last executing test programs: 1m16.724148542s ago: executing program 1 (id=126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = io_uring_setup(0x6ca9, &(0x7f00000001c0)={0x0, 0xa99f, 0x2, 0x0, 0x3d9}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x0, &(0x7f0000000200)}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000300)=0x8, 0x4) close(r8) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x8002, 0x2, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {}, {0x2}, {0x6, 0x0, 0x0, 0x10000000}]}) r11 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r11, 0x0, 0x0) keyctl$setperm(0x5, r11, 0x1100108) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c099}, 0x0) splice(r5, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r3, r6, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) 1m16.170045719s ago: executing program 1 (id=131): io_uring_setup(0x53c4, &(0x7f0000000280)={0x0, 0x5406, 0x4, 0x2, 0x205}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, [@FRA_DST={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x30}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3, 0x0, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x4086, &(0x7f00000040c0)="$eJzszz9K9EAcBuB3/2QTlo9PxNJCtLIS7WxsPIDdXmA7Owv7VY8jHkC8keAJbCKZBGVRO0WR5yl+8zLzJsOEH/f40eZ1klnz6Tf3y7vNTJNZksOkK04v/pejtrfa6Y6OUs2bcf4luXz/l8XtFz4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4zdrX9PS22fRLVeZkrT9JRslVkuV2Wyc5HifdmpvJ8/lQ2j3IVgkbZe6VWU/LffOhs3j4phcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/UOCenQxxlP3Ufm/XSWTfaVZ3qhd05pAIABIIoeOdQRMDQgyiUoQ0peVQAO6PW7c+7eqzRMkvErA+X+zMZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA47MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDkgAAAAABP1/3Y5AAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYKwAA//+vbhs5") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) r6 = creat(&(0x7f0000000080)='./bus\x00', 0xcb) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, 0x0, 0x0) bind$qrtr(r8, &(0x7f00000000c0)={0x2a, 0x1, 0xf0ff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) close(r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x0, 0x20, 0x100, 0x5, {{0x32, 0x4, 0x2, 0x3, 0xc8, 0x65, 0x0, 0x9, 0x29, 0x0, @private=0xa010101, @private=0xa010102, {[@cipso={0x86, 0x5c, 0x0, [{0x1, 0xe, "d8dbf74a76ab48b207141404"}, {0x0, 0x7, "2a288e8123"}, {0x7, 0x8, "b1528f52cec1"}, {0x7, 0x8, "20b16c235526"}, {0x1, 0x12, "150fd392495d92d6ddbfc38734ce0dd4"}, {0x5, 0x6, "4c36d992"}, {0x5, 0x9, "6b76eb6798588c"}, {0x7, 0x10, "c2883a158cb58058394263156606"}]}, @timestamp_prespec={0x44, 0x2c, 0xd5, 0x3, 0x9, [{@loopback, 0x8}, {@private=0xa010101}, {@local, 0x8}, {@private=0xa010101, 0x80}, {@multicast1, 0x4ee}]}, @ssrr={0x89, 0x23, 0xbe, [@loopback, @rand_addr=0x64010100, @private=0xa010102, @private=0xa010102, @remote, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0x21, 0x0, 0x4, [0xa]}, @noop]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m15.486077968s ago: executing program 1 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) sync() r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_GET_NODES(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r6, 0x1002}, {r6, 0x8002}], 0x2, 0x0, 0x0, 0x0) r7 = getpid() r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r10 = syz_pidfd_open(r7, 0x0) setns(r10, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000, {r6}}, 0x20) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in, 0x0, 0x32}, @in6=@loopback, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2f}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff}}]}, 0x154}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxmU5IPEjAm1W4mA040nWm7U3ZpPYUfz5SKN5b2bs73trzXv21xu/AEbWjYg4iIjJiPgwIuby40m+xd32ll736PDB6tHhg9UkWq0P/plk59Nj0fGY1Ev5cxYj4kffi/hp8mzcxt7+5kq1WtlpV6cXmrXthcbe/u2N2sp6Zb2yVS4vLy0vvnvnnfKF9fWN2mRe+vLDPxx86+dps2bzI539uEjtrk+cxEmNR8QPLiPYEIzl/ZkcdkN4IYWIeC0i3szu/7kYy15NAOA6a7XmojXXWQcArrtClgNLCqU8FzAbhUKp1M7hvR4zhWq90bx1v767tdbOlc3HROH+RrWymOcK52MiSetLWflJvXyqficiXo2IX0xNZ/XSar26Nsw3PgAwwl46Nf//Z6o9/wMA11xx2A0AAAbO/A8Ao8f8DwCjx/wPAKPnyfx/d6jtAAAGx+d/ABg95n8AGCk/fP/9dGsd5b9/vfbR3u5m/aPba5XGZqm2u1pare9sl9br9fXsN3tqZz1ftV7fXno7dj+e//Z2o7nQ2Nu/V6vvbjXvZb/rfa8yMZBeAQDP8+obn/05iYiD96azLTrWcjBXw/VWGHYDgKEZG3YDgKGx2heMrnN8xpcegGuiyxK9TylGxPTpg61Wq3V5TQIu2c0vyP/DqOrI//tfwDBi5P9hdMn/w+hqtZJ+1/yPfi8EAK42OX6gx/f/r+X73+ZfDvxk7fQVn15mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO17/t5SvBT4bhUKpFPFyRMzHRHJ/o1pZjIhXIuJPUxNTaX1pyG0GAM6r8LckX//r5txbs6fPTiaPp7J9RPzsVx/88uOVZnPnj+nxf50cb36aHy8Po/0AwFmO5+ls3/FB/tHhg9XjbZDt+ft3I6LYjn90OBlHJ/HHYzzbF2MiImb+neT1tqQjd3EeB59ExOe79T+J2SwH0l759HT8NPbLA41feCp+ITvX3qf/Fp+7gLbAqPksHX/udrv/CnEj23e//4vZCHV++fiXPtXqUTYGPol/PP6N9Rj/bvQb4+3ff79dmn723CcRXxyPOI591DH+HMdPesR/q8/4f/nSV97sda7164ib0T1+Z6yFZm17obG3f3ujtrJeWa9slcvLS8uL7955p7yQ5agXes8G/3jv1itZocslaf9nesQvntH/r/fZ/9/898Mff7XHuTT+N7/WLX4hXn9O/HRO/Eaf8VdmflfsdS6Nv9aj/2e9/rf6jP/wr/vPLBsOAAxPY29/c6VarewMsnD8RmKgQRX6K0zlL85Vac9ThSvbsM2V6ncGFWsy/q9HtVovFKvXiHERWTfgKji56SPi8bAbAwAAAAAAAAAAAAAAdHWpf6iUtAvD7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX1/8CAAD//8jOyzo=") 1m14.491449411s ago: executing program 1 (id=146): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5df, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffffff, &(0x7f0000004400)='./bus\x00', 0x448002, 0x52) write(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) time(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x84}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x2}, {0x8009, 0x56}], 0xee01}, 0x18, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) 1m13.395061705s ago: executing program 1 (id=151): r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x2, 0x440) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f00000000c0)={0x3, 0x3, 0x3, 0x7f, 0xc0000000, 0x10001}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x5, 0x10}, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dbe, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)="13", 0x1}, {0x0}, {0x0}], 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x3}, 0x9, 0x4, &(0x7f0000000100)={0x2, 0xd, 0xfffe, 0x0, 0xd40}, 0x8, 0x0, 0x8, 0x0, 0xd3f, 0xfff, &(0x7f0000000380)="9f89260b2b21816433bb8d840ad50ee30f62364a16c93cdbb971f6cd2392791e05e7730281e342e5a1d9cf9e4d7072f7c666d4c3dd715b603586ca5e02fbdeede7efe1ba2ce2a835e74f3e04e3335a720652168e94dcbb70ccfc302eaaae0e47b3b2a5a71027105e2bfb6c0b2f57ce469f35ea0994cb125a0d9798b1b96ec3625e3794050674bd06ec9f6efbd79053c4ccf995dd45e03be70e7069de90106b87728028166913467407324b8fb8ce1e"}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x3ffff, 0x0, 0x0, 0x0) 1m12.925365811s ago: executing program 1 (id=158): syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 1m12.925094542s ago: executing program 32 (id=158): syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 57.186757459s ago: executing program 2 (id=315): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 57.159333509s ago: executing program 2 (id=316): pipe2$9p(&(0x7f0000001900), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x91}, 0x18) gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x120843, 0xa6) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff8003000000000000010000000000000005000000000000"], 0x5b0) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000240)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = getpgrp(0xffffffffffffffff) kcmp(r1, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) unshare(0x68040200) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 56.981124951s ago: executing program 2 (id=321): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route_sched(r1, 0x0, 0x4040) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffff8}}}}]}, 0x78}}, 0x0) 56.891119672s ago: executing program 2 (id=323): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5df, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffffff, &(0x7f0000004400)='./bus\x00', 0x448002, 0x52) write(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) time(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x84}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x2}, {0x8009, 0x56}], 0xee01}, 0x18, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) 56.416884159s ago: executing program 2 (id=329): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="090000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x64, 0x0, &(0x7f0000000540)=[@enter_looper, @clear_death={0x400c630f, 0x2}, @release, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x1114}, @flat=@binder={0x73622a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x1001, 0x1}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x1000, 0x0, &(0x7f0000001780)="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"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000f200000000000000001860000000000003000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x0, @void, @value}, 0x94) mlockall(0x7) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x2, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) faccessat2(r6, &(0x7f0000000000)='\x00', 0x2, 0x1100) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000140)=""/67) 56.117164232s ago: executing program 2 (id=331): pipe2$9p(&(0x7f0000001900), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x91}, 0x18) gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x120843, 0xa6) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000240)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) kcmp(r1, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) unshare(0x68040200) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 56.116786893s ago: executing program 33 (id=331): pipe2$9p(&(0x7f0000001900), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x91}, 0x18) gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x120843, 0xa6) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000240)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) kcmp(r1, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) unshare(0x68040200) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 3.415265595s ago: executing program 5 (id=1066): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000004000000060000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b9f6a44b66e98f8a3d64c1e20f6bb91d8b11a89e91a56f0cbef6dcae007d51ab1c220cb8fb3f71070b78dcca43b6146dbcdb3766c9051b32603f6874e37ba95e6ba701f7b81d6bd97b611991155561ee4160c49c881a09e94b1826eb61c8b1ace5817916e586ff5e810052e0cb99290c3c802579210800d2d9009e3727c0faed0394496aaa358fce73dd78fe880996feb536527485e811246f3cfe1725912c2ba02a6ba65a5993ba1d8047ccc157d0589976b3b619178f83f205c1cdf4dd331e20ac0cf25a43347b8a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) flock(r3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00'}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x6, r6}, 0x38) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x20, 0x140c, 0x100, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r9, 0x2007ffb) sendfile(r8, r9, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x80000000000}, 0x18) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380100001000130700000000000000007f000001c22300830406dd7e40ab000000000000000000ac1e0101000000000000000000b41000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e70000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000002000000020001036f0000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$unix(r3, &(0x7f0000000200)={&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000000)="619f8256575c74522cddb7fefcb9934c9b59b3acabe6bd237abafd9ce602bb8b0f0bfecd5c", 0x25}, {&(0x7f0000000380)="6dd6cbac5aa43b60f7355d979c9f67d23cd5f6a9b9dab3facb7cb3901e43bd29607f88ae367f4655e4cda845208a8107d9ed4d811c24c85cadd613407bd423a88ad4f2a60701d8166396729aab0976618325d6c5a8ee3891a98a6569345d1445078e88357b1cc2", 0x67}, {&(0x7f0000000400)="8315da745a88abd8223d81053e2e0a57c185da7ad4b87d6fb0156cf6d022872096c61d960f92a650e1c7cedbc992b3025980eb21d8e94006aad38778863123e2d4adcef2e999c08b48a4502c4435131f9804d04d2c1d65714ee15bcc802689010a4cc40a4ffe74ee7f5e0e93816173da7515909bd06a2f5b7b441b76db6df38fb70b23d5209ffb78dfb026fe83e48bc0c0c3b7c0432fc973d294f83e", 0x9c}, {&(0x7f00000004c0)="02ecf7e75369c053fe177bb4df4489d3dc92a6384093df70458c30364ec0cf2754c341365586acb66f6ceb2bc3de5e05f203949140b3f13acadbf0231f5e0fb109b51ae1f157c0b1c3e39bc535f875a64fa694fb6838b643db74ff6a0599c352aa5e2daf3d3e059ec2b7c57dd6db6cd72a7d7216674f8e62931a6c754c213ac9d47a56c5e83877a0dfd5e0336cca9f6925d5e72812f59931ed62bd9014b8ace94d3e75c47b9b36109104d0108879d5fd35a87d0b4c4131b1aed36fa5c41545612242662381cfccf2b4516ce9fd9cb3c58a", 0xd1}, {&(0x7f00000005c0)="4f30ef97253aba1752b2c35058a722714dc9ef7b8effb1df3aefa8b150140c3a22907f126eccc268a773b59aa434be6d70eb8a34c5f6c1c5c3dd2ab3b97573672762d29c64a5eb22c7c9e91cab0283b8a2edc0c295a62cb28ca61c447a80a1f935514040030bc69ed76fc51c286cbe922d26b6adc6dae7eff07c0dc11d778be58e4cfbfb11bb19f85dd298dc788b7c8aa521136a3da7f0b3fb23", 0x9a}], 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000001000000010000100000000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x40}, 0x10040001) 2.121845442s ago: executing program 5 (id=1076): pipe2$9p(&(0x7f0000001900), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x91}, 0x18) gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x120843, 0xa6) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff8003000000000000010000000000000005000000000000"], 0x5b0) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000240)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) kcmp(r1, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) unshare(0x68040200) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.824138526s ago: executing program 4 (id=1079): r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x2, 0x440) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f00000000c0)={0x3, 0x3, 0x3, 0x7f, 0xc0000000, 0x10001}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x5, 0x10}, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dbe, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) writev(r4, &(0x7f0000000340), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x3}, 0x9, 0x4, &(0x7f0000000100)={0x2, 0xd, 0xfffe, 0x0, 0xd40}, 0x8, 0x0, 0x8, 0x0, 0xd3f, 0xfff, &(0x7f0000000380)="9f89260b2b21816433bb8d840ad50ee30f62364a16c93cdbb971f6cd2392791e05e7730281e342e5a1d9cf9e4d7072f7c666d4c3dd715b603586ca5e02fbdeede7efe1ba2ce2a835e74f3e04e3335a720652168e94dcbb70ccfc302eaaae0e47b3b2a5a71027105e2bfb6c0b2f57ce469f35ea0994cb125a0d9798b1b96ec3625e3794050674bd06ec9f6efbd79053c4ccf995dd45e03be70e7069de90106b87728028166913467407324b8fb8ce1e"}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x3ffff, 0x0, 0x0, 0x0) 1.487542681s ago: executing program 4 (id=1085): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) 1.453315151s ago: executing program 6 (id=1086): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x7, 0x2, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) 1.441451751s ago: executing program 5 (id=1087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000"], 0x48) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000340)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x4, 0x2, 0x1ec811a3, 0xa0008, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 1.395584632s ago: executing program 0 (id=1088): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r1, 0x3) 1.361402602s ago: executing program 4 (id=1089): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="16000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r5 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000011c0)={'syztnl2\x00', &(0x7f0000001140)={'syztnl0\x00', r6, 0x8000, 0x1, 0x7, 0xffff65e1, {{0xb, 0x4, 0x1, 0xe, 0x2c, 0x67, 0x0, 0x3, 0x4, 0x0, @remote, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0x28, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x33}]}]}}}}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000563c00000100000002000000", @ANYRES32, @ANYBLOB="000000000000000037069d1b65110668d700"/29, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf79d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000300)={'gre0\x00', &(0x7f00000004c0)={'ip_vti0\x00', r7, 0x10, 0x1, 0xf, 0xffffffff, {{0xe, 0x4, 0x1, 0x7, 0x38, 0x68, 0x0, 0x6, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty, {[@ssrr={0x89, 0xb, 0x44, [@broadcast, @broadcast]}, @end, @timestamp={0x44, 0x8, 0x21, 0x0, 0x7}, @ssrr={0x89, 0xb, 0xf3, [@remote, @broadcast]}]}}}}}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x66}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@version_u}]}}) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) 1.355913612s ago: executing program 5 (id=1090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 1.354839862s ago: executing program 0 (id=1091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 1.317611743s ago: executing program 0 (id=1092): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 1.302975993s ago: executing program 6 (id=1093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@delchain={0x54, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 1.262457744s ago: executing program 0 (id=1094): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) (fail_nth: 2) 1.170494685s ago: executing program 0 (id=1095): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = open(0x0, 0x0, 0x0) flock(r3, 0x2) flock(r3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00'}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x6, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r8, 0x2007ffb) sendfile(r7, r8, 0x0, 0x1000000201005) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380100001000130700000000000000007f000001c22300830406dd7e40ab000000000000000000ac1e0101000000000000000000b41000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e70000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000002000000020001036f0000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$unix(r3, &(0x7f0000000200)={&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000000)="619f8256575c74522cddb7fefcb9934c9b59b3acabe6bd237abafd9ce602bb8b0f0bfecd5c", 0x25}, {&(0x7f0000000380)="6dd6cbac5aa43b60f7355d979c9f67d23cd5f6a9b9dab3facb7cb3901e43bd29607f88ae367f4655e4cda845208a8107d9ed4d811c24c85cadd613407bd423a88ad4f2a60701d8166396729aab0976618325d6c5a8ee3891a98a6569345d144507", 0x61}, {&(0x7f0000000400)="8315da745a88abd8223d81053e2e0a57c185da7ad4b87d6fb0156cf6d022872096c61d960f92a650e1c7cedbc992b3025980eb21d8e94006aad38778863123e2d4adcef2e999c08b48a4502c4435131f9804d04d2c1d65714ee15bcc802689010a4cc40a4ffe74ee7f5e0e93816173da7515909bd06a2f5b7b441b76db6df38fb70b23d5209ffb78dfb026fe83e48bc0c0c3b7c0432fc973d294f83e", 0x9c}, {&(0x7f00000004c0)="02ecf7e75369c053fe177bb4df4489d3dc92a6384093df70458c30364ec0cf2754c341365586acb66f6ceb2bc3de5e05f203949140b3f13acadbf0231f5e0fb109b51ae1f157c0b1c3e39bc535f875a64fa694fb6838b643db74ff6a0599c352aa5e2daf3d3e059ec2b7c57dd6db6cd72a7d7216674f8e62931a6c754c213ac9d47a56c5e83877a0dfd5e0336cca9f6925d5e72812f59931ed62bd9014b8ace94d3e75c47b9b36109104d0108879d5fd35a87d0b4c4131b1aed36fa5c41545612242662381cfccf2b4516ce9fd9cb3c58a", 0xd1}, {&(0x7f00000005c0)="4f30ef97253aba1752b2c35058a722714dc9ef7b8effb1df3aefa8b150140c3a22907f126eccc268a773b59aa434be6d70eb8a34c5f6c1c5c3dd2ab3b97573672762d29c64a5eb22c7c9e91cab0283b8a2edc0c295a62cb28ca61c447a80a1f935514040030bc69ed76fc51c286cbe922d26b6adc6dae7eff07c0dc11d778be58e4cfbfb11bb19f85dd298dc788b7c8aa521136a3da7f0b3fb23", 0x9a}], 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000001000000010000100000000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x40}, 0x10040001) 1.150709775s ago: executing program 5 (id=1096): r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x2, 0x440) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f00000000c0)={0x3, 0x3, 0x3, 0x7f, 0xc0000000, 0x10001}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x5, 0x10}, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dbe, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) writev(r4, &(0x7f0000000340), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x3}, 0x9, 0x4, &(0x7f0000000100)={0x2, 0xd, 0xfffe, 0x0, 0xd40}, 0x8, 0x0, 0x8, 0x0, 0xd3f, 0xfff, &(0x7f0000000380)="9f89260b2b21816433bb8d840ad50ee30f62364a16c93cdbb971f6cd2392791e05e7730281e342e5a1d9cf9e4d7072f7c666d4c3dd715b603586ca5e02fbdeede7efe1ba2ce2a835e74f3e04e3335a720652168e94dcbb70ccfc302eaaae0e47b3b2a5a71027105e2bfb6c0b2f57ce469f35ea0994cb125a0d9798b1b96ec3625e3794050674bd06ec9f6efbd79053c4ccf995dd45e03be70e7069de90106b87728028166913467407324b8fb8ce1e"}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x3ffff, 0x0, 0x0, 0x0) 1.020764517s ago: executing program 6 (id=1097): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000400000000000ca0f000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60a, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000f14010000000000eaffffff090045"], 0x1c}}, 0x4000880) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@debug}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 847.728619ms ago: executing program 4 (id=1098): mmap(&(0x7f0000dcf000/0x4000)=nil, 0x4000, 0x3000005, 0x810, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@buf) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000dfffffff00"/28], 0x50) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x427}], 0x2}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 707.358181ms ago: executing program 3 (id=1099): syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000880)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noinit_itable}]}, 0x1, 0x46e, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24004001}, 0x20000880) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf250600000014000180080003000600000008000100", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000c30000/0x1000)=nil) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r7, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 609.551672ms ago: executing program 5 (id=1100): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000064000000060a03000000000000000000010000003c000480240001800b00010072656a65637400001400028008000140000000000500020000000000140001800d00010073796e70726f78790000000008000b40000000000900010073797a30"], 0x4d0}}, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000340)="60779c812cd628580ce98602345123aa17d5ad5971176e8fbeffd38b2cdcc7b15a7148cc5600c7fc0c02a2b34d8be4e5e20f62d0e4b67efa996e722030541cdf738b62f0ceb1ab870a3b1b416c91bd1c27b2695aaa776ca3b259242f8b4e89", 0x5f}, {&(0x7f00000003c0)="8c444a89e9dfcfa62ec57826c76db6f7d2d869d85c7c26e6935e1b9eff396e0052827805b506fe5c6312c984e328fb7972115a5f39ac0b01cff1e9a1d9730f2078e12b008a52cf5a376908aec6fa833bfbc8d62f40e76a73c8f4d20004e9ff37d0e75587078ffd556aecb45234c6b30006114f56f18919b3975bee90293f4a9a870123760f82798629315676ded943c5e939cbe4309b12f49b97ff3b15", 0x9d}, {&(0x7f0000000080)="34241064e8a6e810ef6d710cb4e70acfeb5422435ed00f7e17bc9bbed3e24d4201b19120", 0x24}, {&(0x7f0000000940)="522a0cd628e7e455d3d1c8c139dc881a7202f59fd8ca23e659046b765dbb95b72998045d2e56c45eb94be01233755f4f1ea0feaeb1bb97207067bb676fbf2e24b49bc671855d8c5c8cc708ac62257a3ca68d2b9472611dcea75ca7e9313107b02e51b4b101a8c02cd290b61c9454007e04690e7e437eaf36df", 0x79}, {&(0x7f0000000a00)="8f312b5c2d932979bd70900d6106db134a91538a3cdde304ff80a97f53e72d4db0a2fd7e5fdc55f5bd4d997250ee1bcfa724c4c238cfdca069cce237ba4074864e9b9d2760883297e042a0042e1d9c3c324dd30c379d84ff43e7b5ef49590f67a548ce83fd823c9a05a1563815358b755d946665e692353253b121fd54c70257552e19d1f5f95dab451406eb4e0cdbd13495be85c8ad064d55305394b58f39e097056fd621d11228dac6005bca6780c68e25b40dc47d7836ad8db63bfa3a77b73b8b8149d521d550d15cd26dcecad8d3d5fe7d2df740c7a33837b8fda5591d08735e327dde59dab67957442c3078415e672bca76224e81", 0xf7}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="5244fbb53f500794711497abc67c9e14a50923919987fde14a30f608e16748202e36634c510962f924a2f9a3f6573c233139b1662a95bb1c3da3505ea36334314c98f8d4aea6126453bde3802a67091bf39498c3c2ae657e61ed26e4f7c2cc46555bae62e17bf1f7fffb6b4341647dc510bf443dbbdc203b491adc87440b5b5fab670974aedd48d717e7e078c6bdd205771b4bda79b990b72fde9a206ad8f306ddc46f9e8492f08815a284b0f9c2d04dc1c4e480b59acf0d6fe8c85512042af4ab9f84d247c0d4049c7fa08f09c3b35efc7ec92c22ad40a70b26017b75624a5d5bd5e0", 0xe3}], 0x7, &(0x7f0000001c80)=[{0xa8, 0x114, 0x7fffffff, "0034b63fb1b692c4e39bd0e00ca9927696af55367b4a370c9ebbd7d8540b7bf74bf3539db7b7394b84f51522285b9510a81f0fd680279c62e422b477028b35696d7b5854e640578153d3940ce3cc005b2ee601c956690825941be657d700d82a333a02db394be6caae9898454877e7aa92c4c31f1e19857c9b00224ff9697cfeb2d26811b039f6905deb5a0e197580732702d21eca7d"}, {0x70, 0x119, 0x0, "0666495bd67584c74dd4964217afc73ab498c430aac3f2b6b74e1720f25292f2621903487602aa4d711670d090bd4b4797444305050a87e25b11c5bdf007cde78596b4929afaced69eb2632cef614c99434a51d345893e56da"}], 0x118}, 0x4000800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$tipc(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) sendfile(r1, r1, 0x0, 0x800000009) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x1000000000000}, 0x18) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 487.418544ms ago: executing program 4 (id=1101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req={0x6, 0x8, 0x1, 0x9}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) 478.371394ms ago: executing program 3 (id=1102): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r1, 0x3) 409.301705ms ago: executing program 3 (id=1103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 388.012225ms ago: executing program 4 (id=1104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000400000000000ca0f000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60a, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000f14010000000000eaffffff090045"], 0x1c}}, 0x4000880) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@debug}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='kfree\x00', r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 356.830856ms ago: executing program 3 (id=1105): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000050000000c"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) 348.578665ms ago: executing program 6 (id=1106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000050000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) 304.335876ms ago: executing program 3 (id=1107): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffefffd}, 0x18) creat(&(0x7f00000001c0)='./file0\x00', 0x19) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x94, 0x5, 0x42, 0x7, 0x0, 0x497f, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x1}, 0x101377, 0xf, 0x200, 0x1, 0xfffffffffffffffc, 0x2, 0x5, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x9, 0x2, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x0, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 240.522147ms ago: executing program 0 (id=1108): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000280)=0x0) timer_getoverrun(r3) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$poke(0x5, r4, &(0x7f0000000000), 0x0) mount(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,') 238.977427ms ago: executing program 6 (id=1109): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00130000000000001000000000000000000000150000000000000000a3d011fe53bfdf761b1417ac58aeb8156926a3b2664fd7a68cc7a189f5d9f125da02eb1bedafcd336b371cbaedce2d866c7b2812ed9b4febc4214ea6dead8bc358430ee749792e9a1638514d71b624932d5cb1fb6505653b4a0bb7346b32dd20c2101235535d6da9ac15ae3a73eb85a7ead11fd462153f212245722fb3bedf1b44f200b2285907acdef3897752636776e584534d9bcd69c4"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='Q', 0x1, 0x200980) fsmount(r5, 0x1, 0x82) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES16=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x20008881}, 0x40004) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000011000100000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a8018"], 0x3c}}, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="bc97f58539e8b007b98b2c640fdef71499554d7f297655a8f9c43a2faea4529b1268f71edba9b6bba60e501cfb0c8ec2d786ed6b046c383fe961654e5790ec29d2cf49cbfc4e59d379498d59165696413dcf79c80ee5422991a12a83750925af74506c5ea64a75dd65e4041f499caaed8c95d5a30873a5cc08ae29a3e69808bbffe521824985dc8ed0e8b25ac9d788c0e638c01fc467cf9c0e3580833231f46151e096067d11fa1a107a62d5e8d7b7bff3b349fa4ec97d95d605694dbe1c23dcfbb150c57ccba4b4aca62bb78c22606c021a931bd7a3e25016622ed9bb17d2c526804466954639d88b4d", 0xea}, {&(0x7f0000000100)="8822a827bc7cda8cc9b75266c4fa7e26bfad0411a963aeffb893426d42b77f2a51d271c28180ed67d73924ad347fe41bf78a447015eaa710ec02a46e2a94edbba086da938c2d26298ac5cf221970427dada9106facc50d3fc3fadaeed437ed669644fc8d939e0568f1f9a4a4fa85d51294ce380ca96af6787f671b4817be0910a81946105801b357d6c0274d49fda88f4e3a111a00c13370a67c002a4731b74faf65f56ac5c858a1b000a2f7ea69b4940e2384dc0a9f", 0xb6}, {&(0x7f00000001c0)="a86f8d76a2cff1bbc966d22a602b8ebe54ec8bf9a00ea7983964e5f258a7b160936d66cf117fdc730edf9a638abada4d3b52", 0x32}, {&(0x7f0000000240)="91fbba338da07300c418c92b706a97ec2ed6aeebc2eef48ad2b6009199ab0f8ee3a74900365df26d167900b90f0f13ad9708e7abfe6bdd0bd7717dc75e487941bc0d9d825532870a9973dd211007d20ef48f10c5702006585e6e5de245a1d58297e7b4d3edcf12c61c872d7a1f60fde73ac7c68fd608a25b74f5eb32e4c8c2232040c98001938319d8ee19f9b330d05e94b40aa9688d5928946ccd2860df83476cad63432caf0777dd5d0e9266369e66f8b51e111198076cc6a0a9e566628f9589483bd938c5b490c5a6fb8379eb8543", 0xd0}], 0x4, 0x1, 0x10000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r11}, 0x18) setsockopt$inet_tcp_buf(r8, 0x6, 0xb, &(0x7f00000006c0)="5d82a145ea75426209f013de5cd9356cce6e2a4fe7f0b333fd532a9fc8b36cb18376db808843a5a8290bf48158ff36ece9913492c134c1c2d391fa4bef517e0d670297d5725587d0e730602f55d4803c6470ccf46ca45d4ba3612e66889a4733f369ca1b06df76c710924fb4fa6a01618708ead6bd04b15c15f59bc8fe6d9758dfdf66c610e899722f35e497b7f753829268d1d8e77d5d19c7a6d115b7184d65f32b9c32082c243e2adf7bdb390bfab1efc69a5536951c6ab8f71233cae428a23e70d878de9a6af3c636dd", 0xcb) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@access_uid}]}}) 23.28866ms ago: executing program 3 (id=1110): r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x2, 0x440) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f00000000c0)={0x3, 0x3, 0x3, 0x7f, 0xc0000000, 0x10001}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x5, 0x10}, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dbe, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) writev(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)="13", 0x1}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x3}, 0x9, 0x4, &(0x7f0000000100)={0x2, 0xd, 0xfffe, 0x0, 0xd40}, 0x8, 0x0, 0x8, 0x0, 0xd3f, 0xfff, &(0x7f0000000380)="9f89260b2b21816433bb8d840ad50ee30f62364a16c93cdbb971f6cd2392791e05e7730281e342e5a1d9cf9e4d7072f7c666d4c3dd715b603586ca5e02fbdeede7efe1ba2ce2a835e74f3e04e3335a720652168e94dcbb70ccfc302eaaae0e47b3b2a5a71027105e2bfb6c0b2f57ce469f35ea0994cb125a0d9798b1b96ec3625e3794050674bd06ec9f6efbd79053c4ccf995dd45e03be70e7069de90106b87728028166913467407324b8fb8ce1e"}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x3ffff, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=1111): mmap(&(0x7f0000dcf000/0x4000)=nil, 0x4000, 0x3000005, 0x810, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@buf) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000dfffffff00"/28], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) kernel console output (not intermixed with test programs): wireguard0: entered promiscuous mode [ 83.042839][ T5092] wireguard0: entered allmulticast mode [ 83.235559][ T5096] netlink: 12 bytes leftover after parsing attributes in process `syz.5.432'. [ 83.334407][ T5102] SELinux: failed to load policy [ 83.389211][ T5105] dummy0 speed is unknown, defaulting to 1000 [ 83.436055][ T29] audit: type=1400 audit(1747898206.292:3117): avc: denied { prog_load } for pid=5109 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.439604][ T5110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.438'. [ 83.455279][ T29] audit: type=1400 audit(1747898206.292:3118): avc: denied { bpf } for pid=5109 comm="syz.3.438" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.455312][ T29] audit: type=1400 audit(1747898206.292:3119): avc: denied { perfmon } for pid=5109 comm="syz.3.438" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.464248][ T5110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.438'. [ 83.736368][ T29] audit: type=1400 audit(1747898206.372:3120): avc: denied { execmem } for pid=5111 comm="syz.6.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 83.755815][ T29] audit: type=1400 audit(1747898206.472:3121): avc: denied { map_create } for pid=5109 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.774968][ T29] audit: type=1400 audit(1747898206.482:3122): avc: denied { mounton } for pid=5109 comm="syz.3.438" path="/96/file0" dev="tmpfs" ino=546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.797363][ T29] audit: type=1400 audit(1747898206.542:3123): avc: denied { prog_run } for pid=5109 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.875744][ T5104] loop5: detected capacity change from 0 to 512 [ 83.925346][ T5119] siw: device registration error -23 [ 83.987076][ T5129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.444'. [ 84.060150][ T5104] EXT4-fs error (device loop5): __ext4_fill_super:5502: inode #2: comm syz.5.435: casefold flag without casefold feature [ 84.103117][ T5104] EXT4-fs (loop5): get root inode failed [ 84.109437][ T5104] EXT4-fs (loop5): mount failed [ 84.548774][ T5143] dummy0 speed is unknown, defaulting to 1000 [ 84.590824][ T5145] loop4: detected capacity change from 0 to 1024 [ 84.598215][ T5145] EXT4-fs: Ignoring removed nobh option [ 84.603892][ T5145] EXT4-fs: Ignoring removed bh option [ 84.645191][ T5145] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.448: bad orphan inode 32767 [ 84.657936][ T5145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.677262][ T5152] netlink: 28 bytes leftover after parsing attributes in process `syz.5.450'. [ 84.686331][ T5152] netlink: 28 bytes leftover after parsing attributes in process `syz.5.450'. [ 84.698616][ T5152] bridge0: entered promiscuous mode [ 84.704101][ T5152] macvlan2: entered promiscuous mode [ 84.710587][ T5152] bridge0: port 3(macvlan2) entered blocking state [ 84.717215][ T5152] bridge0: port 3(macvlan2) entered disabled state [ 84.725935][ T5152] macvlan2: entered allmulticast mode [ 84.731362][ T5152] bridge0: entered allmulticast mode [ 84.739133][ T5152] macvlan2: left allmulticast mode [ 84.744393][ T5152] bridge0: left allmulticast mode [ 84.764099][ T5152] bridge0: left promiscuous mode [ 84.783663][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.448'. [ 84.871910][ T5154] dummy0 speed is unknown, defaulting to 1000 [ 85.168759][ T5174] loop0: detected capacity change from 0 to 512 [ 85.187624][ T5174] EXT4-fs error (device loop0): __ext4_fill_super:5502: inode #2: comm syz.0.455: casefold flag without casefold feature [ 85.231343][ T5177] dummy0 speed is unknown, defaulting to 1000 [ 85.237984][ T5174] EXT4-fs (loop0): get root inode failed [ 85.243725][ T5174] EXT4-fs (loop0): mount failed [ 85.374423][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 85.854362][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.944964][ T5202] netlink: 24 bytes leftover after parsing attributes in process `syz.5.465'. [ 86.065780][ T5205] dummy0 speed is unknown, defaulting to 1000 [ 86.092997][ T5198] capability: warning: `syz.6.464' uses 32-bit capabilities (legacy support in use) [ 86.106828][ T5213] wireguard0: entered promiscuous mode [ 86.112332][ T5213] wireguard0: entered allmulticast mode [ 86.119842][ T5207] loop0: detected capacity change from 0 to 256 [ 86.144917][ T5207] FAT-fs (loop0): bogus number of FAT sectors [ 86.151100][ T5207] FAT-fs (loop0): Can't find a valid FAT filesystem [ 86.248466][ T5220] loop6: detected capacity change from 0 to 2048 [ 86.258543][ T5218] dummy0 speed is unknown, defaulting to 1000 [ 86.285227][ T5220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.896264][ T5243] SELinux: failed to load policy [ 86.967688][ T5245] netlink: 24 bytes leftover after parsing attributes in process `syz.5.478'. [ 87.220047][ T5236] loop4: detected capacity change from 0 to 4096 [ 87.280201][ T5236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.288489][ T3504] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 87.309859][ T3504] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 87.322469][ T3504] EXT4-fs (loop6): This should not happen!! Data will be lost [ 87.322469][ T3504] [ 87.332248][ T3504] EXT4-fs (loop6): Total free blocks count 0 [ 87.332354][ T5253] loop3: detected capacity change from 0 to 2048 [ 87.338325][ T3504] EXT4-fs (loop6): Free/Dirty block details [ 87.350815][ T3504] EXT4-fs (loop6): free_blocks=2415919504 [ 87.356592][ T3504] EXT4-fs (loop6): dirty_blocks=10976 [ 87.362066][ T3504] EXT4-fs (loop6): Block reservation details [ 87.368106][ T3504] EXT4-fs (loop6): i_reserved_data_blocks=686 [ 87.377330][ T5253] EXT4-fs (loop3): Invalid log block size: 4294967295 [ 87.388424][ T3504] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 87.470478][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.486421][ T5257] macvlan2: entered promiscuous mode [ 87.491763][ T5257] bridge0: entered promiscuous mode [ 87.510970][ T5257] bridge0: port 3(macvlan2) entered blocking state [ 87.517710][ T5257] bridge0: port 3(macvlan2) entered disabled state [ 87.524703][ T5257] macvlan2: entered allmulticast mode [ 87.530144][ T5257] bridge0: entered allmulticast mode [ 87.538032][ T5257] macvlan2: left allmulticast mode [ 87.543306][ T5257] bridge0: left allmulticast mode [ 87.558374][ T5257] bridge0: left promiscuous mode [ 87.586034][ T5259] hsr0: entered promiscuous mode [ 87.618382][ T5266] dummy0 speed is unknown, defaulting to 1000 [ 87.661783][ T5269] loop6: detected capacity change from 0 to 256 [ 87.665999][ T5268] FAULT_INJECTION: forcing a failure. [ 87.665999][ T5268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.681236][ T5268] CPU: 1 UID: 0 PID: 5268 Comm: syz.4.484 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 87.681274][ T5268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.681292][ T5268] Call Trace: [ 87.681300][ T5268] [ 87.681309][ T5268] __dump_stack+0x1d/0x30 [ 87.681354][ T5268] dump_stack_lvl+0xe8/0x140 [ 87.681382][ T5268] dump_stack+0x15/0x1b [ 87.681421][ T5268] should_fail_ex+0x265/0x280 [ 87.681470][ T5268] should_fail+0xb/0x20 [ 87.681508][ T5268] should_fail_usercopy+0x1a/0x20 [ 87.681535][ T5268] copy_fpstate_to_sigframe+0x62b/0x7d0 [ 87.681662][ T5268] ? copy_fpstate_to_sigframe+0xe5/0x7d0 [ 87.681711][ T5268] get_sigframe+0x34d/0x490 [ 87.681750][ T5268] ? get_signal+0xdc8/0xf70 [ 87.681777][ T5268] x64_setup_rt_frame+0xa8/0x580 [ 87.681905][ T5268] arch_do_signal_or_restart+0x26e/0x480 [ 87.681978][ T5268] syscall_exit_to_user_mode+0x68/0xb0 [ 87.682009][ T5268] do_syscall_64+0xdd/0x1a0 [ 87.682041][ T5268] ? clear_bhb_loop+0x40/0x90 [ 87.682070][ T5268] ? clear_bhb_loop+0x40/0x90 [ 87.682099][ T5268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.682163][ T5268] RIP: 0033:0x7f6888b7e967 [ 87.682181][ T5268] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 87.682204][ T5268] RSP: 002b:00007f68871a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.682236][ T5268] RAX: 0000000000000000 RBX: 00007f6888da6160 RCX: 00007f6888b7e969 [ 87.682251][ T5268] RDX: 0000000000001000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 87.682267][ T5268] RBP: 00007f68871a5090 R08: 0000000000000000 R09: 0000000000000000 [ 87.682284][ T5268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.682299][ T5268] R13: 0000000000000000 R14: 00007f6888da6160 R15: 00007ffd83f77d48 [ 87.682345][ T5268] [ 87.695327][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 87.695421][ T29] audit: type=1400 audit(1747898210.552:3456): avc: denied { mounton } for pid=5265 comm="syz.6.481" path="/23/file0" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.804081][ T5269] FAT-fs (loop6): bogus number of FAT sectors [ 87.820974][ T29] audit: type=1326 audit(1747898210.612:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89f2e969 code=0x7ffc0000 [ 87.827443][ T5269] FAT-fs (loop6): Can't find a valid FAT filesystem [ 87.835467][ T29] audit: type=1326 audit(1747898210.612:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89f2e969 code=0x7ffc0000 [ 87.961552][ T5255] dummy0 speed is unknown, defaulting to 1000 [ 87.986446][ T29] audit: type=1326 audit(1747898210.842:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fce89f2e969 code=0x7ffc0000 [ 87.986463][ T5274] wireguard0: entered promiscuous mode [ 87.986485][ T5274] wireguard0: entered allmulticast mode [ 88.009323][ T29] audit: type=1326 audit(1747898210.842:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89f2e969 code=0x7ffc0000 [ 88.043370][ T29] audit: type=1326 audit(1747898210.842:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89f2e969 code=0x7ffc0000 [ 88.066475][ T29] audit: type=1326 audit(1747898210.882:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fce89f2e969 code=0x7ffc0000 [ 88.089412][ T29] audit: type=1326 audit(1747898210.882:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89f2e969 code=0x7ffc0000 [ 88.112387][ T29] audit: type=1326 audit(1747898210.882:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89f2e969 code=0x7ffc0000 [ 88.138183][ T29] audit: type=1400 audit(1747898211.002:3465): avc: denied { create } for pid=5270 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.170291][ T5277] SELinux: failed to load policy [ 88.282235][ T5281] loop6: detected capacity change from 0 to 2048 [ 88.372121][ T5281] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.806833][ T5294] loop0: detected capacity change from 0 to 4096 [ 88.844093][ T5294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.960963][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.112254][ T5305] __nla_validate_parse: 5 callbacks suppressed [ 89.112271][ T5305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.497'. [ 89.127461][ T5305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.497'. [ 89.141443][ T5305] macvlan2: entered promiscuous mode [ 89.146018][ T3473] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 89.146808][ T5305] bridge0: entered promiscuous mode [ 89.147303][ T5305] bridge0: port 3(macvlan2) entered blocking state [ 89.173399][ T5305] bridge0: port 3(macvlan2) entered disabled state [ 89.182675][ T3473] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 89.195225][ T3473] EXT4-fs (loop6): This should not happen!! Data will be lost [ 89.195225][ T3473] [ 89.204963][ T3473] EXT4-fs (loop6): Total free blocks count 0 [ 89.206928][ T5308] loop3: detected capacity change from 0 to 512 [ 89.210954][ T3473] EXT4-fs (loop6): Free/Dirty block details [ 89.218402][ T5305] macvlan2: entered allmulticast mode [ 89.223260][ T3473] EXT4-fs (loop6): free_blocks=2415919504 [ 89.228734][ T5305] bridge0: entered allmulticast mode [ 89.234582][ T3473] EXT4-fs (loop6): dirty_blocks=15936 [ 89.245268][ T3473] EXT4-fs (loop6): Block reservation details [ 89.251289][ T3473] EXT4-fs (loop6): i_reserved_data_blocks=996 [ 89.265214][ T5305] macvlan2: left allmulticast mode [ 89.270407][ T5305] bridge0: left allmulticast mode [ 89.294208][ T5305] bridge0: left promiscuous mode [ 89.321153][ T5308] EXT4-fs error (device loop3): __ext4_fill_super:5502: inode #2: comm syz.3.495: casefold flag without casefold feature [ 89.337376][ T5321] SELinux: failed to load policy [ 89.356302][ T5308] EXT4-fs (loop3): get root inode failed [ 89.362020][ T5308] EXT4-fs (loop3): mount failed [ 89.404708][ T5324] loop5: detected capacity change from 0 to 2048 [ 89.420066][ T5326] loop0: detected capacity change from 0 to 1024 [ 89.432982][ T5326] EXT4-fs: Ignoring removed orlov option [ 89.444976][ T5324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.460798][ T3473] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 89.476071][ T5326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.491526][ T5308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 89.525383][ T5326] dummy0 speed is unknown, defaulting to 1000 [ 89.739763][ T5334] program syz.6.498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.815195][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.833059][ T5336] loop3: detected capacity change from 0 to 1024 [ 89.852107][ T5336] EXT4-fs: Ignoring removed orlov option [ 89.873396][ T5336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.085388][ T5336] dummy0 speed is unknown, defaulting to 1000 [ 90.109254][ T3473] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 90.126535][ T3473] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 90.139053][ T3473] EXT4-fs (loop5): This should not happen!! Data will be lost [ 90.139053][ T3473] [ 90.148848][ T3473] EXT4-fs (loop5): Total free blocks count 0 [ 90.155059][ T3473] EXT4-fs (loop5): Free/Dirty block details [ 90.160969][ T3473] EXT4-fs (loop5): free_blocks=2415919504 [ 90.166932][ T3473] EXT4-fs (loop5): dirty_blocks=16400 [ 90.172368][ T3473] EXT4-fs (loop5): Block reservation details [ 90.178544][ T3473] EXT4-fs (loop5): i_reserved_data_blocks=1025 [ 90.205935][ T3473] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 90.278272][ T5352] netlink: 120 bytes leftover after parsing attributes in process `syz.6.508'. [ 90.309304][ T5352] sd 0:0:1:0: device reset [ 90.393428][ T5361] SELinux: failed to load policy [ 90.399847][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.414020][ T5349] pim6reg1: entered promiscuous mode [ 90.419391][ T5349] pim6reg1: entered allmulticast mode [ 90.461142][ T5363] loop0: detected capacity change from 0 to 512 [ 90.468164][ T5363] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.475188][ T5363] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.505644][ T5363] EXT4-fs (loop0): 1 truncate cleaned up [ 90.511864][ T5363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.529383][ T5363] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.634817][ T5363] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 90.809024][ T5372] dummy0 speed is unknown, defaulting to 1000 [ 90.859601][ T5368] loop3: detected capacity change from 0 to 512 [ 90.953708][ T5368] EXT4-fs error (device loop3): __ext4_fill_super:5502: inode #2: comm syz.3.515: casefold flag without casefold feature [ 90.987420][ T5368] EXT4-fs (loop3): get root inode failed [ 90.994579][ T5368] EXT4-fs (loop3): mount failed [ 91.209418][ T5384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.519'. [ 91.218419][ T5384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.519'. [ 91.256898][ T5384] bridge0: entered promiscuous mode [ 91.267641][ T5384] macvlan2: entered promiscuous mode [ 91.276765][ T5384] bridge0: port 3(macvlan2) entered blocking state [ 91.283507][ T5384] bridge0: port 3(macvlan2) entered disabled state [ 91.290820][ T5384] macvlan2: entered allmulticast mode [ 91.296335][ T5384] bridge0: entered allmulticast mode [ 91.312383][ T5384] macvlan2: left allmulticast mode [ 91.317602][ T5384] bridge0: left allmulticast mode [ 91.330509][ T5384] bridge0: left promiscuous mode [ 91.367987][ T5397] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 91.424176][ T5401] SELinux: failed to load policy [ 91.491319][ T5407] loop3: detected capacity change from 0 to 2048 [ 91.509550][ T5404] dummy0 speed is unknown, defaulting to 1000 [ 91.530159][ T5407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.554376][ T5412] dummy0 speed is unknown, defaulting to 1000 [ 91.590404][ T5416] loop0: detected capacity change from 0 to 128 [ 91.748781][ T5424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 91.855811][ T5426] loop6: detected capacity change from 0 to 512 [ 91.905534][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.530'. [ 92.079609][ T5435] wireguard0: entered promiscuous mode [ 92.085253][ T5435] wireguard0: entered allmulticast mode [ 92.338849][ T3465] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 92.355670][ T3465] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 92.368426][ T3465] EXT4-fs (loop3): This should not happen!! Data will be lost [ 92.368426][ T3465] [ 92.378144][ T3465] EXT4-fs (loop3): Total free blocks count 0 [ 92.384280][ T3465] EXT4-fs (loop3): Free/Dirty block details [ 92.390210][ T3465] EXT4-fs (loop3): free_blocks=2415919504 [ 92.396001][ T3465] EXT4-fs (loop3): dirty_blocks=11392 [ 92.401558][ T3465] EXT4-fs (loop3): Block reservation details [ 92.407710][ T3465] EXT4-fs (loop3): i_reserved_data_blocks=712 [ 92.444815][ T5441] wireguard0: entered promiscuous mode [ 92.450436][ T5441] wireguard0: entered allmulticast mode [ 92.471159][ T5439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.534'. [ 92.514180][ T2667] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 92.569575][ T5447] loop4: detected capacity change from 0 to 256 [ 92.576273][ T5447] vfat: Unknown parameter '@/file0' [ 92.583138][ T5447] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 92.599049][ T5447] loop4: detected capacity change from 0 to 1024 [ 92.606618][ T5447] EXT4-fs (loop4): filesystem is read-only [ 92.807104][ T5459] dummy0 speed is unknown, defaulting to 1000 [ 92.830061][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 92.830076][ T29] audit: type=1400 audit(1747898215.682:3715): avc: denied { read } for pid=5449 comm="syz.4.542" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.878118][ T29] audit: type=1400 audit(1747898215.722:3716): avc: denied { open } for pid=5449 comm="syz.4.542" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.901997][ T29] audit: type=1400 audit(1747898215.722:3717): avc: denied { ioctl } for pid=5449 comm="syz.4.542" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.926839][ T29] audit: type=1400 audit(1747898215.722:3718): avc: denied { write } for pid=5449 comm="syz.4.542" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.950038][ T29] audit: type=1400 audit(1747898215.732:3719): avc: denied { cpu } for pid=5449 comm="syz.4.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 93.042837][ T5450] loop4: detected capacity change from 0 to 2048 [ 93.084556][ T5471] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 93.092241][ T5471] audit: out of memory in audit_log_start [ 93.098596][ T5450] EXT4-fs (loop4): failed to initialize system zone (-117) [ 93.107755][ T5450] EXT4-fs (loop4): mount failed [ 93.192432][ T29] audit: type=1400 audit(1747898216.042:3720): avc: denied { write } for pid=5476 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 93.218387][ T29] audit: type=1400 audit(1747898216.052:3721): avc: denied { create } for pid=5451 comm="syz.5.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.238102][ T29] audit: type=1400 audit(1747898216.072:3722): avc: denied { execute } for pid=5451 comm="syz.5.541" path="/75/cpuset.memory_pressure_enabled" dev="tmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.273902][ T5479] loop6: detected capacity change from 0 to 2048 [ 93.286992][ T5482] loop3: detected capacity change from 0 to 512 [ 93.295145][ T5482] EXT4-fs error (device loop3): __ext4_fill_super:5502: inode #2: comm syz.3.545: casefold flag without casefold feature [ 93.309221][ T5482] EXT4-fs (loop3): get root inode failed [ 93.315195][ T5482] EXT4-fs (loop3): mount failed [ 93.331643][ T5479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.369950][ T5489] loop4: detected capacity change from 0 to 2048 [ 93.406962][ T5489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.629289][ T5501] FAULT_INJECTION: forcing a failure. [ 93.629289][ T5501] name failslab, interval 1, probability 0, space 0, times 0 [ 93.642170][ T5501] CPU: 1 UID: 0 PID: 5501 Comm: syz.5.552 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 93.642321][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.642339][ T5501] Call Trace: [ 93.642377][ T5501] [ 93.642387][ T5501] __dump_stack+0x1d/0x30 [ 93.642411][ T5501] dump_stack_lvl+0xe8/0x140 [ 93.642438][ T5501] dump_stack+0x15/0x1b [ 93.642468][ T5501] should_fail_ex+0x265/0x280 [ 93.642527][ T5501] should_failslab+0x8c/0xb0 [ 93.642642][ T5501] kmem_cache_alloc_node_noprof+0x57/0x320 [ 93.642672][ T5501] ? __alloc_skb+0x101/0x320 [ 93.642715][ T5501] __alloc_skb+0x101/0x320 [ 93.642759][ T5501] netlink_alloc_large_skb+0xba/0xf0 [ 93.642804][ T5501] netlink_sendmsg+0x3cf/0x6b0 [ 93.642831][ T5501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.642852][ T5501] __sock_sendmsg+0x145/0x180 [ 93.642908][ T5501] ____sys_sendmsg+0x345/0x4e0 [ 93.642942][ T5501] ___sys_sendmsg+0x17b/0x1d0 [ 93.642998][ T5501] __sys_sendmmsg+0x178/0x300 [ 93.643043][ T5501] __x64_sys_sendmmsg+0x57/0x70 [ 93.643140][ T5501] x64_sys_call+0x2f2f/0x2fb0 [ 93.643238][ T5501] do_syscall_64+0xd0/0x1a0 [ 93.643263][ T5501] ? clear_bhb_loop+0x40/0x90 [ 93.643300][ T5501] ? clear_bhb_loop+0x40/0x90 [ 93.643328][ T5501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.643355][ T5501] RIP: 0033:0x7fb24fdfe969 [ 93.643371][ T5501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.643390][ T5501] RSP: 002b:00007fb24e467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 93.643425][ T5501] RAX: ffffffffffffffda RBX: 00007fb250025fa0 RCX: 00007fb24fdfe969 [ 93.643442][ T5501] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 93.643490][ T5501] RBP: 00007fb24e467090 R08: 0000000000000000 R09: 0000000000000000 [ 93.643508][ T5501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.643523][ T5501] R13: 0000000000000000 R14: 00007fb250025fa0 R15: 00007ffe74a43d68 [ 93.643546][ T5501] [ 93.880987][ T3481] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 93.905100][ T3481] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 93.917655][ T3481] EXT4-fs (loop6): This should not happen!! Data will be lost [ 93.917655][ T3481] [ 93.927334][ T3481] EXT4-fs (loop6): Total free blocks count 0 [ 93.933448][ T3481] EXT4-fs (loop6): Free/Dirty block details [ 93.939487][ T3481] EXT4-fs (loop6): free_blocks=2415919504 [ 93.945281][ T3481] EXT4-fs (loop6): dirty_blocks=16400 [ 93.950674][ T3481] EXT4-fs (loop6): Block reservation details [ 93.957140][ T3481] EXT4-fs (loop6): i_reserved_data_blocks=1025 [ 93.994780][ T5510] FAULT_INJECTION: forcing a failure. [ 93.994780][ T5510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.008094][ T5510] CPU: 0 UID: 0 PID: 5510 Comm: syz.5.557 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 94.008154][ T5510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.008178][ T5510] Call Trace: [ 94.008186][ T5510] [ 94.008197][ T5510] __dump_stack+0x1d/0x30 [ 94.008221][ T5510] dump_stack_lvl+0xe8/0x140 [ 94.008244][ T5510] dump_stack+0x15/0x1b [ 94.008321][ T5510] should_fail_ex+0x265/0x280 [ 94.008366][ T5510] should_fail+0xb/0x20 [ 94.008407][ T5510] should_fail_usercopy+0x1a/0x20 [ 94.008433][ T5510] strncpy_from_user+0x25/0x230 [ 94.008502][ T5510] ? kmem_cache_alloc_noprof+0x186/0x310 [ 94.008527][ T5510] ? getname_flags+0x80/0x3b0 [ 94.008571][ T5510] getname_flags+0xae/0x3b0 [ 94.008673][ T5510] user_path_at+0x28/0x130 [ 94.008703][ T5510] user_statfs+0x4d/0x110 [ 94.008765][ T5510] __x64_sys_statfs+0x65/0xf0 [ 94.008811][ T5510] ? __bpf_trace_sys_enter+0x10/0x30 [ 94.008888][ T5510] ? trace_sys_enter+0xd0/0x110 [ 94.008916][ T5510] ? syscall_trace_enter+0x102/0x1e0 [ 94.008950][ T5510] x64_sys_call+0x1edd/0x2fb0 [ 94.009001][ T5510] do_syscall_64+0xd0/0x1a0 [ 94.009029][ T5510] ? clear_bhb_loop+0x40/0x90 [ 94.009097][ T5510] ? clear_bhb_loop+0x40/0x90 [ 94.009208][ T5510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.009229][ T5510] RIP: 0033:0x7fb24fdfe969 [ 94.009251][ T5510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.009276][ T5510] RSP: 002b:00007fb24e467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 94.009301][ T5510] RAX: ffffffffffffffda RBX: 00007fb250025fa0 RCX: 00007fb24fdfe969 [ 94.009318][ T5510] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 00002000000004c0 [ 94.009335][ T5510] RBP: 00007fb24e467090 R08: 0000000000000000 R09: 0000000000000000 [ 94.009350][ T5510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.009398][ T5510] R13: 0000000000000000 R14: 00007fb250025fa0 R15: 00007ffe74a43d68 [ 94.009428][ T5510] [ 94.076314][ T3481] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 94.265903][ T3471] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 94.302818][ T3471] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 94.315615][ T3471] EXT4-fs (loop4): This should not happen!! Data will be lost [ 94.315615][ T3471] [ 94.325452][ T3471] EXT4-fs (loop4): Total free blocks count 0 [ 94.331465][ T3471] EXT4-fs (loop4): Free/Dirty block details [ 94.337512][ T3471] EXT4-fs (loop4): free_blocks=2415919504 [ 94.343299][ T3471] EXT4-fs (loop4): dirty_blocks=9472 [ 94.348860][ T3471] EXT4-fs (loop4): Block reservation details [ 94.354889][ T3471] EXT4-fs (loop4): i_reserved_data_blocks=592 [ 94.375030][ T3471] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 94.446257][ T5503] dummy0 speed is unknown, defaulting to 1000 [ 94.495784][ T5519] __nla_validate_parse: 3 callbacks suppressed [ 94.495803][ T5519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.559'. [ 94.510962][ T5519] netlink: 60 bytes leftover after parsing attributes in process `syz.4.559'. [ 94.535552][ T5519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.559'. [ 95.018095][ T5536] loop6: detected capacity change from 0 to 2048 [ 95.446054][ T5546] Falling back ldisc for ttyS3. [ 95.503395][ T5543] loop0: detected capacity change from 0 to 4096 [ 95.545811][ T5551] FAULT_INJECTION: forcing a failure. [ 95.545811][ T5551] name failslab, interval 1, probability 0, space 0, times 0 [ 95.558664][ T5551] CPU: 0 UID: 0 PID: 5551 Comm: syz.5.567 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 95.558703][ T5551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.558715][ T5551] Call Trace: [ 95.558722][ T5551] [ 95.558791][ T5551] __dump_stack+0x1d/0x30 [ 95.558840][ T5551] dump_stack_lvl+0xe8/0x140 [ 95.558868][ T5551] dump_stack+0x15/0x1b [ 95.558939][ T5551] should_fail_ex+0x265/0x280 [ 95.559018][ T5551] ? io_ring_ctx_alloc+0x38/0x650 [ 95.559051][ T5551] should_failslab+0x8c/0xb0 [ 95.559083][ T5551] __kmalloc_cache_noprof+0x4c/0x320 [ 95.559106][ T5551] ? avc_has_perm_noaudit+0x1b1/0x200 [ 95.559164][ T5551] io_ring_ctx_alloc+0x38/0x650 [ 95.559246][ T5551] ? avc_has_perm+0xd3/0x150 [ 95.559274][ T5551] ? io_uring_fill_params+0x270/0x300 [ 95.559320][ T5551] io_uring_create+0x10f/0x610 [ 95.559355][ T5551] __se_sys_io_uring_setup+0x1f7/0x210 [ 95.559460][ T5551] __x64_sys_io_uring_setup+0x31/0x40 [ 95.559546][ T5551] x64_sys_call+0x184b/0x2fb0 [ 95.559576][ T5551] do_syscall_64+0xd0/0x1a0 [ 95.559608][ T5551] ? clear_bhb_loop+0x40/0x90 [ 95.559631][ T5551] ? clear_bhb_loop+0x40/0x90 [ 95.559730][ T5551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.559779][ T5551] RIP: 0033:0x7fb24fdfe969 [ 95.559799][ T5551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.559822][ T5551] RSP: 002b:00007fb24e466fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 95.559847][ T5551] RAX: ffffffffffffffda RBX: 00007fb250025fa0 RCX: 00007fb24fdfe969 [ 95.559864][ T5551] RDX: 0000200000001880 RSI: 0000200000000580 RDI: 0000000000000003 [ 95.559954][ T5551] RBP: 0000200000000580 R08: 0000000000000000 R09: 0000200000001880 [ 95.559972][ T5551] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 95.559989][ T5551] R13: 0000200000000240 R14: 0000000000000003 R15: 0000200000001880 [ 95.560019][ T5551] [ 95.836683][ T2667] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 95.907039][ T5552] dummy0 speed is unknown, defaulting to 1000 [ 95.917710][ T2667] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 95.930306][ T2667] EXT4-fs (loop6): This should not happen!! Data will be lost [ 95.930306][ T2667] [ 95.940078][ T2667] EXT4-fs (loop6): Total free blocks count 0 [ 95.941078][ T5562] dummy0 speed is unknown, defaulting to 1000 [ 95.946132][ T2667] EXT4-fs (loop6): Free/Dirty block details [ 95.946179][ T2667] EXT4-fs (loop6): free_blocks=2415919504 [ 95.963959][ T2667] EXT4-fs (loop6): dirty_blocks=16400 [ 95.969424][ T2667] EXT4-fs (loop6): Block reservation details [ 95.975506][ T2667] EXT4-fs (loop6): i_reserved_data_blocks=1025 [ 95.978997][ T5561] netlink: 24 bytes leftover after parsing attributes in process `syz.5.573'. [ 96.011299][ T2667] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 96.024124][ T2667] EXT4-fs (loop6): This should not happen!! Data will be lost [ 96.024124][ T2667] [ 96.030288][ T3471] tipc: Subscription rejected, illegal request [ 96.102469][ T5566] loop0: detected capacity change from 0 to 2048 [ 96.371398][ T5519] syz.4.559 (5519) used greatest stack depth: 6776 bytes left [ 96.635628][ T5587] loop6: detected capacity change from 0 to 2048 [ 96.697636][ T3481] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 96.722648][ T3481] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 96.735283][ T3481] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.735283][ T3481] [ 96.745027][ T3481] EXT4-fs (loop0): Total free blocks count 0 [ 96.751011][ T3481] EXT4-fs (loop0): Free/Dirty block details [ 96.756955][ T3481] EXT4-fs (loop0): free_blocks=2415919504 [ 96.762790][ T3481] EXT4-fs (loop0): dirty_blocks=16400 [ 96.768185][ T3481] EXT4-fs (loop0): Block reservation details [ 96.774207][ T3481] EXT4-fs (loop0): i_reserved_data_blocks=1025 [ 96.795341][ T3450] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 96.808287][ T3450] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.808287][ T3450] [ 96.846720][ T5595] SELinux: failed to load policy [ 97.444190][ T5602] loop0: detected capacity change from 0 to 4096 [ 97.476077][ T5600] dummy0 speed is unknown, defaulting to 1000 [ 97.484117][ T5611] FAULT_INJECTION: forcing a failure. [ 97.484117][ T5611] name failslab, interval 1, probability 0, space 0, times 0 [ 97.497015][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz.4.590 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 97.497175][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.497193][ T5611] Call Trace: [ 97.497201][ T5611] [ 97.497210][ T5611] __dump_stack+0x1d/0x30 [ 97.497238][ T5611] dump_stack_lvl+0xe8/0x140 [ 97.497266][ T5611] dump_stack+0x15/0x1b [ 97.497358][ T5611] should_fail_ex+0x265/0x280 [ 97.497482][ T5611] should_failslab+0x8c/0xb0 [ 97.497522][ T5611] kmem_cache_alloc_node_noprof+0x57/0x320 [ 97.497550][ T5611] ? __alloc_skb+0x101/0x320 [ 97.497662][ T5611] __alloc_skb+0x101/0x320 [ 97.497706][ T5611] netlink_alloc_large_skb+0xba/0xf0 [ 97.497750][ T5611] netlink_sendmsg+0x3cf/0x6b0 [ 97.497850][ T5611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.497872][ T5611] __sock_sendmsg+0x145/0x180 [ 97.497909][ T5611] ____sys_sendmsg+0x31e/0x4e0 [ 97.497945][ T5611] ___sys_sendmsg+0x17b/0x1d0 [ 97.498027][ T5611] __x64_sys_sendmsg+0xd4/0x160 [ 97.498054][ T5611] x64_sys_call+0x2999/0x2fb0 [ 97.498082][ T5611] do_syscall_64+0xd0/0x1a0 [ 97.498113][ T5611] ? clear_bhb_loop+0x40/0x90 [ 97.498169][ T5611] ? clear_bhb_loop+0x40/0x90 [ 97.498257][ T5611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.498278][ T5611] RIP: 0033:0x7f6888b7e969 [ 97.498297][ T5611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.498321][ T5611] RSP: 002b:00007f68871e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.498346][ T5611] RAX: ffffffffffffffda RBX: 00007f6888da5fa0 RCX: 00007f6888b7e969 [ 97.498363][ T5611] RDX: 0000000004008040 RSI: 0000200000000280 RDI: 0000000000000003 [ 97.498386][ T5611] RBP: 00007f68871e7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.498403][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.498420][ T5611] R13: 0000000000000000 R14: 00007f6888da5fa0 R15: 00007ffd83f77d48 [ 97.498476][ T5611] [ 97.506216][ T2667] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 97.719984][ T2667] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 97.732556][ T2667] EXT4-fs (loop6): This should not happen!! Data will be lost [ 97.732556][ T2667] [ 97.742295][ T2667] EXT4-fs (loop6): Total free blocks count 0 [ 97.748484][ T2667] EXT4-fs (loop6): Free/Dirty block details [ 97.754410][ T2667] EXT4-fs (loop6): free_blocks=2415919504 [ 97.760148][ T2667] EXT4-fs (loop6): dirty_blocks=12256 [ 97.765755][ T2667] EXT4-fs (loop6): Block reservation details [ 97.771762][ T2667] EXT4-fs (loop6): i_reserved_data_blocks=766 [ 97.792261][ T2667] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 97.805269][ T2667] EXT4-fs (loop6): This should not happen!! Data will be lost [ 97.805269][ T2667] [ 97.892993][ T5618] Falling back ldisc for ttyS3. [ 97.966450][ T5622] loop0: detected capacity change from 0 to 2048 [ 97.997547][ T5615] loop4: detected capacity change from 0 to 512 [ 98.028181][ T5627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.596'. [ 98.113173][ T5615] EXT4-fs error (device loop4): __ext4_fill_super:5502: inode #2: comm syz.4.594: casefold flag without casefold feature [ 98.169099][ T5615] EXT4-fs (loop4): get root inode failed [ 98.177028][ T5615] EXT4-fs (loop4): mount failed [ 98.199833][ T5636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'. [ 98.232127][ T5636] bridge4: entered allmulticast mode [ 98.285840][ T5640] loop6: detected capacity change from 0 to 2048 [ 98.529300][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 98.529317][ T29] audit: type=1326 audit(1747898221.382:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f284e969 code=0x7ffc0000 [ 98.738669][ T3471] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 98.761988][ T29] audit: type=1326 audit(1747898221.422:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f94f284e969 code=0x7ffc0000 [ 98.771401][ T3471] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 98.785425][ T29] audit: type=1326 audit(1747898221.422:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f284e969 code=0x7ffc0000 [ 98.797934][ T3471] EXT4-fs (loop0): This should not happen!! Data will be lost [ 98.797934][ T3471] [ 98.797956][ T3471] EXT4-fs (loop0): Total free blocks count 0 [ 98.797973][ T3471] EXT4-fs (loop0): Free/Dirty block details [ 98.797986][ T3471] EXT4-fs (loop0): free_blocks=2415919504 [ 98.797998][ T3471] EXT4-fs (loop0): dirty_blocks=16400 [ 98.798010][ T3471] EXT4-fs (loop0): Block reservation details [ 98.798043][ T3471] EXT4-fs (loop0): i_reserved_data_blocks=1025 [ 98.847585][ T3471] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 98.854093][ T29] audit: type=1326 audit(1747898221.422:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f284e969 code=0x7ffc0000 [ 98.859472][ T3471] EXT4-fs (loop0): This should not happen!! Data will be lost [ 98.859472][ T3471] [ 98.865978][ T29] audit: type=1400 audit(1747898221.442:3952): avc: denied { connect } for pid=5650 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 98.938835][ T29] audit: type=1400 audit(1747898221.442:3953): avc: denied { write } for pid=5650 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.032907][ T5655] Falling back ldisc for ttyS3. [ 99.121667][ T29] audit: type=1400 audit(1747898221.662:3954): avc: denied { prog_load } for pid=5653 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 99.141039][ T29] audit: type=1400 audit(1747898221.662:3955): avc: denied { bpf } for pid=5653 comm="syz.3.607" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.162076][ T29] audit: type=1400 audit(1747898221.662:3956): avc: denied { perfmon } for pid=5653 comm="syz.3.607" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.183569][ T29] audit: type=1400 audit(1747898221.662:3957): avc: denied { map_create } for pid=5653 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 99.211432][ T5662] FAULT_INJECTION: forcing a failure. [ 99.211432][ T5662] name failslab, interval 1, probability 0, space 0, times 0 [ 99.225675][ T5662] CPU: 1 UID: 0 PID: 5662 Comm: syz.4.612 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 99.225727][ T5662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.225781][ T5662] Call Trace: [ 99.225789][ T5662] [ 99.225798][ T5662] __dump_stack+0x1d/0x30 [ 99.225877][ T5662] dump_stack_lvl+0xe8/0x140 [ 99.225903][ T5662] dump_stack+0x15/0x1b [ 99.225925][ T5662] should_fail_ex+0x265/0x280 [ 99.225999][ T5662] should_failslab+0x8c/0xb0 [ 99.226031][ T5662] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 99.226052][ T5662] ? __d_alloc+0x3d/0x350 [ 99.226124][ T5662] __d_alloc+0x3d/0x350 [ 99.226150][ T5662] d_alloc_pseudo+0x1e/0x80 [ 99.226176][ T5662] alloc_file_pseudo+0x71/0x160 [ 99.226242][ T5662] ? alloc_fd+0x38a/0x3c0 [ 99.226281][ T5662] anon_inode_getfile_fmode+0xa5/0x140 [ 99.226329][ T5662] do_eventfd+0x116/0x1b0 [ 99.226356][ T5662] __x64_sys_eventfd2+0x2d/0x40 [ 99.226397][ T5662] x64_sys_call+0x1284/0x2fb0 [ 99.226504][ T5662] do_syscall_64+0xd0/0x1a0 [ 99.226536][ T5662] ? clear_bhb_loop+0x40/0x90 [ 99.226565][ T5662] ? clear_bhb_loop+0x40/0x90 [ 99.226597][ T5662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.226626][ T5662] RIP: 0033:0x7f6888b7e969 [ 99.226668][ T5662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.226696][ T5662] RSP: 002b:00007f68871e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 99.226715][ T5662] RAX: ffffffffffffffda RBX: 00007f6888da5fa0 RCX: 00007f6888b7e969 [ 99.226727][ T5662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 99.226739][ T5662] RBP: 00007f68871e7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.226751][ T5662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.226841][ T5662] R13: 0000000000000000 R14: 00007f6888da5fa0 R15: 00007ffd83f77d48 [ 99.226872][ T5662] [ 99.228339][ T3485] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 99.442214][ T3485] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 99.454733][ T3485] EXT4-fs (loop6): This should not happen!! Data will be lost [ 99.454733][ T3485] [ 99.464522][ T3485] EXT4-fs (loop6): Total free blocks count 0 [ 99.470595][ T3485] EXT4-fs (loop6): Free/Dirty block details [ 99.476553][ T3485] EXT4-fs (loop6): free_blocks=2415919504 [ 99.482336][ T3485] EXT4-fs (loop6): dirty_blocks=15152 [ 99.487781][ T3485] EXT4-fs (loop6): Block reservation details [ 99.493865][ T3485] EXT4-fs (loop6): i_reserved_data_blocks=947 [ 99.515498][ T5667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.613'. [ 99.519127][ T3485] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 99.524593][ T5667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.613'. [ 99.537596][ T3485] EXT4-fs (loop6): This should not happen!! Data will be lost [ 99.537596][ T3485] [ 99.569969][ T5667] bridge0: entered promiscuous mode [ 99.577174][ T5667] macvlan2: entered promiscuous mode [ 99.585068][ T5667] bridge0: port 3(macvlan2) entered blocking state [ 99.591785][ T5667] bridge0: port 3(macvlan2) entered disabled state [ 99.601351][ T5667] macvlan2: entered allmulticast mode [ 99.606830][ T5667] bridge0: entered allmulticast mode [ 99.632244][ T5667] macvlan2: left allmulticast mode [ 99.637503][ T5667] bridge0: left allmulticast mode [ 99.643144][ T5667] bridge0: left promiscuous mode [ 99.682679][ T5673] dummy0 speed is unknown, defaulting to 1000 [ 99.789787][ T5682] loop4: detected capacity change from 0 to 256 [ 99.797449][ T5682] vfat: Unknown parameter '@/file0' [ 99.806117][ T5682] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 99.814763][ T5682] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 99.895576][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.618'. [ 99.904632][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.618'. [ 100.153578][ T5704] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 100.173405][ T5694] loop6: detected capacity change from 0 to 32768 [ 100.223454][ T5694] loop6: p1 p2 p3 < > [ 100.227669][ T5694] loop6: p1 size 242222080 extends beyond EOD, truncated [ 100.227791][ T5704] dummy0 speed is unknown, defaulting to 1000 [ 100.242012][ T5694] loop6: p2 start 4294967295 is beyond EOD, truncated [ 100.340726][ T5711] loop6: detected capacity change from 0 to 128 [ 100.466008][ T5718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.627'. [ 100.711173][ T5722] dummy0 speed is unknown, defaulting to 1000 [ 100.982729][ T5732] bridge0: entered promiscuous mode [ 101.012144][ T5732] macvlan2: entered promiscuous mode [ 101.051852][ T5732] bridge0: port 3(macvlan2) entered blocking state [ 101.058843][ T5732] bridge0: port 3(macvlan2) entered disabled state [ 101.094504][ T5732] macvlan2: entered allmulticast mode [ 101.100003][ T5732] bridge0: entered allmulticast mode [ 101.119853][ T5727] loop0: detected capacity change from 0 to 4096 [ 101.127618][ T5732] macvlan2: left allmulticast mode [ 101.133041][ T5732] bridge0: left allmulticast mode [ 101.144049][ T5732] bridge0: left promiscuous mode [ 101.159023][ T5727] EXT4-fs mount: 16 callbacks suppressed [ 101.159042][ T5727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.240986][ T5744] wireguard0: entered promiscuous mode [ 101.246806][ T5744] wireguard0: entered allmulticast mode [ 101.314206][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.356367][ T5751] SELinux: failed to load policy [ 101.686242][ T5759] loop6: detected capacity change from 0 to 512 [ 101.708367][ T5770] loop0: detected capacity change from 0 to 512 [ 101.725557][ T5763] loop4: detected capacity change from 0 to 512 [ 101.774246][ T5770] EXT4-fs error (device loop0): __ext4_fill_super:5502: inode #2: comm syz.0.646: casefold flag without casefold feature [ 101.776086][ T5759] EXT4-fs error (device loop6): __ext4_fill_super:5502: inode #2: comm syz.6.643: casefold flag without casefold feature [ 101.791498][ T5770] EXT4-fs (loop0): get root inode failed [ 101.810919][ T5770] EXT4-fs (loop0): mount failed [ 101.813394][ T5763] EXT4-fs error (device loop4): __ext4_fill_super:5502: inode #2: comm syz.4.644: casefold flag without casefold feature [ 101.834453][ T5759] EXT4-fs (loop6): get root inode failed [ 101.841733][ T5759] EXT4-fs (loop6): mount failed [ 101.848749][ T5763] EXT4-fs (loop4): get root inode failed [ 101.857169][ T5763] EXT4-fs (loop4): mount failed [ 101.981724][ T5770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'. [ 102.093174][ T5759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.643'. [ 102.243452][ T5780] loop4: detected capacity change from 0 to 8192 [ 102.347831][ T5786] wireguard0: entered promiscuous mode [ 102.353505][ T5786] wireguard0: entered allmulticast mode [ 102.377381][ T5790] loop5: detected capacity change from 0 to 256 [ 102.390393][ T5790] vfat: Unknown parameter '@/file0' [ 102.414296][ T5792] SELinux: failed to load policy [ 102.425475][ T5793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.648'. [ 102.520280][ T5799] bridge0: entered promiscuous mode [ 102.533398][ T5799] macvlan2: entered promiscuous mode [ 102.539992][ T5799] bridge0: port 3(macvlan2) entered blocking state [ 102.546699][ T5799] bridge0: port 3(macvlan2) entered disabled state [ 102.555629][ T5799] macvlan2: entered allmulticast mode [ 102.561128][ T5799] bridge0: entered allmulticast mode [ 102.605120][ T5799] macvlan2: left allmulticast mode [ 102.610308][ T5799] bridge0: left allmulticast mode [ 102.638101][ T5799] bridge0: left promiscuous mode [ 102.664031][ T5810] bridge5: entered allmulticast mode [ 102.666232][ T5813] loop4: detected capacity change from 0 to 512 [ 102.676162][ T5813] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.685845][ T5811] $Hÿ: renamed from bond0 (while UP) [ 102.691795][ T5813] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.711491][ T5811] $Hÿ: entered promiscuous mode [ 102.716900][ T5811] bond_slave_0: entered promiscuous mode [ 102.722837][ T5811] bond_slave_1: entered promiscuous mode [ 102.735573][ T5813] EXT4-fs (loop4): 1 truncate cleaned up [ 102.741895][ T5813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.757219][ T5813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.844343][ T5818] Falling back ldisc for ttyS3. [ 102.854150][ T5822] SELinux: failed to load policy [ 102.918988][ T5828] loop5: detected capacity change from 0 to 256 [ 102.928303][ T5828] vfat: Unknown parameter '@/file0' [ 102.944672][ T5804] dummy0 speed is unknown, defaulting to 1000 [ 103.376307][ T5834] macvlan2: entered promiscuous mode [ 103.381666][ T5834] bridge0: entered promiscuous mode [ 103.388636][ T5834] bridge0: port 3(macvlan2) entered blocking state [ 103.395428][ T5834] bridge0: port 3(macvlan2) entered disabled state [ 103.403320][ T5834] macvlan2: entered allmulticast mode [ 103.408899][ T5834] bridge0: entered allmulticast mode [ 103.417315][ T5834] macvlan2: left allmulticast mode [ 103.422585][ T5834] bridge0: left allmulticast mode [ 103.439241][ T5834] bridge0: left promiscuous mode [ 103.509756][ T5832] loop5: detected capacity change from 0 to 512 [ 103.532850][ T29] kauditd_printk_skb: 507 callbacks suppressed [ 103.532869][ T29] audit: type=1400 audit(1747898226.382:4465): avc: denied { prog_run } for pid=5833 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.591736][ T29] audit: type=1400 audit(1747898226.392:4466): avc: denied { create } for pid=5833 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.600371][ T5832] EXT4-fs error (device loop5): __ext4_fill_super:5502: inode #2: comm syz.5.669: casefold flag without casefold feature [ 103.611414][ T29] audit: type=1400 audit(1747898226.392:4467): avc: denied { ioctl } for pid=5833 comm="syz.0.670" path="socket:[13683]" dev="sockfs" ino=13683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.635963][ T29] audit: type=1326 audit(1747898226.442:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5838 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838f59e969 code=0x7ffc0000 [ 103.678358][ T29] audit: type=1326 audit(1747898226.442:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5838 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f838f59e969 code=0x7ffc0000 [ 103.702189][ T29] audit: type=1326 audit(1747898226.442:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5838 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838f59e969 code=0x7ffc0000 [ 103.729595][ T5832] EXT4-fs (loop5): get root inode failed [ 103.737182][ T5832] EXT4-fs (loop5): mount failed [ 103.767859][ T29] audit: type=1400 audit(1747898226.622:4471): avc: denied { map_read map_write } for pid=5840 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.843846][ T29] audit: type=1400 audit(1747898226.692:4472): avc: denied { create } for pid=5831 comm="syz.5.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.007886][ T29] audit: type=1326 audit(1747898226.862:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f284e969 code=0x7ffc0000 [ 104.031049][ T29] audit: type=1326 audit(1747898226.862:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f94f284e969 code=0x7ffc0000 [ 104.088508][ T5849] loop0: detected capacity change from 0 to 2048 [ 104.112501][ T5849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.260420][ T5824] kexec: Could not allocate control_code_buffer [ 104.275597][ T5850] dummy0 speed is unknown, defaulting to 1000 [ 104.414616][ T5860] SELinux: failed to load policy [ 104.638250][ T5872] __nla_validate_parse: 10 callbacks suppressed [ 104.638274][ T5872] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 104.653246][ T5872] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 104.671679][ T5856] SELinux: syz.5.675 (5856) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 104.877501][ T5864] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 104.903793][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 104.915069][ T5864] IPVS: Error joining to the multicast group [ 104.960774][ T3501] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 104.986190][ T3501] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 104.991808][ T5885] loop5: detected capacity change from 0 to 512 [ 104.999720][ T3501] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.999720][ T3501] [ 104.999744][ T3501] EXT4-fs (loop0): Total free blocks count 0 [ 104.999761][ T3501] EXT4-fs (loop0): Free/Dirty block details [ 104.999774][ T3501] EXT4-fs (loop0): free_blocks=2415919504 [ 105.008625][ T5885] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.016349][ T3501] EXT4-fs (loop0): dirty_blocks=10016 [ 105.028875][ T5885] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 105.036000][ T3501] EXT4-fs (loop0): Block reservation details [ 105.036016][ T3501] EXT4-fs (loop0): i_reserved_data_blocks=626 [ 105.041143][ T5875] loop4: detected capacity change from 0 to 1024 [ 105.061052][ T3481] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 105.082125][ T5885] EXT4-fs (loop5): 1 truncate cleaned up [ 105.106056][ T5885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.175247][ T5875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.196096][ T5894] SELinux: failed to load policy [ 105.207824][ T5875] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.678: bg 0: block 88: padding at end of block bitmap is not set [ 105.225377][ T5885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.293638][ T5904] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 105.302102][ T5904] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 105.323162][ T5898] Falling back ldisc for ttyS3. [ 105.404844][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.424367][ T5906] loop5: detected capacity change from 0 to 8192 [ 105.443172][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.698'. [ 105.485209][ T5916] loop4: detected capacity change from 0 to 2048 [ 105.545648][ T5923] SELinux: failed to load policy [ 105.619376][ T5916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.684646][ T3457] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 106.876004][ T3457] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 106.888592][ T3457] EXT4-fs (loop4): This should not happen!! Data will be lost [ 106.888592][ T3457] [ 106.898284][ T3457] EXT4-fs (loop4): Total free blocks count 0 [ 106.904404][ T3457] EXT4-fs (loop4): Free/Dirty block details [ 106.910315][ T3457] EXT4-fs (loop4): free_blocks=2415919504 [ 106.916124][ T3457] EXT4-fs (loop4): dirty_blocks=10768 [ 106.921527][ T3457] EXT4-fs (loop4): Block reservation details [ 106.927670][ T3457] EXT4-fs (loop4): i_reserved_data_blocks=673 [ 106.956364][ T3457] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 106.969747][ T5943] Falling back ldisc for ttyS3. [ 107.138845][ T5961] loop6: detected capacity change from 0 to 512 [ 107.142981][ T5958] Falling back ldisc for ttyS3. [ 107.170109][ T5961] EXT4-fs error (device loop6): __ext4_fill_super:5502: inode #2: comm syz.6.713: casefold flag without casefold feature [ 107.185822][ T5961] EXT4-fs (loop6): get root inode failed [ 107.191828][ T5961] EXT4-fs (loop6): mount failed [ 107.218218][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.713'. [ 107.250780][ T5965] dummy0 speed is unknown, defaulting to 1000 [ 107.304761][ T5964] loop4: detected capacity change from 0 to 256 [ 107.312224][ T5964] FAT-fs (loop4): bogus number of FAT sectors [ 107.318385][ T5964] FAT-fs (loop4): Can't find a valid FAT filesystem [ 107.535252][ T5980] serio: Serial port ptm0 [ 107.551046][ T5984] netlink: 40 bytes leftover after parsing attributes in process `syz.6.722'. [ 107.576206][ T5986] netlink: 28 bytes leftover after parsing attributes in process `syz.6.723'. [ 107.585171][ T5986] netlink: 28 bytes leftover after parsing attributes in process `syz.6.723'. [ 107.597999][ T5986] bridge0: entered promiscuous mode [ 107.603524][ T5986] macvlan2: entered promiscuous mode [ 107.610067][ T5986] bridge0: port 3(macvlan2) entered blocking state [ 107.616778][ T5986] bridge0: port 3(macvlan2) entered disabled state [ 107.623537][ T5986] macvlan2: entered allmulticast mode [ 107.629029][ T5986] bridge0: entered allmulticast mode [ 107.634901][ T5986] macvlan2: left allmulticast mode [ 107.640060][ T5986] bridge0: left allmulticast mode [ 107.646218][ T5986] bridge0: left promiscuous mode [ 107.807209][ T6004] loop0: detected capacity change from 0 to 512 [ 107.841927][ T6004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.860631][ T6004] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.912022][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.917347][ T6021] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.083280][ T6043] SELinux: failed to load policy [ 108.371844][ T6063] loop0: detected capacity change from 0 to 512 [ 108.406031][ T6067] dummy0 speed is unknown, defaulting to 1000 [ 108.406744][ T6063] EXT4-fs error (device loop0): __ext4_fill_super:5502: inode #2: comm syz.0.751: casefold flag without casefold feature [ 108.430026][ T6063] EXT4-fs (loop0): get root inode failed [ 108.437988][ T6063] EXT4-fs (loop0): mount failed [ 108.449876][ T6065] loop5: detected capacity change from 0 to 256 [ 108.476089][ T6065] FAT-fs (loop5): bogus number of FAT sectors [ 108.482718][ T6065] FAT-fs (loop5): Can't find a valid FAT filesystem [ 108.552545][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 108.552564][ T29] audit: type=1400 audit(1747898231.402:4721): avc: denied { read write } for pid=6077 comm="syz.5.757" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 108.596280][ T6078] loop5: detected capacity change from 0 to 2048 [ 108.602813][ T29] audit: type=1400 audit(1747898231.412:4722): avc: denied { mac_admin } for pid=6075 comm="syz.3.756" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.624128][ T29] audit: type=1400 audit(1747898231.412:4723): avc: denied { relabelto } for pid=6075 comm="syz.3.756" name="163" dev="tmpfs" ino=903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 108.650332][ T29] audit: type=1400 audit(1747898231.412:4724): avc: denied { associate } for pid=6075 comm="syz.3.756" name="163" dev="tmpfs" ino=903 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 108.677841][ T29] audit: type=1400 audit(1747898231.412:4725): avc: denied { create } for pid=6075 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 108.697286][ T29] audit: type=1400 audit(1747898231.412:4726): avc: denied { write } for pid=6075 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 108.700005][ T6080] loop0: detected capacity change from 0 to 2048 [ 108.716161][ T29] audit: type=1400 audit(1747898231.412:4727): avc: denied { execmem } for pid=6075 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 108.716197][ T29] audit: type=1400 audit(1747898231.452:4728): avc: denied { open } for pid=6077 comm="syz.5.757" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 108.765744][ T29] audit: type=1400 audit(1747898231.452:4729): avc: denied { create } for pid=6077 comm="syz.5.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.785863][ T29] audit: type=1400 audit(1747898231.452:4730): avc: denied { write } for pid=3320 comm="syz-executor" name="163" dev="tmpfs" ino=903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 108.815741][ T6078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.871310][ T6080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.084417][ T6094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.091925][ T6094] IPv6: NLM_F_CREATE should be set when creating new route [ 109.102424][ T6099] bridge0: entered promiscuous mode [ 109.107792][ T6099] macvlan2: entered promiscuous mode [ 109.115581][ T6099] bridge0: port 3(macvlan2) entered blocking state [ 109.122153][ T6099] bridge0: port 3(macvlan2) entered disabled state [ 109.151696][ T6099] macvlan2: entered allmulticast mode [ 109.157197][ T6099] bridge0: entered allmulticast mode [ 109.214338][ T6099] macvlan2: left allmulticast mode [ 109.219547][ T6099] bridge0: left allmulticast mode [ 109.233524][ T6099] bridge0: left promiscuous mode [ 109.259100][ T6083] netlink: 'syz.3.759': attribute type 4 has an invalid length. [ 109.344179][ T6110] SELinux: failed to load policy [ 109.460034][ T3474] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 109.495162][ T3474] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 109.507988][ T3474] EXT4-fs (loop5): This should not happen!! Data will be lost [ 109.507988][ T3474] [ 109.517864][ T3474] EXT4-fs (loop5): Total free blocks count 0 [ 109.524014][ T3474] EXT4-fs (loop5): Free/Dirty block details [ 109.529964][ T3474] EXT4-fs (loop5): free_blocks=2415919504 [ 109.535919][ T3474] EXT4-fs (loop5): dirty_blocks=16400 [ 109.541367][ T3474] EXT4-fs (loop5): Block reservation details [ 109.547516][ T3474] EXT4-fs (loop5): i_reserved_data_blocks=1025 [ 109.623895][ T6128] wireguard0: entered promiscuous mode [ 109.629443][ T6128] wireguard0: entered allmulticast mode [ 109.644004][ T3474] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 109.690871][ T3474] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 109.691635][ T6131] dummy0 speed is unknown, defaulting to 1000 [ 109.722900][ T3474] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 109.735816][ T3474] EXT4-fs (loop0): This should not happen!! Data will be lost [ 109.735816][ T3474] [ 109.745511][ T3474] EXT4-fs (loop0): Total free blocks count 0 [ 109.751641][ T3474] EXT4-fs (loop0): Free/Dirty block details [ 109.757603][ T3474] EXT4-fs (loop0): free_blocks=2415919504 [ 109.763391][ T3474] EXT4-fs (loop0): dirty_blocks=11520 [ 109.768942][ T3474] EXT4-fs (loop0): Block reservation details [ 109.775096][ T3474] EXT4-fs (loop0): i_reserved_data_blocks=720 [ 109.814462][ T6134] SELinux: failed to load policy [ 109.871879][ T3474] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 109.992943][ T6149] __nla_validate_parse: 7 callbacks suppressed [ 109.992964][ T6149] netlink: 24 bytes leftover after parsing attributes in process `syz.6.782'. [ 110.018278][ T6127] loop4: detected capacity change from 0 to 32768 [ 110.038591][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.783'. [ 110.047657][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.783'. [ 110.084690][ T6127] loop4: p1 p2 p3 < > [ 110.089017][ T6127] loop4: p1 size 242222080 extends beyond EOD, truncated [ 110.100744][ T6127] loop4: p2 start 4294967295 is beyond EOD, truncated [ 110.204038][ T6158] Falling back ldisc for ttyS3. [ 110.268523][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.786'. [ 110.284281][ T6167] SELinux: failed to load policy [ 110.286952][ T6147] loop5: detected capacity change from 0 to 512 [ 110.331291][ T6174] netlink: 28 bytes leftover after parsing attributes in process `syz.6.791'. [ 110.340343][ T6174] netlink: 28 bytes leftover after parsing attributes in process `syz.6.791'. [ 110.350313][ T6147] EXT4-fs error (device loop5): __ext4_fill_super:5502: inode #2: comm syz.5.768: casefold flag without casefold feature [ 110.373981][ T6174] bridge0: entered promiscuous mode [ 110.379367][ T6174] macvlan2: entered promiscuous mode [ 110.381816][ T6147] EXT4-fs (loop5): get root inode failed [ 110.386031][ T6174] bridge0: port 3(macvlan2) entered blocking state [ 110.391274][ T6147] EXT4-fs (loop5): mount failed [ 110.398332][ T6174] bridge0: port 3(macvlan2) entered disabled state [ 110.398586][ T6174] macvlan2: entered allmulticast mode [ 110.398604][ T6174] bridge0: entered allmulticast mode [ 110.430000][ T6174] macvlan2: left allmulticast mode [ 110.435384][ T6174] bridge0: left allmulticast mode [ 110.441354][ T6174] bridge0: left promiscuous mode [ 110.494876][ T6186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.794'. [ 110.505149][ T6186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.794'. [ 110.529713][ T6186] bridge0: entered promiscuous mode [ 110.535347][ T6186] macvlan2: entered promiscuous mode [ 110.541824][ T6186] bridge0: port 3(macvlan2) entered blocking state [ 110.548458][ T6186] bridge0: port 3(macvlan2) entered disabled state [ 110.555157][ T6186] macvlan2: entered allmulticast mode [ 110.560575][ T6186] bridge0: entered allmulticast mode [ 110.566510][ T6186] macvlan2: left allmulticast mode [ 110.571680][ T6186] bridge0: left allmulticast mode [ 110.575020][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.768'. [ 110.578136][ T6186] bridge0: left promiscuous mode [ 110.591234][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.795'. [ 110.764757][ T6209] SELinux: failed to load policy [ 110.809418][ T6213] dummy0 speed is unknown, defaulting to 1000 [ 110.868505][ T6215] Falling back ldisc for ttyS3. [ 110.888564][ T6196] loop6: detected capacity change from 0 to 32768 [ 110.943994][ T6196] loop6: p1 p2 p3 < > [ 110.948231][ T6196] loop6: p1 size 242222080 extends beyond EOD, truncated [ 110.973147][ T6196] loop6: p2 start 4294967295 is beyond EOD, truncated [ 111.131090][ T6247] SELinux: failed to load policy [ 111.205486][ T6255] FAULT_INJECTION: forcing a failure. [ 111.205486][ T6255] name failslab, interval 1, probability 0, space 0, times 0 [ 111.208730][ T6252] dummy0 speed is unknown, defaulting to 1000 [ 111.218249][ T6255] CPU: 1 UID: 0 PID: 6255 Comm: syz.6.818 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 111.218345][ T6255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.218364][ T6255] Call Trace: [ 111.218372][ T6255] [ 111.218382][ T6255] __dump_stack+0x1d/0x30 [ 111.218417][ T6255] dump_stack_lvl+0xe8/0x140 [ 111.218445][ T6255] dump_stack+0x15/0x1b [ 111.218470][ T6255] should_fail_ex+0x265/0x280 [ 111.218652][ T6255] should_failslab+0x8c/0xb0 [ 111.218696][ T6255] kmem_cache_alloc_noprof+0x50/0x310 [ 111.218723][ T6255] ? audit_log_start+0x365/0x6c0 [ 111.218821][ T6255] audit_log_start+0x365/0x6c0 [ 111.218897][ T6255] audit_seccomp+0x48/0x100 [ 111.218997][ T6255] ? __seccomp_filter+0x68c/0x10d0 [ 111.219081][ T6255] __seccomp_filter+0x69d/0x10d0 [ 111.219115][ T6255] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 111.219154][ T6255] ? vfs_write+0x75e/0x8d0 [ 111.219202][ T6255] __secure_computing+0x82/0x150 [ 111.219244][ T6255] syscall_trace_enter+0xcf/0x1e0 [ 111.219279][ T6255] do_syscall_64+0xaa/0x1a0 [ 111.219315][ T6255] ? clear_bhb_loop+0x40/0x90 [ 111.219345][ T6255] ? clear_bhb_loop+0x40/0x90 [ 111.219448][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.219590][ T6255] RIP: 0033:0x7fce89f2e969 [ 111.219612][ T6255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.219637][ T6255] RSP: 002b:00007fce88597038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 111.219704][ T6255] RAX: ffffffffffffffda RBX: 00007fce8a155fa0 RCX: 00007fce89f2e969 [ 111.219723][ T6255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.219741][ T6255] RBP: 00007fce88597090 R08: 0000000000000000 R09: 0000000000000000 [ 111.219806][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.219823][ T6255] R13: 0000000000000000 R14: 00007fce8a155fa0 R15: 00007fff4cefd6f8 [ 111.219853][ T6255] [ 111.302532][ T6256] loop5: detected capacity change from 0 to 512 [ 111.466017][ T6256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.480664][ T6256] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.518182][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.588796][ T6279] SELinux: failed to load policy [ 111.620032][ T6283] loop5: detected capacity change from 0 to 1024 [ 111.627712][ T6283] ext3: Unknown parameter 'nouser_xattr' [ 111.670524][ T6283] loop5: detected capacity change from 0 to 512 [ 111.780454][ T6288] loop0: detected capacity change from 0 to 512 [ 111.821776][ T6288] EXT4-fs error (device loop0): __ext4_fill_super:5502: inode #2: comm syz.0.831: casefold flag without casefold feature [ 111.840250][ T6288] EXT4-fs (loop0): get root inode failed [ 111.846823][ T6288] EXT4-fs (loop0): mount failed [ 111.898613][ T6290] loop4: detected capacity change from 0 to 4096 [ 111.908386][ T6290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.985863][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.060776][ T6297] FAULT_INJECTION: forcing a failure. [ 112.060776][ T6297] name failslab, interval 1, probability 0, space 0, times 0 [ 112.073498][ T6297] CPU: 1 UID: 0 PID: 6297 Comm: syz.3.833 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 112.073529][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.073633][ T6297] Call Trace: [ 112.073641][ T6297] [ 112.073649][ T6297] __dump_stack+0x1d/0x30 [ 112.073671][ T6297] dump_stack_lvl+0xe8/0x140 [ 112.073695][ T6297] dump_stack+0x15/0x1b [ 112.073786][ T6297] should_fail_ex+0x265/0x280 [ 112.073833][ T6297] should_failslab+0x8c/0xb0 [ 112.073873][ T6297] kmem_cache_alloc_noprof+0x50/0x310 [ 112.073963][ T6297] ? getname_flags+0x80/0x3b0 [ 112.074009][ T6297] getname_flags+0x80/0x3b0 [ 112.074049][ T6297] __x64_sys_rmdir+0x21/0x40 [ 112.074073][ T6297] x64_sys_call+0x2ae3/0x2fb0 [ 112.074118][ T6297] do_syscall_64+0xd0/0x1a0 [ 112.074150][ T6297] ? clear_bhb_loop+0x40/0x90 [ 112.074179][ T6297] ? clear_bhb_loop+0x40/0x90 [ 112.074267][ T6297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.074294][ T6297] RIP: 0033:0x7f94f284e969 [ 112.074313][ T6297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.074381][ T6297] RSP: 002b:00007f94f0eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 112.074403][ T6297] RAX: ffffffffffffffda RBX: 00007f94f2a75fa0 RCX: 00007f94f284e969 [ 112.074416][ T6297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.074428][ T6297] RBP: 00007f94f0eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.074439][ T6297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.074451][ T6297] R13: 0000000000000000 R14: 00007f94f2a75fa0 R15: 00007ffd3c426f78 [ 112.074478][ T6297] [ 112.279947][ T6301] ip6gre1: entered allmulticast mode [ 112.392158][ T6310] SELinux: failed to load policy [ 112.635720][ T6344] SELinux: failed to load policy [ 112.650152][ T6342] FAULT_INJECTION: forcing a failure. [ 112.650152][ T6342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.663344][ T6342] CPU: 0 UID: 0 PID: 6342 Comm: syz.0.848 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 112.663417][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.663430][ T6342] Call Trace: [ 112.663435][ T6342] [ 112.663446][ T6342] __dump_stack+0x1d/0x30 [ 112.663473][ T6342] dump_stack_lvl+0xe8/0x140 [ 112.663499][ T6342] dump_stack+0x15/0x1b [ 112.663559][ T6342] should_fail_ex+0x265/0x280 [ 112.663641][ T6342] should_fail+0xb/0x20 [ 112.663683][ T6342] should_fail_usercopy+0x1a/0x20 [ 112.663710][ T6342] _copy_from_user+0x1c/0xb0 [ 112.663735][ T6342] ___sys_sendmsg+0xc1/0x1d0 [ 112.663788][ T6342] __x64_sys_sendmsg+0xd4/0x160 [ 112.663854][ T6342] x64_sys_call+0x2999/0x2fb0 [ 112.663876][ T6342] do_syscall_64+0xd0/0x1a0 [ 112.663908][ T6342] ? clear_bhb_loop+0x40/0x90 [ 112.663937][ T6342] ? clear_bhb_loop+0x40/0x90 [ 112.664045][ T6342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.664073][ T6342] RIP: 0033:0x7f838f59e969 [ 112.664093][ T6342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.664118][ T6342] RSP: 002b:00007f838dbe6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.664143][ T6342] RAX: ffffffffffffffda RBX: 00007f838f7c6080 RCX: 00007f838f59e969 [ 112.664160][ T6342] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 112.664202][ T6342] RBP: 00007f838dbe6090 R08: 0000000000000000 R09: 0000000000000000 [ 112.664214][ T6342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.664226][ T6342] R13: 0000000000000000 R14: 00007f838f7c6080 R15: 00007ffe166e08a8 [ 112.664254][ T6342] [ 112.845619][ T6355] 9pnet_fd: Insufficient options for proto=fd [ 112.863123][ T6352] loop5: detected capacity change from 0 to 512 [ 112.885821][ T6348] netlink: 'syz.6.855': attribute type 7 has an invalid length. [ 112.913102][ T6358] Falling back ldisc for ttyS3. [ 112.938828][ T6352] EXT4-fs error (device loop5): __ext4_fill_super:5502: inode #2: comm syz.5.856: casefold flag without casefold feature [ 112.958266][ T6352] EXT4-fs (loop5): get root inode failed [ 112.965047][ T6352] EXT4-fs (loop5): mount failed [ 113.134911][ T6376] SELinux: failed to load policy [ 113.249712][ T6386] tmpfs: Unknown parameter 'ÿ' [ 113.559211][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 113.559230][ T29] audit: type=1326 audit(1747898236.412:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f284e969 code=0x7ffc0000 [ 113.598800][ T29] audit: type=1326 audit(1747898236.442:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f94f284e969 code=0x7ffc0000 [ 113.625708][ T29] audit: type=1326 audit(1747898236.482:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f284e969 code=0x7ffc0000 [ 113.648937][ T29] audit: type=1326 audit(1747898236.482:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f284e969 code=0x7ffc0000 [ 113.672511][ T29] audit: type=1326 audit(1747898236.482:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f94f284e969 code=0x7ffc0000 [ 113.695941][ T29] audit: type=1326 audit(1747898236.482:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f284e969 code=0x7ffc0000 [ 113.718916][ T29] audit: type=1326 audit(1747898236.482:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f284e969 code=0x7ffc0000 [ 113.742120][ T29] audit: type=1326 audit(1747898236.482:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f94f284e969 code=0x7ffc0000 [ 113.765055][ T29] audit: type=1326 audit(1747898236.482:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f284e969 code=0x7ffc0000 [ 113.788071][ T29] audit: type=1326 audit(1747898236.482:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f94f284e969 code=0x7ffc0000 [ 113.862893][ T6406] dummy0 speed is unknown, defaulting to 1000 [ 114.063482][ T6416] FAULT_INJECTION: forcing a failure. [ 114.063482][ T6416] name failslab, interval 1, probability 0, space 0, times 0 [ 114.076323][ T6416] CPU: 1 UID: 0 PID: 6416 Comm: syz.0.882 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 114.076361][ T6416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.076419][ T6416] Call Trace: [ 114.076427][ T6416] [ 114.076437][ T6416] __dump_stack+0x1d/0x30 [ 114.076459][ T6416] dump_stack_lvl+0xe8/0x140 [ 114.076479][ T6416] dump_stack+0x15/0x1b [ 114.076500][ T6416] should_fail_ex+0x265/0x280 [ 114.076552][ T6416] ? tcp_sendmsg_fastopen+0x172/0x520 [ 114.076587][ T6416] should_failslab+0x8c/0xb0 [ 114.076656][ T6416] __kmalloc_cache_noprof+0x4c/0x320 [ 114.076685][ T6416] tcp_sendmsg_fastopen+0x172/0x520 [ 114.076744][ T6416] tcp_sendmsg_locked+0x26a5/0x28b0 [ 114.076779][ T6416] ? plist_check_list+0x1e4/0x210 [ 114.076811][ T6416] ? perf_cgroup_switch+0x132/0x450 [ 114.076865][ T6416] ? _raw_spin_unlock+0x26/0x50 [ 114.076901][ T6416] ? finish_task_switch+0xad/0x2b0 [ 114.076925][ T6416] ? __schedule+0x6a2/0xb20 [ 114.076954][ T6416] ? __cond_resched+0x4e/0x90 [ 114.077029][ T6416] ? __pfx_tcp_sendmsg+0x10/0x10 [ 114.077056][ T6416] ? __local_bh_enable_ip+0x70/0x80 [ 114.077168][ T6416] ? _raw_spin_unlock_bh+0x36/0x40 [ 114.077213][ T6416] ? __pfx_tcp_sendmsg+0x10/0x10 [ 114.077244][ T6416] tcp_sendmsg+0x2f/0x50 [ 114.077277][ T6416] inet6_sendmsg+0x76/0xd0 [ 114.077311][ T6416] __sock_sendmsg+0x8b/0x180 [ 114.077369][ T6416] __sys_sendto+0x268/0x330 [ 114.077426][ T6416] __x64_sys_sendto+0x76/0x90 [ 114.077471][ T6416] x64_sys_call+0x2eb6/0x2fb0 [ 114.077495][ T6416] do_syscall_64+0xd0/0x1a0 [ 114.077525][ T6416] ? clear_bhb_loop+0x40/0x90 [ 114.077552][ T6416] ? clear_bhb_loop+0x40/0x90 [ 114.077582][ T6416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.077657][ T6416] RIP: 0033:0x7f838f59e969 [ 114.077672][ T6416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.077692][ T6416] RSP: 002b:00007f838dc07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 114.077717][ T6416] RAX: ffffffffffffffda RBX: 00007f838f7c5fa0 RCX: 00007f838f59e969 [ 114.077750][ T6416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 114.077767][ T6416] RBP: 00007f838dc07090 R08: 0000200000b63fe4 R09: 000000000000001c [ 114.077784][ T6416] R10: 0000000022004001 R11: 0000000000000246 R12: 0000000000000001 [ 114.077799][ T6416] R13: 0000000000000000 R14: 00007f838f7c5fa0 R15: 00007ffe166e08a8 [ 114.077822][ T6416] [ 114.406857][ T6409] dummy0 speed is unknown, defaulting to 1000 [ 114.417148][ T6418] bridge0: entered promiscuous mode [ 114.422540][ T6418] macvlan2: entered promiscuous mode [ 114.430857][ T6418] bridge0: port 3(macvlan2) entered blocking state [ 114.437583][ T6418] bridge0: port 3(macvlan2) entered disabled state [ 114.444753][ T6418] macvlan2: entered allmulticast mode [ 114.450168][ T6418] bridge0: entered allmulticast mode [ 114.456063][ T6418] macvlan2: left allmulticast mode [ 114.461233][ T6418] bridge0: left allmulticast mode [ 114.468006][ T6418] bridge0: left promiscuous mode [ 115.016998][ T6456] __nla_validate_parse: 30 callbacks suppressed [ 115.017016][ T6456] netlink: 28 bytes leftover after parsing attributes in process `syz.5.897'. [ 115.125905][ T6452] loop6: detected capacity change from 0 to 4096 [ 115.137782][ T6452] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.187534][ T4723] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.202533][ T6467] wireguard0: entered promiscuous mode [ 115.208321][ T6467] wireguard0: entered allmulticast mode [ 115.231171][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.6.902'. [ 115.315535][ T6474] dummy0 speed is unknown, defaulting to 1000 [ 115.352062][ T6482] loop6: detected capacity change from 0 to 256 [ 115.360236][ T6481] loop5: detected capacity change from 0 to 512 [ 115.364288][ T6482] FAT-fs (loop6): bogus number of FAT sectors [ 115.372711][ T6482] FAT-fs (loop6): Can't find a valid FAT filesystem [ 115.373866][ T6481] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.399189][ T6481] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 115.428741][ T6481] EXT4-fs (loop5): 1 truncate cleaned up [ 115.432197][ T6487] netlink: 28 bytes leftover after parsing attributes in process `syz.6.908'. [ 115.435010][ T6481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.500370][ T6476] loop0: detected capacity change from 0 to 512 [ 115.515111][ T6481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.567248][ T6476] EXT4-fs error (device loop0): __ext4_fill_super:5502: inode #2: comm syz.0.905: casefold flag without casefold feature [ 115.584931][ T6476] EXT4-fs (loop0): get root inode failed [ 115.591874][ T6476] EXT4-fs (loop0): mount failed [ 115.830183][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.914'. [ 115.863516][ T6502] loop0: detected capacity change from 0 to 32768 [ 115.913348][ T6502] loop0: p1 p2 p3 < > [ 115.917647][ T6502] loop0: p1 size 242222080 extends beyond EOD, truncated [ 115.926657][ T6502] loop0: p2 start 4294967295 is beyond EOD, truncated [ 116.019649][ T6513] loop0: detected capacity change from 0 to 512 [ 116.026381][ T6513] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.034331][ T6513] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.046560][ T6513] EXT4-fs (loop0): 1 truncate cleaned up [ 116.052823][ T6513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.066854][ T6513] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.187093][ T6519] netlink: 28 bytes leftover after parsing attributes in process `syz.4.919'. [ 116.316833][ T6516] loop0: detected capacity change from 0 to 4096 [ 116.325682][ T6516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.397201][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.562498][ T6531] netlink: 28 bytes leftover after parsing attributes in process `syz.6.924'. [ 116.571495][ T6531] netlink: 28 bytes leftover after parsing attributes in process `syz.6.924'. [ 116.588826][ T6531] bridge0: entered promiscuous mode [ 116.595536][ T6531] macvlan2: entered promiscuous mode [ 116.602226][ T6531] bridge0: port 3(macvlan2) entered blocking state [ 116.609081][ T6531] bridge0: port 3(macvlan2) entered disabled state [ 116.620957][ T6531] macvlan2: entered allmulticast mode [ 116.626404][ T6531] bridge0: entered allmulticast mode [ 116.634620][ T6531] macvlan2: left allmulticast mode [ 116.639807][ T6531] bridge0: left allmulticast mode [ 116.692442][ T6531] bridge0: left promiscuous mode [ 116.751499][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.925'. [ 117.113949][ T6539] loop5: detected capacity change from 0 to 32768 [ 117.115870][ T6554] loop4: detected capacity change from 0 to 512 [ 117.127604][ T6554] EXT4-fs: Ignoring removed orlov option [ 117.144092][ T6539] loop5: p1 p2 p3 < > [ 117.148774][ T6539] loop5: p1 size 242222080 extends beyond EOD, truncated [ 117.156716][ T6554] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.932: casefold flag without casefold feature [ 117.157595][ T6539] loop5: p2 start 4294967295 is beyond EOD, truncated [ 117.180657][ T6554] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.932: couldn't read orphan inode 15 (err -117) [ 117.243421][ T6554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.349256][ T6566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.936'. [ 117.358319][ T6566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.936'. [ 117.405974][ T6566] macvlan2: entered promiscuous mode [ 117.411365][ T6566] bridge0: entered promiscuous mode [ 117.423206][ T6566] bridge0: port 3(macvlan2) entered blocking state [ 117.429848][ T6566] bridge0: port 3(macvlan2) entered disabled state [ 117.436663][ T6566] macvlan2: entered allmulticast mode [ 117.442166][ T6566] bridge0: entered allmulticast mode [ 117.448100][ T6566] macvlan2: left allmulticast mode [ 117.453329][ T6566] bridge0: left allmulticast mode [ 117.460159][ T6566] bridge0: left promiscuous mode [ 117.467188][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.532456][ T6581] loop6: detected capacity change from 0 to 512 [ 117.539507][ T6581] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.547865][ T6581] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 117.560503][ T6581] EXT4-fs (loop6): 1 truncate cleaned up [ 117.567827][ T6581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.606297][ T6581] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.697458][ T6591] wireguard0: entered promiscuous mode [ 117.703013][ T6591] wireguard0: entered allmulticast mode [ 117.725785][ T6579] loop4: detected capacity change from 0 to 4096 [ 117.734915][ T6579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.792854][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.864641][ T6601] loop4: detected capacity change from 0 to 1024 [ 117.879275][ T6601] EXT4-fs: Ignoring removed oldalloc option [ 117.889127][ T6601] EXT4-fs: Ignoring removed orlov option [ 117.903009][ T6601] EXT4-fs (loop4): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 117.948223][ T6601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.040236][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.088320][ T6615] bridge0: entered promiscuous mode [ 118.102335][ T6615] macvlan2: entered promiscuous mode [ 118.109940][ T6615] bridge0: port 3(macvlan2) entered blocking state [ 118.116685][ T6615] bridge0: port 3(macvlan2) entered disabled state [ 118.125059][ T6615] macvlan2: entered allmulticast mode [ 118.130663][ T6615] bridge0: entered allmulticast mode [ 118.141989][ T6615] macvlan2: left allmulticast mode [ 118.147404][ T6615] bridge0: left allmulticast mode [ 118.163754][ T6615] bridge0: left promiscuous mode [ 118.289355][ T6623] loop4: detected capacity change from 0 to 8192 [ 118.377677][ T6627] ref_ctr increment failed for inode: 0x315 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810445b700 [ 118.401057][ T6626] uprobe: syz.5.955:6626 failed to unregister, leaking uprobe [ 118.658863][ T29] kauditd_printk_skb: 533 callbacks suppressed [ 118.658882][ T29] audit: type=1400 audit(1747898241.512:5622): avc: denied { write } for pid=6636 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.713880][ T29] audit: type=1400 audit(1747898241.572:5623): avc: denied { create } for pid=6635 comm="syz.6.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.735472][ T6637] Falling back ldisc for ttyS3. [ 118.741886][ T29] audit: type=1400 audit(1747898241.572:5624): avc: denied { write } for pid=6635 comm="syz.6.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.762684][ T29] audit: type=1400 audit(1747898241.572:5625): avc: denied { read } for pid=6635 comm="syz.6.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.813045][ T6641] Falling back ldisc for ttyS3. [ 118.878056][ T29] audit: type=1400 audit(1747898241.712:5626): avc: denied { create } for pid=6633 comm="syz.5.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.897742][ T29] audit: type=1400 audit(1747898241.712:5627): avc: denied { bind } for pid=6633 comm="syz.5.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.918223][ T29] audit: type=1400 audit(1747898241.722:5628): avc: denied { prog_run } for pid=6633 comm="syz.5.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 118.937247][ T29] audit: type=1400 audit(1747898241.722:5629): avc: denied { create } for pid=6633 comm="syz.5.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.956826][ T29] audit: type=1400 audit(1747898241.722:5630): avc: denied { setopt } for pid=6633 comm="syz.5.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.009363][ T29] audit: type=1400 audit(1747898241.862:5631): avc: denied { create } for pid=6653 comm="syz.3.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 119.037131][ T6655] dummy0 speed is unknown, defaulting to 1000 [ 119.250200][ T6672] ÿÿÿÿ: renamed from lo (while UP) [ 119.347720][ T6675] Falling back ldisc for ttyS3. [ 119.903566][ T6703] FAULT_INJECTION: forcing a failure. [ 119.903566][ T6703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.916867][ T6703] CPU: 1 UID: 0 PID: 6703 Comm: syz.5.981 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 119.916905][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.916918][ T6703] Call Trace: [ 119.916924][ T6703] [ 119.916933][ T6703] __dump_stack+0x1d/0x30 [ 119.917035][ T6703] dump_stack_lvl+0xe8/0x140 [ 119.917063][ T6703] dump_stack+0x15/0x1b [ 119.917085][ T6703] should_fail_ex+0x265/0x280 [ 119.917129][ T6703] should_fail+0xb/0x20 [ 119.917185][ T6703] should_fail_usercopy+0x1a/0x20 [ 119.917210][ T6703] _copy_from_user+0x1c/0xb0 [ 119.917239][ T6703] proc_do_submiturb+0x867/0x1db0 [ 119.917310][ T6703] ? proc_do_submiturb+0x101/0x1db0 [ 119.917359][ T6703] ? should_fail_ex+0xdb/0x280 [ 119.917483][ T6703] proc_submiturb+0x7b/0xa0 [ 119.917548][ T6703] usbdev_ioctl+0xcc2/0x1710 [ 119.917586][ T6703] ? __pfx_usbdev_ioctl+0x10/0x10 [ 119.917620][ T6703] __se_sys_ioctl+0xcb/0x140 [ 119.917718][ T6703] __x64_sys_ioctl+0x43/0x50 [ 119.917748][ T6703] x64_sys_call+0x19a8/0x2fb0 [ 119.917793][ T6703] do_syscall_64+0xd0/0x1a0 [ 119.917824][ T6703] ? clear_bhb_loop+0x40/0x90 [ 119.917906][ T6703] ? clear_bhb_loop+0x40/0x90 [ 119.917976][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.918005][ T6703] RIP: 0033:0x7fb24fdfe969 [ 119.918021][ T6703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.918041][ T6703] RSP: 002b:00007fb24e467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.918062][ T6703] RAX: ffffffffffffffda RBX: 00007fb250025fa0 RCX: 00007fb24fdfe969 [ 119.918075][ T6703] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000005 [ 119.918089][ T6703] RBP: 00007fb24e467090 R08: 0000000000000000 R09: 0000000000000000 [ 119.918101][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.918112][ T6703] R13: 0000000000000000 R14: 00007fb250025fa0 R15: 00007ffe74a43d68 [ 119.918137][ T6703] [ 120.220883][ T6697] loop6: detected capacity change from 0 to 512 [ 120.240899][ T6707] loop0: detected capacity change from 0 to 512 [ 120.248715][ T6707] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.293078][ T6707] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 120.307838][ T6697] EXT4-fs error (device loop6): __ext4_fill_super:5502: inode #2: comm syz.6.980: casefold flag without casefold feature [ 120.326817][ T6707] EXT4-fs (loop0): 1 truncate cleaned up [ 120.339358][ T6707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.356726][ T6697] EXT4-fs (loop6): get root inode failed [ 120.356883][ T6707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.372344][ T6714] loop5: detected capacity change from 0 to 2048 [ 120.380694][ T6697] EXT4-fs (loop6): mount failed [ 120.481180][ T6714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.745400][ T6727] loop6: detected capacity change from 0 to 512 [ 120.794980][ T6727] EXT4-fs error (device loop6): __ext4_fill_super:5502: inode #2: comm syz.6.989: casefold flag without casefold feature [ 120.821071][ T6727] EXT4-fs (loop6): get root inode failed [ 120.828191][ T6727] EXT4-fs (loop6): mount failed [ 120.917136][ T6727] __nla_validate_parse: 7 callbacks suppressed [ 120.917212][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.989'. [ 120.966861][ T3477] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 120.981988][ T3477] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 120.994605][ T3477] EXT4-fs (loop5): This should not happen!! Data will be lost [ 120.994605][ T3477] [ 121.004363][ T3477] EXT4-fs (loop5): Total free blocks count 0 [ 121.010373][ T3477] EXT4-fs (loop5): Free/Dirty block details [ 121.016360][ T3477] EXT4-fs (loop5): free_blocks=2415919504 [ 121.022102][ T3477] EXT4-fs (loop5): dirty_blocks=16400 [ 121.027565][ T3477] EXT4-fs (loop5): Block reservation details [ 121.033581][ T3477] EXT4-fs (loop5): i_reserved_data_blocks=1025 [ 121.060359][ T3477] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 121.274143][ T6752] netlink: 40 bytes leftover after parsing attributes in process `syz.6.996'. [ 121.303021][ T6755] loop0: detected capacity change from 0 to 128 [ 121.377770][ T6739] loop4: detected capacity change from 0 to 4096 [ 121.467482][ T6739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.548180][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 121.580616][ T6759] loop6: detected capacity change from 0 to 512 [ 121.603126][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.628187][ T6759] EXT4-fs error (device loop6): __ext4_fill_super:5502: inode #2: comm syz.6.999: casefold flag without casefold feature [ 121.646429][ T6759] EXT4-fs (loop6): get root inode failed [ 121.653554][ T6759] EXT4-fs (loop6): mount failed [ 121.784577][ T6779] Falling back ldisc for ttyS3. [ 121.850687][ T6787] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1008'. [ 121.882736][ T6778] Falling back ldisc for ttyS3. [ 122.156729][ T6794] FAULT_INJECTION: forcing a failure. [ 122.156729][ T6794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.170062][ T6794] CPU: 1 UID: 0 PID: 6794 Comm: syz.3.1010 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 122.170095][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.170112][ T6794] Call Trace: [ 122.170121][ T6794] [ 122.170131][ T6794] __dump_stack+0x1d/0x30 [ 122.170186][ T6794] dump_stack_lvl+0xe8/0x140 [ 122.170260][ T6794] dump_stack+0x15/0x1b [ 122.170281][ T6794] should_fail_ex+0x265/0x280 [ 122.170439][ T6794] should_fail+0xb/0x20 [ 122.170550][ T6794] should_fail_usercopy+0x1a/0x20 [ 122.170585][ T6794] _copy_from_user+0x1c/0xb0 [ 122.170621][ T6794] __sys_sendto+0x19e/0x330 [ 122.170721][ T6794] __x64_sys_sendto+0x76/0x90 [ 122.170755][ T6794] x64_sys_call+0x2eb6/0x2fb0 [ 122.170782][ T6794] do_syscall_64+0xd0/0x1a0 [ 122.170815][ T6794] ? clear_bhb_loop+0x40/0x90 [ 122.170882][ T6794] ? clear_bhb_loop+0x40/0x90 [ 122.170913][ T6794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.171012][ T6794] RIP: 0033:0x7f94f284e969 [ 122.171031][ T6794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.171055][ T6794] RSP: 002b:00007f94f0eb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 122.171079][ T6794] RAX: ffffffffffffffda RBX: 00007f94f2a75fa0 RCX: 00007f94f284e969 [ 122.171092][ T6794] RDX: 0000000000034000 RSI: 0000200000000180 RDI: 0000000000000006 [ 122.171104][ T6794] RBP: 00007f94f0eb7090 R08: 0000200000000480 R09: 000000000000001c [ 122.171201][ T6794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.171215][ T6794] R13: 0000000000000000 R14: 00007f94f2a75fa0 R15: 00007ffd3c426f78 [ 122.171245][ T6794] [ 122.460374][ T6817] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 122.469134][ T6817] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 122.497474][ T6819] wireguard0: entered promiscuous mode [ 122.503680][ T6819] wireguard0: entered allmulticast mode [ 122.530600][ T6822] bridge_slave_0: left allmulticast mode [ 122.536417][ T6822] bridge_slave_0: left promiscuous mode [ 122.542176][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.554825][ T6822] bridge_slave_1: left allmulticast mode [ 122.560655][ T6822] bridge_slave_1: left promiscuous mode [ 122.566596][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.568123][ T6811] loop6: detected capacity change from 0 to 512 [ 122.586030][ T6822] bond0: (slave bond_slave_0): Releasing backup interface [ 122.598555][ T6822] bond0: (slave bond_slave_1): Releasing backup interface [ 122.612499][ T6822] team0: Port device team_slave_0 removed [ 122.613190][ T6811] EXT4-fs error (device loop6): __ext4_fill_super:5502: inode #2: comm syz.6.1017: casefold flag without casefold feature [ 122.634452][ T6822] team0: Port device team_slave_1 removed [ 122.634537][ T6811] EXT4-fs (loop6): get root inode failed [ 122.634614][ T6811] EXT4-fs (loop6): mount failed [ 122.635999][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.659072][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.677852][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.685502][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.814522][ T6834] Cannot find add_set index 0 as target [ 122.879290][ T6845] loop5: detected capacity change from 0 to 128 [ 122.897028][ T6843] loop6: detected capacity change from 0 to 1024 [ 122.935074][ T6843] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 122.968796][ T6843] EXT4-fs error (device loop6): ext4_quota_enable:7126: comm syz.6.1025: inode #2304: comm syz.6.1025: iget: illegal inode # [ 123.048727][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 123.079800][ T6843] EXT4-fs error (device loop6): ext4_quota_enable:7129: comm syz.6.1025: Bad quota inode: 2304, type: 2 [ 123.113258][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1028'. [ 123.122391][ T6843] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 123.156295][ T6843] EXT4-fs (loop6): mount failed [ 123.678333][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 123.678347][ T29] audit: type=1400 audit(1747898246.532:5880): avc: denied { connect } for pid=6861 comm="syz.3.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 123.721550][ T6865] loop4: detected capacity change from 0 to 512 [ 123.737253][ T29] audit: type=1400 audit(1747898246.572:5881): avc: denied { bind } for pid=6861 comm="syz.3.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 123.756966][ T29] audit: type=1400 audit(1747898246.592:5882): avc: denied { ioctl } for pid=6861 comm="syz.3.1034" path="socket:[15308]" dev="sockfs" ino=15308 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 123.782263][ T6865] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.789184][ T6865] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.824663][ T6865] EXT4-fs (loop4): 1 truncate cleaned up [ 123.831018][ T6865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.845889][ T6865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.881232][ T6869] wireguard0: entered promiscuous mode [ 123.887003][ T6869] wireguard0: entered allmulticast mode [ 124.050396][ T6872] loop5: detected capacity change from 0 to 512 [ 124.120082][ T6872] EXT4-fs error (device loop5): __ext4_fill_super:5502: inode #2: comm syz.5.1036: casefold flag without casefold feature [ 124.202485][ T29] audit: type=1400 audit(1747898247.052:5883): avc: denied { name_bind } for pid=6886 comm="syz.3.1043" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 124.228445][ T6887] FAULT_INJECTION: forcing a failure. [ 124.228445][ T6887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.241580][ T6887] CPU: 0 UID: 0 PID: 6887 Comm: syz.3.1043 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 124.241635][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.241652][ T6887] Call Trace: [ 124.241661][ T6887] [ 124.241671][ T6887] __dump_stack+0x1d/0x30 [ 124.241699][ T6887] dump_stack_lvl+0xe8/0x140 [ 124.241727][ T6887] dump_stack+0x15/0x1b [ 124.241743][ T6887] should_fail_ex+0x265/0x280 [ 124.241835][ T6887] should_fail+0xb/0x20 [ 124.241876][ T6887] should_fail_usercopy+0x1a/0x20 [ 124.241917][ T6887] _copy_from_user+0x1c/0xb0 [ 124.241940][ T6887] bpf_test_init+0xdf/0x160 [ 124.241977][ T6887] bpf_prog_test_run_xdp+0x274/0x8f0 [ 124.242039][ T6887] ? kstrtouint+0x76/0xc0 [ 124.242079][ T6887] ? __rcu_read_unlock+0x4f/0x70 [ 124.242143][ T6887] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 124.242245][ T6887] bpf_prog_test_run+0x207/0x390 [ 124.242284][ T6887] __sys_bpf+0x3dc/0x790 [ 124.242373][ T6887] __x64_sys_bpf+0x41/0x50 [ 124.242414][ T6887] x64_sys_call+0x2478/0x2fb0 [ 124.242442][ T6887] do_syscall_64+0xd0/0x1a0 [ 124.242475][ T6887] ? clear_bhb_loop+0x40/0x90 [ 124.242504][ T6887] ? clear_bhb_loop+0x40/0x90 [ 124.242601][ T6887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.242630][ T6887] RIP: 0033:0x7f94f284e969 [ 124.242646][ T6887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.242664][ T6887] RSP: 002b:00007f94f0eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.242756][ T6887] RAX: ffffffffffffffda RBX: 00007f94f2a75fa0 RCX: 00007f94f284e969 [ 124.242773][ T6887] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 124.242790][ T6887] RBP: 00007f94f0eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 124.242804][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.242816][ T6887] R13: 0000000000000000 R14: 00007f94f2a75fa0 R15: 00007ffd3c426f78 [ 124.242846][ T6887] [ 124.518669][ T6872] EXT4-fs (loop5): get root inode failed [ 124.524920][ T6872] EXT4-fs (loop5): mount failed [ 124.591123][ T29] audit: type=1400 audit(1747898247.442:5884): avc: denied { ioctl } for pid=6896 comm="syz.0.1046" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.626364][ T6894] loop4: detected capacity change from 0 to 512 [ 124.696876][ T29] audit: type=1326 audit(1747898247.552:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.0.1046" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f838f59e969 code=0x0 [ 124.738108][ T6894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.750762][ T6894] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.870622][ T29] audit: type=1400 audit(1747898247.722:5886): avc: denied { map_create } for pid=6908 comm="syz.5.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 124.945443][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.957060][ T29] audit: type=1400 audit(1747898247.742:5887): avc: denied { read write } for pid=4723 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.981430][ T29] audit: type=1400 audit(1747898247.742:5888): avc: denied { open } for pid=4723 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.005943][ T29] audit: type=1400 audit(1747898247.742:5889): avc: denied { ioctl } for pid=4723 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.076213][ T6915] SELinux: failed to load policy [ 125.262802][ T6917] Falling back ldisc for ttyS3. [ 125.366596][ T6921] relay: one or more items not logged [item size (56) > sub-buffer size (9)] [ 125.478770][ T6926] loop4: detected capacity change from 0 to 512 [ 125.488125][ T6926] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1055'. [ 125.497186][ T6926] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1055'. [ 125.511986][ T6926] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 125.529088][ T6913] loop6: detected capacity change from 0 to 4096 [ 125.540096][ T6913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.602915][ T4723] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.632396][ T6939] SELinux: failed to load policy [ 125.745505][ T6947] loop0: detected capacity change from 0 to 2048 [ 125.756051][ T6923] loop5: detected capacity change from 0 to 4096 [ 125.769479][ T6947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.786638][ T6923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.856299][ T6938] loop6: detected capacity change from 0 to 512 [ 125.904254][ T6938] EXT4-fs error (device loop6): __ext4_fill_super:5502: inode #2: comm syz.6.1058: casefold flag without casefold feature [ 125.925363][ T6938] EXT4-fs (loop6): get root inode failed [ 125.932255][ T6938] EXT4-fs (loop6): mount failed [ 125.979718][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.102265][ T6955] loop4: detected capacity change from 0 to 8192 [ 126.108885][ T6961] loop5: detected capacity change from 0 to 2048 [ 126.135453][ T6965] loop6: detected capacity change from 0 to 128 [ 126.147426][ T6961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.160134][ T6955] loop4: p4 < > [ 126.192872][ T6968] dummy0 speed is unknown, defaulting to 1000 [ 126.335241][ T6974] __nla_validate_parse: 1 callbacks suppressed [ 126.335278][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1068'. [ 127.272374][ T3460] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 127.284288][ T6991] dummy0 speed is unknown, defaulting to 1000 [ 127.307630][ T3476] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 127.326360][ T3476] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 127.338862][ T3476] EXT4-fs (loop5): This should not happen!! Data will be lost [ 127.338862][ T3476] [ 127.338979][ T3460] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 127.348518][ T3476] EXT4-fs (loop5): Total free blocks count 0 [ 127.348534][ T3476] EXT4-fs (loop5): Free/Dirty block details [ 127.348547][ T3476] EXT4-fs (loop5): free_blocks=2415919504 [ 127.348563][ T3476] EXT4-fs (loop5): dirty_blocks=6304 [ 127.361156][ T3460] EXT4-fs (loop0): This should not happen!! Data will be lost [ 127.361156][ T3460] [ 127.367197][ T3476] EXT4-fs (loop5): Block reservation details [ 127.373155][ T3460] EXT4-fs (loop0): Total free blocks count 0 [ 127.378780][ T3476] EXT4-fs (loop5): i_reserved_data_blocks=394 [ 127.384088][ T3460] EXT4-fs (loop0): Free/Dirty block details [ 127.384104][ T3460] EXT4-fs (loop0): free_blocks=2415919504 [ 127.384120][ T3460] EXT4-fs (loop0): dirty_blocks=16400 [ 127.384135][ T3460] EXT4-fs (loop0): Block reservation details [ 127.384148][ T3460] EXT4-fs (loop0): i_reserved_data_blocks=1025 [ 127.396764][ T6992] loop4: detected capacity change from 0 to 256 [ 127.452832][ T6994] Falling back ldisc for ttyS3. [ 127.471438][ T6992] FAT-fs (loop4): bogus number of FAT sectors [ 127.477667][ T6992] FAT-fs (loop4): Can't find a valid FAT filesystem [ 127.485562][ T3476] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 127.508159][ T3460] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 127.572983][ T7000] Falling back ldisc for ttyS3. [ 127.697150][ T7007] dummy0 speed is unknown, defaulting to 1000 [ 127.765699][ T7020] loop5: detected capacity change from 0 to 256 [ 127.793728][ T7017] dummy0 speed is unknown, defaulting to 1000 [ 127.794414][ T7020] FAT-fs (loop5): bogus number of FAT sectors [ 127.806237][ T7020] FAT-fs (loop5): Can't find a valid FAT filesystem [ 127.813757][ T7022] loop0: detected capacity change from 0 to 512 [ 127.824164][ T7022] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.832884][ T7022] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 127.912051][ T7022] EXT4-fs (loop0): 1 truncate cleaned up [ 127.918501][ T7022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.939994][ T7022] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.990406][ T7028] dummy0 speed is unknown, defaulting to 1000 [ 128.070382][ T7040] bridge0: entered promiscuous mode [ 128.076210][ T7040] macvlan2: entered promiscuous mode [ 128.091467][ T7040] bridge0: port 3(macvlan2) entered blocking state [ 128.098272][ T7040] bridge0: port 3(macvlan2) entered disabled state [ 128.106296][ T7040] macvlan2: entered allmulticast mode [ 128.111772][ T7040] bridge0: entered allmulticast mode [ 128.118158][ T7040] macvlan2: left allmulticast mode [ 128.123346][ T7040] bridge0: left allmulticast mode [ 128.136229][ T7047] FAULT_INJECTION: forcing a failure. [ 128.136229][ T7047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.137044][ T7040] bridge0: left promiscuous mode [ 128.149539][ T7047] CPU: 1 UID: 0 PID: 7047 Comm: syz.0.1094 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 128.149580][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.149597][ T7047] Call Trace: [ 128.149607][ T7047] [ 128.149619][ T7047] __dump_stack+0x1d/0x30 [ 128.149696][ T7047] dump_stack_lvl+0xe8/0x140 [ 128.149724][ T7047] dump_stack+0x15/0x1b [ 128.149746][ T7047] should_fail_ex+0x265/0x280 [ 128.149795][ T7047] should_fail+0xb/0x20 [ 128.149842][ T7047] should_fail_usercopy+0x1a/0x20 [ 128.149870][ T7047] strncpy_from_user+0x25/0x230 [ 128.149982][ T7047] ? kmem_cache_alloc_noprof+0x186/0x310 [ 128.150017][ T7047] ? getname_flags+0x80/0x3b0 [ 128.150063][ T7047] getname_flags+0xae/0x3b0 [ 128.150141][ T7047] user_path_at+0x28/0x130 [ 128.150171][ T7047] do_faccessat+0x380/0x800 [ 128.150248][ T7047] __x64_sys_faccessat2+0x51/0x60 [ 128.150293][ T7047] x64_sys_call+0x2e69/0x2fb0 [ 128.150323][ T7047] do_syscall_64+0xd0/0x1a0 [ 128.150356][ T7047] ? clear_bhb_loop+0x40/0x90 [ 128.150386][ T7047] ? clear_bhb_loop+0x40/0x90 [ 128.150450][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.150478][ T7047] RIP: 0033:0x7f838f59e969 [ 128.150499][ T7047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.150526][ T7047] RSP: 002b:00007f838dc07038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 128.150607][ T7047] RAX: ffffffffffffffda RBX: 00007f838f7c5fa0 RCX: 00007f838f59e969 [ 128.150625][ T7047] RDX: 0000000000000003 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 128.150641][ T7047] RBP: 00007f838dc07090 R08: 0000000000000000 R09: 0000000000000000 [ 128.150658][ T7047] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 128.150675][ T7047] R13: 0000000000000000 R14: 00007f838f7c5fa0 R15: 00007ffe166e08a8 [ 128.150704][ T7047] [ 128.273392][ T7056] loop0: detected capacity change from 0 to 2048 [ 128.377009][ T7056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.533569][ T7055] dummy0 speed is unknown, defaulting to 1000 [ 128.616730][ T7062] loop6: detected capacity change from 0 to 512 [ 128.707063][ T7062] EXT4-fs error (device loop6): __ext4_fill_super:5502: inode #2: comm syz.6.1097: casefold flag without casefold feature [ 128.725888][ T7062] EXT4-fs (loop6): get root inode failed [ 128.732470][ T7062] EXT4-fs (loop6): mount failed [ 128.751207][ T29] kauditd_printk_skb: 583 callbacks suppressed [ 128.751226][ T29] audit: type=1400 audit(1747898251.602:6473): avc: denied { create } for pid=7070 comm="syz.3.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.793971][ T29] audit: type=1400 audit(1747898251.602:6474): avc: denied { ioctl } for pid=7070 comm="syz.3.1099" path="socket:[16786]" dev="sockfs" ino=16786 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.858015][ T7074] loop5: detected capacity change from 0 to 512 [ 128.872153][ T7074] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 128.940765][ T29] audit: type=1400 audit(1747898251.792:6475): avc: denied { create } for pid=7076 comm="syz.4.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.960642][ T29] audit: type=1400 audit(1747898251.792:6476): avc: denied { connect } for pid=7076 comm="syz.4.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 129.021127][ T7074] EXT4-fs (loop5): 1 truncate cleaned up [ 129.094652][ T7074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.121185][ T29] audit: type=1400 audit(1747898251.972:6477): avc: denied { read write } for pid=7073 comm="syz.5.1100" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.156468][ T29] audit: type=1400 audit(1747898251.972:6478): avc: denied { open } for pid=7073 comm="syz.5.1100" path="/173/bus/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.179761][ T29] audit: type=1400 audit(1747898252.012:6479): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 129.230376][ T29] audit: type=1400 audit(1747898252.082:6480): avc: denied { create } for pid=7073 comm="syz.5.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.257180][ T3476] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 129.276991][ T3476] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 129.289489][ T3476] EXT4-fs (loop0): This should not happen!! Data will be lost [ 129.289489][ T3476] [ 129.299274][ T3476] EXT4-fs (loop0): Total free blocks count 0 [ 129.305307][ T3476] EXT4-fs (loop0): Free/Dirty block details [ 129.311260][ T3476] EXT4-fs (loop0): free_blocks=2415919504 [ 129.317054][ T3476] EXT4-fs (loop0): dirty_blocks=14992 [ 129.322505][ T3476] EXT4-fs (loop0): Block reservation details [ 129.323862][ T29] audit: type=1400 audit(1747898252.122:6481): avc: denied { write } for pid=7073 comm="syz.5.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.328515][ T3476] EXT4-fs (loop0): i_reserved_data_blocks=937 [ 129.401345][ T3476] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 129.445003][ T7084] loop4: detected capacity change from 0 to 512 [ 129.485577][ T7100] ================================================================== [ 129.493732][ T7100] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_clear_mark [ 129.502204][ T7100] [ 129.504548][ T7100] write to 0xffff88810bb198d4 of 4 bytes by task 7094 on cpu 0: [ 129.512195][ T7100] xas_clear_mark+0x16b/0x180 [ 129.516915][ T7100] __folio_start_writeback+0x2ce/0x430 [ 129.522405][ T7100] ext4_bio_write_folio+0x590/0x9d0 [ 129.527648][ T7100] mpage_process_page_bufs+0x46c/0x5b0 [ 129.533132][ T7100] mpage_prepare_extent_to_map+0x775/0xb80 [ 129.538988][ T7100] ext4_do_writepages+0x6eb/0x2270 [ 129.544150][ T7100] ext4_writepages+0x176/0x300 [ 129.549026][ T7100] do_writepages+0x1d2/0x480 [ 129.553643][ T7100] file_write_and_wait_range+0x156/0x2c0 [ 129.559301][ T7100] generic_buffers_fsync_noflush+0x45/0x120 [ 129.565231][ T7100] ext4_sync_file+0x1ab/0x690 [ 129.569946][ T7100] vfs_fsync_range+0x10a/0x130 [ 129.574742][ T7100] ext4_buffered_write_iter+0x34f/0x3c0 [ 129.580330][ T7100] ext4_file_write_iter+0x383/0xf00 [ 129.585566][ T7100] iter_file_splice_write+0x5ef/0x970 [ 129.590979][ T7100] direct_splice_actor+0x153/0x2a0 [ 129.596121][ T7100] splice_direct_to_actor+0x30f/0x680 [ 129.601777][ T7100] do_splice_direct+0xda/0x150 [ 129.606566][ T7100] do_sendfile+0x380/0x640 [ 129.611006][ T7100] __x64_sys_sendfile64+0x105/0x150 [ 129.616255][ T7100] x64_sys_call+0xb39/0x2fb0 [ 129.620958][ T7100] do_syscall_64+0xd0/0x1a0 [ 129.625501][ T7100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.631430][ T7100] [ 129.633779][ T7100] read to 0xffff88810bb198d4 of 4 bytes by task 7100 on cpu 1: [ 129.641342][ T7100] filemap_write_and_wait_range+0xfc/0x340 [ 129.647354][ T7100] kiocb_write_and_wait+0x7a/0x110 [ 129.652513][ T7100] __iomap_dio_rw+0x52f/0x1250 [ 129.657313][ T7100] iomap_dio_rw+0x40/0x90 [ 129.661684][ T7100] ext4_file_read_iter+0x20f/0x290 [ 129.666842][ T7100] copy_splice_read+0x3c4/0x5f0 [ 129.671732][ T7100] splice_direct_to_actor+0x290/0x680 [ 129.677151][ T7100] do_splice_direct+0xda/0x150 [ 129.681947][ T7100] do_sendfile+0x380/0x640 [ 129.686476][ T7100] __x64_sys_sendfile64+0x105/0x150 [ 129.691719][ T7100] x64_sys_call+0xb39/0x2fb0 [ 129.696345][ T7100] do_syscall_64+0xd0/0x1a0 [ 129.700897][ T7100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.706817][ T7100] [ 129.709160][ T7100] value changed: 0x0e000021 -> 0x04000021 [ 129.714903][ T7100] [ 129.717242][ T7100] Reported by Kernel Concurrency Sanitizer on: [ 129.723431][ T7100] CPU: 1 UID: 0 PID: 7100 Comm: syz.5.1100 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 129.735892][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.745976][ T7100] ================================================================== [ 129.764309][ T7084] EXT4-fs error (device loop4): __ext4_fill_super:5502: inode #2: comm syz.4.1104: casefold flag without casefold feature [ 129.806557][ T7084] EXT4-fs (loop4): get root inode failed [ 129.813636][ T7084] EXT4-fs (loop4): mount failed [ 129.875119][ T7074] dummy0 speed is unknown, defaulting to 1000 [ 130.025591][ T7104] dummy0 speed is unknown, defaulting to 1000 [ 130.068751][ T29] audit: type=1400 audit(1747898252.922:6482): avc: denied { bind } for pid=7105 comm="syz.0.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.072954][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1104'. [ 130.733528][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.