798][ T4762] ____sys_sendmsg+0x31e/0x4e0 [ 53.517899][ T4762] ___sys_sendmsg+0x17b/0x1d0 [ 53.517928][ T4762] __x64_sys_sendmsg+0xd4/0x160 [ 53.517992][ T4762] x64_sys_call+0x2999/0x2fb0 [ 53.518012][ T4762] do_syscall_64+0xd0/0x1a0 [ 53.518030][ T4762] ? clear_bhb_loop+0x25/0x80 [ 53.518104][ T4762] ? clear_bhb_loop+0x25/0x80 [ 53.518122][ T4762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.518141][ T4762] RIP: 0033:0x7fc93f85e969 [ 53.518154][ T4762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.518230][ T4762] RSP: 002b:00007fc93dec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.518245][ T4762] RAX: ffffffffffffffda RBX: 00007fc93fa85fa0 RCX: 00007fc93f85e969 [ 53.518256][ T4762] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 53.518265][ T4762] RBP: 00007fc93dec7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.518275][ T4762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.518285][ T4762] R13: 0000000000000000 R14: 00007fc93fa85fa0 R15: 00007ffcd50ba308 [ 53.518302][ T4762] [ 53.751619][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.782984][ T4775] netlink: 244 bytes leftover after parsing attributes in process `syz.4.397'. [ 53.864050][ T4784] loop5: detected capacity change from 0 to 764 [ 53.890470][ T4784] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 54.041794][ T4791] FAULT_INJECTION: forcing a failure. [ 54.041794][ T4791] name failslab, interval 1, probability 0, space 0, times 0 [ 54.054537][ T4791] CPU: 0 UID: 0 PID: 4791 Comm: syz.5.403 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 54.054658][ T4791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.054672][ T4791] Call Trace: [ 54.054679][ T4791] [ 54.054688][ T4791] __dump_stack+0x1d/0x30 [ 54.054773][ T4791] dump_stack_lvl+0xe8/0x140 [ 54.054797][ T4791] dump_stack+0x15/0x1b [ 54.054841][ T4791] should_fail_ex+0x265/0x280 [ 54.054871][ T4791] ? resv_map_alloc+0x57/0x190 [ 54.054888][ T4791] should_failslab+0x8c/0xb0 [ 54.054946][ T4791] __kmalloc_cache_noprof+0x4c/0x320 [ 54.054972][ T4791] resv_map_alloc+0x57/0x190 [ 54.054994][ T4791] hugetlbfs_get_inode+0x67/0x370 [ 54.055090][ T4791] hugetlb_file_setup+0x192/0x3d0 [ 54.055116][ T4791] ksys_mmap_pgoff+0x157/0x310 [ 54.055148][ T4791] x64_sys_call+0x1602/0x2fb0 [ 54.055175][ T4791] do_syscall_64+0xd0/0x1a0 [ 54.055201][ T4791] ? clear_bhb_loop+0x25/0x80 [ 54.055291][ T4791] ? clear_bhb_loop+0x25/0x80 [ 54.055363][ T4791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.055390][ T4791] RIP: 0033:0x7fbbed30e969 [ 54.055408][ T4791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.055455][ T4791] RSP: 002b:00007fbbeb977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 54.055473][ T4791] RAX: ffffffffffffffda RBX: 00007fbbed535fa0 RCX: 00007fbbed30e969 [ 54.055484][ T4791] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 54.055496][ T4791] RBP: 00007fbbeb977090 R08: ffffffffffffffff R09: 0000000000000000 [ 54.055507][ T4791] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 54.055522][ T4791] R13: 0000000000000000 R14: 00007fbbed535fa0 R15: 00007ffec9d175c8 [ 54.055587][ T4791] [ 54.255241][ T4783] loop4: detected capacity change from 0 to 512 [ 54.268674][ T4783] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.295107][ T4783] EXT4-fs (loop4): 1 truncate cleaned up [ 54.315904][ T4783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.316291][ T4802] loop5: detected capacity change from 0 to 128 [ 54.359953][ T4783] netlink: 173236 bytes leftover after parsing attributes in process `syz.4.401'. [ 54.395044][ T4805] loop3: detected capacity change from 0 to 1024 [ 54.408574][ T4805] EXT4-fs: Ignoring removed orlov option [ 54.416986][ T4805] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 54.463399][ T4805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.477616][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.558492][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.611788][ T4833] netlink: 100 bytes leftover after parsing attributes in process `syz.4.414'. [ 54.624219][ T4835] netlink: 100 bytes leftover after parsing attributes in process `syz.1.415'. [ 54.668721][ T4840] FAULT_INJECTION: forcing a failure. [ 54.668721][ T4840] name failslab, interval 1, probability 0, space 0, times 0 [ 54.681626][ T4840] CPU: 1 UID: 0 PID: 4840 Comm: syz.3.412 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 54.681655][ T4840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.681667][ T4840] Call Trace: [ 54.681672][ T4840] [ 54.681680][ T4840] __dump_stack+0x1d/0x30 [ 54.681703][ T4840] dump_stack_lvl+0xe8/0x140 [ 54.681726][ T4840] dump_stack+0x15/0x1b [ 54.681789][ T4840] should_fail_ex+0x265/0x280 [ 54.681834][ T4840] should_failslab+0x8c/0xb0 [ 54.681865][ T4840] kmem_cache_alloc_node_noprof+0x57/0x320 [ 54.681981][ T4840] ? __alloc_skb+0x101/0x320 [ 54.682160][ T4840] __alloc_skb+0x101/0x320 [ 54.682196][ T4840] alloc_uevent_skb+0x5c/0x120 [ 54.682225][ T4840] kobject_uevent_net_broadcast+0x23c/0x410 [ 54.682262][ T4840] kobject_uevent_env+0x43d/0x570 [ 54.682350][ T4840] kobject_uevent+0x1d/0x30 [ 54.682444][ T4840] device_release_driver_internal+0x44f/0x4c0 [ 54.682472][ T4840] device_release_driver+0x19/0x20 [ 54.682497][ T4840] usb_driver_release_interface+0xf0/0x100 [ 54.682601][ T4840] proc_ioctl+0x1d5/0x400 [ 54.682648][ T4840] proc_ioctl_default+0x71/0xa0 [ 54.682747][ T4840] usbdev_ioctl+0xe97/0x1710 [ 54.682772][ T4840] ? __pfx_usbdev_ioctl+0x10/0x10 [ 54.682795][ T4840] __se_sys_ioctl+0xcb/0x140 [ 54.682829][ T4840] __x64_sys_ioctl+0x43/0x50 [ 54.682902][ T4840] x64_sys_call+0x19a8/0x2fb0 [ 54.682923][ T4840] do_syscall_64+0xd0/0x1a0 [ 54.682943][ T4840] ? clear_bhb_loop+0x25/0x80 [ 54.682983][ T4840] ? clear_bhb_loop+0x25/0x80 [ 54.683005][ T4840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.683024][ T4840] RIP: 0033:0x7fa990e7e969 [ 54.683118][ T4840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.683135][ T4840] RSP: 002b:00007fa98f4c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.683153][ T4840] RAX: ffffffffffffffda RBX: 00007fa9910a6080 RCX: 00007fa990e7e969 [ 54.683166][ T4840] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000007 [ 54.683182][ T4840] RBP: 00007fa98f4c6090 R08: 0000000000000000 R09: 0000000000000000 [ 54.683196][ T4840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.683290][ T4840] R13: 0000000000000000 R14: 00007fa9910a6080 R15: 00007ffd1790ba18 [ 54.683311][ T4840] [ 54.982153][ T4844] loop4: detected capacity change from 0 to 2048 [ 54.989082][ T4844] EXT4-fs: Ignoring removed bh option [ 54.997377][ T4848] netlink: 'syz.0.420': attribute type 39 has an invalid length. [ 55.031933][ T4844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.033273][ T4852] Invalid ELF header type: 2 != 1 [ 55.348488][ T4866] netlink: 100 bytes leftover after parsing attributes in process `syz.5.427'. [ 55.392626][ T4869] loop5: detected capacity change from 0 to 512 [ 55.402980][ T4869] EXT4-fs: old and new quota format mixing [ 55.425610][ T4869] loop5: detected capacity change from 0 to 512 [ 55.440759][ T4869] EXT4-fs: Ignoring removed orlov option [ 55.463261][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.473837][ T4869] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.496843][ T4873] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 55.498102][ T4869] EXT4-fs (loop5): orphan cleanup on readonly fs [ 55.557739][ T4869] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.428: bg 0: block 248: padding at end of block bitmap is not set [ 55.573275][ T4884] netlink: 100 bytes leftover after parsing attributes in process `syz.0.433'. [ 55.573694][ T4869] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.428: Failed to acquire dquot type 1 [ 55.596312][ T4869] EXT4-fs (loop5): 1 truncate cleaned up [ 55.604924][ T4869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.623806][ T4869] EXT4-fs: Ignoring removed orlov option [ 55.629790][ T4869] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.644616][ T4869] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 55.679391][ T4869] EXT4-fs error (device loop5): __ext4_remount:6738: comm syz.5.428: Abort forced by user [ 55.691712][ T4869] EXT4-fs (loop5): Remounting filesystem read-only [ 55.698385][ T4869] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 55.707839][ T4869] ext4 filesystem being remounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.731692][ T4139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.756470][ T4882] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.769658][ T4896] SELinux: syz.4.430 (4896) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 55.883452][ T4882] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.956813][ T4910] netlink: 244 bytes leftover after parsing attributes in process `syz.1.442'. [ 56.015493][ T4882] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.088390][ T4925] 8021q: VLANs not supported on caif0 [ 56.133857][ T4882] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.208841][ T4929] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 56.218859][ T4929] SELinux: failed to load policy [ 56.267052][ T4882] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.276943][ T4934] veth0_vlan: entered allmulticast mode [ 56.296232][ T4934] ªªªªªª: renamed from vlan0 [ 56.363910][ T4882] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.373749][ T4936] loop5: detected capacity change from 0 to 2048 [ 56.395700][ T4936] EXT4-fs: Ignoring removed bh option [ 56.407202][ T4882] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.421013][ T4882] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.438541][ T4936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.442262][ T4945] netlink: 244 bytes leftover after parsing attributes in process `syz.1.455'. [ 56.454578][ T4946] netlink: 244 bytes leftover after parsing attributes in process `syz.3.456'. [ 56.526919][ T4139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.574347][ T4959] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 56.574425][ T4959] SELinux: failed to load policy [ 56.598841][ T4956] FAULT_INJECTION: forcing a failure. [ 56.598841][ T4956] name failslab, interval 1, probability 0, space 0, times 0 [ 56.598875][ T4956] CPU: 0 UID: 0 PID: 4956 Comm: syz.4.462 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 56.598954][ T4956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 56.598969][ T4956] Call Trace: [ 56.598976][ T4956] [ 56.598985][ T4956] __dump_stack+0x1d/0x30 [ 56.599039][ T4956] dump_stack_lvl+0xe8/0x140 [ 56.599062][ T4956] dump_stack+0x15/0x1b [ 56.599080][ T4956] should_fail_ex+0x265/0x280 [ 56.599111][ T4956] should_failslab+0x8c/0xb0 [ 56.599196][ T4956] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 56.599280][ T4956] ? __request_module+0x1c4/0x3e0 [ 56.599300][ T4956] ? __request_module+0x1df/0x3e0 [ 56.599323][ T4956] ? should_failslab+0x8c/0xb0 [ 56.599357][ T4956] kstrdup+0x3e/0xd0 [ 56.599432][ T4956] __request_module+0x1df/0x3e0 [ 56.599464][ T4956] blk_request_module+0xdf/0x1e0 [ 56.599486][ T4956] blkdev_get_no_open+0x4b/0x100 [ 56.599591][ T4956] bdev_file_open_by_dev+0xa5/0x250 [ 56.599685][ T4956] swsusp_check+0x3f/0x240 [ 56.599719][ T4956] software_resume+0x41/0x2c0 [ 56.599743][ T4956] resume_store+0x2d9/0x3d0 [ 56.599768][ T4956] ? __pfx_resume_store+0x10/0x10 [ 56.599795][ T4956] kobj_attr_store+0x47/0x70 [ 56.599867][ T4956] ? __pfx_kobj_attr_store+0x10/0x10 [ 56.599899][ T4956] sysfs_kf_write+0xfb/0x120 [ 56.599986][ T4956] ? __pfx_sysfs_kf_write+0x10/0x10 [ 56.600027][ T4956] kernfs_fop_write_iter+0x1be/0x2d0 [ 56.600073][ T4956] iter_file_splice_write+0x5ef/0x970 [ 56.600115][ T4956] ? __pfx_iter_file_splice_write+0x10/0x10 [ 56.600242][ T4956] direct_splice_actor+0x153/0x2a0 [ 56.600271][ T4956] ? shmem_mmap+0x81/0xb0 [ 56.600305][ T4956] splice_direct_to_actor+0x30f/0x680 [ 56.600400][ T4956] ? __pfx_direct_splice_actor+0x10/0x10 [ 56.600504][ T4956] do_splice_direct+0xda/0x150 [ 56.600544][ T4956] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 56.600572][ T4956] do_sendfile+0x380/0x640 [ 56.600609][ T4956] __x64_sys_sendfile64+0x105/0x150 [ 56.600653][ T4956] x64_sys_call+0xb39/0x2fb0 [ 56.600700][ T4956] do_syscall_64+0xd0/0x1a0 [ 56.600727][ T4956] ? clear_bhb_loop+0x25/0x80 [ 56.600824][ T4956] ? clear_bhb_loop+0x25/0x80 [ 56.600851][ T4956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.600877][ T4956] RIP: 0033:0x7fb47315e969 [ 56.600892][ T4956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.600923][ T4956] RSP: 002b:00007fb4717c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 56.600982][ T4956] RAX: ffffffffffffffda RBX: 00007fb473385fa0 RCX: 00007fb47315e969 [ 56.600998][ T4956] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 56.601012][ T4956] RBP: 00007fb4717c7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.601024][ T4956] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 56.601034][ T4956] R13: 0000000000000000 R14: 00007fb473385fa0 R15: 00007ffebefa17c8 [ 56.601078][ T4956] [ 56.803371][ T4989] FAULT_INJECTION: forcing a failure. [ 56.803371][ T4989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.803404][ T4989] CPU: 1 UID: 0 PID: 4989 Comm: syz.1.468 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 56.803479][ T4989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 56.803568][ T4989] Call Trace: [ 56.803576][ T4989] [ 56.803584][ T4989] __dump_stack+0x1d/0x30 [ 56.803609][ T4989] dump_stack_lvl+0xe8/0x140 [ 56.803630][ T4989] dump_stack+0x15/0x1b [ 56.803645][ T4989] should_fail_ex+0x265/0x280 [ 56.803677][ T4989] should_fail+0xb/0x20 [ 56.803721][ T4989] should_fail_usercopy+0x1a/0x20 [ 56.803744][ T4989] _copy_to_user+0x20/0xa0 [ 56.803807][ T4989] simple_read_from_buffer+0xb5/0x130 [ 56.803836][ T4989] proc_fail_nth_read+0x100/0x140 [ 56.803881][ T4989] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.803916][ T4989] vfs_read+0x19d/0x6f0 [ 56.803944][ T4989] ? __fget_files+0x184/0x1c0 [ 56.803970][ T4989] ? __rcu_read_unlock+0x4f/0x70 [ 56.803996][ T4989] ? __fget_files+0x184/0x1c0 [ 56.804046][ T4989] ksys_read+0xda/0x1a0 [ 56.804073][ T4989] __x64_sys_read+0x40/0x50 [ 56.804167][ T4989] x64_sys_call+0x2d77/0x2fb0 [ 56.804188][ T4989] do_syscall_64+0xd0/0x1a0 [ 56.804261][ T4989] ? clear_bhb_loop+0x25/0x80 [ 56.804290][ T4989] ? clear_bhb_loop+0x25/0x80 [ 56.804357][ T4989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.804421][ T4989] RIP: 0033:0x7fc93f85d37c [ 56.804438][ T4989] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 56.804459][ T4989] RSP: 002b:00007fc93dea6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.804482][ T4989] RAX: ffffffffffffffda RBX: 00007fc93fa86080 RCX: 00007fc93f85d37c [ 56.804578][ T4989] RDX: 000000000000000f RSI: 00007fc93dea60a0 RDI: 0000000000000008 [ 56.804594][ T4989] RBP: 00007fc93dea6090 R08: 0000000000000000 R09: 0000000000000000 [ 56.804607][ T4989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.804691][ T4989] R13: 0000000000000001 R14: 00007fc93fa86080 R15: 00007ffcd50ba308 [ 56.804722][ T4989] [ 56.833331][ T4991] netlink: 244 bytes leftover after parsing attributes in process `syz.4.470'. [ 57.281320][ T4998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.472'. [ 57.290341][ T4998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.472'. [ 57.390105][ T5018] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 57.467066][ T5025] loop3: detected capacity change from 0 to 2048 [ 57.479622][ T5025] EXT4-fs: Ignoring removed bh option [ 57.488676][ T5028] netlink: 'syz.1.482': attribute type 39 has an invalid length. [ 57.504177][ T5021] netlink: 'syz.4.476': attribute type 15 has an invalid length. [ 57.515512][ T5025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.542148][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.601338][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 57.601355][ T29] audit: type=1326 audit(1745832057.477:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4bc2e969 code=0x7ffc0000 [ 57.657585][ T5034] syzkaller0: entered promiscuous mode [ 57.663292][ T5034] syzkaller0: entered allmulticast mode [ 57.677999][ T29] audit: type=1326 audit(1745832057.477:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2a4bc2e969 code=0x7ffc0000 [ 57.701466][ T29] audit: type=1326 audit(1745832057.507:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4bc2e969 code=0x7ffc0000 [ 57.724823][ T29] audit: type=1326 audit(1745832057.507:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4bc2e969 code=0x7ffc0000 [ 57.748512][ T29] audit: type=1326 audit(1745832057.507:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a4bc2e969 code=0x7ffc0000 [ 57.752911][ T5036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 57.771860][ T29] audit: type=1326 audit(1745832057.507:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4bc2e969 code=0x7ffc0000 [ 57.804195][ T29] audit: type=1326 audit(1745832057.507:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a4bc2e969 code=0x7ffc0000 [ 57.828783][ T29] audit: type=1326 audit(1745832057.507:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4bc2e969 code=0x7ffc0000 [ 57.832290][ T5036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 57.852392][ T29] audit: type=1326 audit(1745832057.507:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4bc2e969 code=0x7ffc0000 [ 57.884952][ T29] audit: type=1326 audit(1745832057.507:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f2a4bc2e969 code=0x7ffc0000 [ 57.930362][ T5046] netlink: 'syz.1.488': attribute type 39 has an invalid length. [ 58.029817][ T5065] loop5: detected capacity change from 0 to 1024 [ 58.037819][ T5065] EXT4-fs: Ignoring removed orlov option [ 58.049572][ T5065] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 58.101956][ T5065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.130903][ T5074] loop3: detected capacity change from 0 to 2048 [ 58.152441][ T5074] EXT4-fs: Ignoring removed bh option [ 58.169228][ T4139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.221756][ T5091] netlink: 244 bytes leftover after parsing attributes in process `syz.0.498'. [ 58.232246][ T5074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.313518][ T5096] syzkaller0: entered promiscuous mode [ 58.319094][ T5096] syzkaller0: entered allmulticast mode [ 58.352687][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.475736][ T5106] netlink: 'syz.0.504': attribute type 39 has an invalid length. [ 58.529685][ T5103] loop3: detected capacity change from 0 to 8192 [ 58.589725][ T5103] loop3: p2 p3 p4 [ 58.593615][ T5103] loop3: p2 start 452985600 is beyond EOD, truncated [ 58.600395][ T5103] loop3: p3 size 33554432 extends beyond EOD, truncated [ 58.628910][ T5103] loop3: p4 start 8388607 is beyond EOD, truncated [ 58.644749][ T5112] netlink: 100 bytes leftover after parsing attributes in process `syz.0.506'. [ 58.664783][ T5103] ================================================================== [ 58.672925][ T5103] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 58.680682][ T5103] [ 58.683019][ T5103] read-write to 0xffff888237c26b70 of 8 bytes by task 5093 on cpu 0: [ 58.691099][ T5103] find_get_block_common+0x4f0/0x960 [ 58.696436][ T5103] bdev_getblk+0x7f/0x3d0 [ 58.700804][ T5103] __ext4_get_inode_loc+0x303/0x930 [ 58.706082][ T5103] ext4_reserve_inode_write+0xdb/0x230 [ 58.711594][ T5103] __ext4_mark_inode_dirty+0x8c/0x3f0 [ 58.717004][ T5103] ext4_dirty_inode+0x92/0xc0 [ 58.721734][ T5103] __mark_inode_dirty+0x15c/0x760 [ 58.726821][ T5103] file_update_time+0x288/0x2b0 [ 58.731719][ T5103] ext4_page_mkwrite+0x18b/0xba0 [ 58.736707][ T5103] handle_mm_fault+0x1733/0x2ae0 [ 58.741686][ T5103] do_user_addr_fault+0x636/0x1090 [ 58.746842][ T5103] exc_page_fault+0x54/0xc0 [ 58.751396][ T5103] asm_exc_page_fault+0x26/0x30 [ 58.756286][ T5103] [ 58.758647][ T5103] read to 0xffff888237c26b70 of 8 bytes by task 5103 on cpu 1: [ 58.766206][ T5103] has_bh_in_lru+0x35/0x1f0 [ 58.770742][ T5103] smp_call_function_many_cond+0x394/0xb20 [ 58.776595][ T5103] on_each_cpu_cond_mask+0x3c/0x80 [ 58.781749][ T5103] invalidate_bh_lrus+0x2a/0x30 [ 58.786634][ T5103] blkdev_flush_mapping+0x9a/0x1a0 [ 58.791778][ T5103] bdev_release+0x2bf/0x3d0 [ 58.796308][ T5103] blkdev_release+0x15/0x20 [ 58.800853][ T5103] __fput+0x298/0x650 [ 58.804871][ T5103] fput_close_sync+0x6e/0x120 [ 58.809579][ T5103] __x64_sys_close+0x56/0xf0 [ 58.814194][ T5103] x64_sys_call+0x2747/0x2fb0 [ 58.818910][ T5103] do_syscall_64+0xd0/0x1a0 [ 58.823445][ T5103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.829372][ T5103] [ 58.831714][ T5103] value changed: 0x0000000000000000 -> 0xffff88810689c410 [ 58.838856][ T5103] [ 58.841207][ T5103] Reported by Kernel Concurrency Sanitizer on: [ 58.847398][ T5103] CPU: 1 UID: 0 PID: 5103 Comm: syz.3.503 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 58.858017][ T5103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 58.868129][ T5103] ================================================================== [ 58.896706][ T3005] loop3: p2 p3 p4 [ 58.914191][ T3005] loop3: p2 start 452985600 is beyond EOD, truncated [ 58.921048][ T3005] loop3: p3 size 33554432 extends beyond EOD, truncated [ 58.948471][ T3005] loop3: p4 start 8388607 is beyond EOD, truncated