Extracting prog: 4m18.483888365s Minimizing prog: 1h38m30.151168991s Simplifying prog options: 0s Extracting C: 1m41.476851514s Simplifying C: 12m28.407070414s extracting reproducer from 67 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-openat$cgroup_ro-write$uinput_user_dev-write$uinput_user_dev-mmap-bpf$MAP_UPDATE_ELEM_TAIL_CALL-fsopen-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-syz_create_resource$binfmt-syz_create_resource$binfmt-execveat$binfmt-bpf$BPF_MAP_GET_FD_BY_ID-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) (async) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (async) r15 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r15, 0x6, 0x0, 0x0, 0x0) r16 = fsmount(r15, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r16, &(0x7f0000000140)='./file0\x00') syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') (async) r17 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') execveat$binfmt(r16, r17, 0x0, 0x0, 0x0) r18 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0xffffffff, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, r14, r16, r18], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine single: failed to extract reproducer bisect: bisecting 67 programs with base timeout 30s testing program (duration=46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 20, 18, 14, 27, 17, 15, 15, 14, 30, 21, 15, 18, 29, 29, 30, 12, 14, 20, 10, 6, 6, 25, 17, 30, 30, 29, 8, 8, 27, 34, 10, 30, 30, 40, 28, 22, 5, 15, 15, 9, 11, 11, 3, 6, 30, 30, 30, 20, 33, 5, 2, 14, 29, 11, 15, 6, 17, 21, 30, 20, 4, 3, 22, 20, 17, 40] detailed listing: executing program 32: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x305880, 0x0) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000440)=""/232, 0xe8}], 0x1) lseek(r1, 0x3, 0x0) dup2(r0, r0) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="200001", @ANYRES32=0x0, @ANYBLOB="08ed"], 0x38}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1000000, 0x18000) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x16, 0x13, 0xf5, 0x0, 0x4, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff03000000000000000000008500000011"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x7}, 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r8, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x43}}}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x32}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x30}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000180)=0xe3b) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="1c0600002c000100fefffffffcdbdf250a06f28015040980102feac198785ba6069a2315b12bcdb555b23ad272136fb0f1b7bf24cbe2475d7e47b567c67e8206764a2b7fe8d24e4511a1217be4d745bf52250ee015697e166f9bfebf6900fe8004007a800cba6006f4bd1742669cffea9c468a302339fdc6e5ebe982f01fca95e5130a030de38ba88c22cabbd5ab444781be3b9ef7354e6110f279d89ed928c3ec7262d99c6ec4b5fed9e3241d1af742772004a1890d48e1d8e17bafdc7dd83637453605ba00000004006880b10135800800d900e000000218d1cc04e027df777f58d2b9f290fc4953808ad1be9a3080380daea68df269cfe7a69abf3f6dbca0e1e6e0947652cb00ef9b36d61ff4dcc0a673b81067bf67a9dbeff194a587f348b7200a4f84de5d77161702671bcce59db97c0118cfedf73d3242c9e3e9d4875ff2cb61d745394c5848687da93ed4ca2f480ee3fa9bba6fb95453dcd7ed493536c78bf3aed5e605bcf9ced64c1b1130709d383b65f5383053b1243545f1b559e953f71148cc701d66b22ae26ae98187095816191cd93789b69ce6398095113d3363efb9683805d0b47c5c34140800be00", @ANYBLOB="e485d51e3abe24814de174ab0bd44aa330fbd2fc661b3892d16a97caf98bec92657fa034a6e72b9c1a74b3b2b2d4f8ad76b8bc736d3ba6d0f9f392989189e09ff04ec604f3328ca1e98f09fa3607bb0f11616d05f5bc9ade18910f9c8d4cf6aa2074fc94148e45eded63417c87682bb84fa618b2c3d87e74781a", @ANYBLOB="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", @ANYRESHEX=r4, @ANYRESHEX=r9, @ANYRES32=r7, @ANYBLOB="00f400080001"], 0x61c}], 0x1, 0x0, 0x0, 0x1}, 0x4002000) executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) unshare(0x62040200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be"], 0xfdef) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010428bd7000"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e9f, 0x2, @loopback, 0x7}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r4], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) executing program 2: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x181200, 0x0) (async) r3 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x0) mkdirat(r4, &(0x7f0000000080)='./file0\x00', 0x108) (async) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'net'}, {0xa3bae125f7592b3c, 'rlimit'}, {0x2d, 'pids'}, {0x2d, 'cpu'}, {0x2b, 'net_prio'}, {0x2b, 'blkio'}]}, 0x29) mount$9p_virtio(&(0x7f0000000100), &(0x7f00000000c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=virtio,', {[{@uname={'uname', 0x3d, 'bridge0\x00'}}]}}) (async) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002540)={0x2020}, 0x2020) (async) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f0000000400)="71b2e147c94f1633df7eb149d5e63c5b2b93882d6de476354dbae33d32fcabb6b1484627ece190d28335e1485921c9a8c1798d404a736016c45a135e54bda565f21a32b215150a8257ce8b3ddbdb1c10a4ea3284c16eb3a72f514f440a5db63045c172d12846d4482c783d501ae270ad2903ab578f14aec941ad74a6423ae44dcca169da19aed70627b6f8b540cd3a5f2192d9e29530decc2bd53a13be43ab1c10bb276f80927e727af4c4dfad8882e3f7cc4a06d7b641dee9644e654441f938b75e8a5f08c5383a8152c2d0ff3cfbb6945d3e41784fafa7b2d5e1423d26b1", 0xdf}, {&(0x7f0000004580)="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", 0x1000}, {&(0x7f0000005580)="049928cdede924816d25f6792c4bd6d8e83dc2d2c906cd3a9390ee757b3541360694ee5ba6b872298b1c42b70730619bcac7c0bcd82f8e2966f060705b9c6fc6916be144e4036b00be34d0c0113886ff4c92e930ea20027a41fa520f1518d535734135e7cbdc964d68a292", 0x6b}, {&(0x7f0000005600)="169168e7517408a859b7b828b5e13d5824a67c50a8795040ccb2285541ac8fc1aa63fc2d0343f13bf4f9561678d6290af811a5f9c3c20df36e73abc75884d947433808a992dea2d5df1ad698a0a28ab2f6bdb049abfadd78a79e664ac3cc584a4b5f96fa11a0cdf127eb36cc02c7aacf168ec5ec77828a38637793fabfb295c12300a8bea5616b3d7bd4f9f38923797997e926781cbfcd308c01e08e72e03c6fcf226d6fe02269b4d0c0a9b77af679a031cc86f7cd90f0c41b0148f3e7f1a272bb495f7e64e271d42d63098abca475f0df9d240039", 0xd5}, {&(0x7f0000000300)}], 0x6, 0x0, 0x0, 0xc3ff}, 0x80) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) (async) open(&(0x7f00000000c0)='.\x00', 0x517002, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket(0x6, 0x2, 0x1002) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) (async) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x1}, 0x1c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000280)=0xf9e) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r4 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000100), 0x80801, 0x0) sendfile(r4, r4, 0x0, 0x402) executing program 2: socket$kcm(0xa, 0x3, 0x87) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) (async) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000027c00000400f6000c000180060006008035"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007c9"], 0x0, 0x52, 0x0, 0x1}, 0x28) (async) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x125a03, 0x0) close(r6) executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket(0x1, 0x803, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) read$FUSE(r1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xfffb, 0xffff, 0x8, 0x4}}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="60001707503ce3c26d23000004450996e9bb3d530d000000000075c9946fc67351b1821ab835d0faf2faef716de326b66d33046edc36be69d2010e5e6ced15048bd47988c38630f3b5d2dd0a3b62a41cb0ac145b075bbd78804031f9e98bb225c1247adfc150f33de142d37482969c7c46dc92fdb66df69381df3e109edeee49f0492e40836c60d76f788f93bdd50b3d448c246042", @ANYRES64=r2, @ANYRES8=r0], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9d) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f00000000c0)=0xfff7bdff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a0104000000000000000000000000080014"], 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000ed0f000304000300"/20, @ANYRES8=r1, @ANYBLOB="00000000088a0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4064825}, 0x8000) executing program 33: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket(0x1, 0x803, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) read$FUSE(r1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xfffb, 0xffff, 0x8, 0x4}}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="60001707503ce3c26d23000004450996e9bb3d530d000000000075c9946fc67351b1821ab835d0faf2faef716de326b66d33046edc36be69d2010e5e6ced15048bd47988c38630f3b5d2dd0a3b62a41cb0ac145b075bbd78804031f9e98bb225c1247adfc150f33de142d37482969c7c46dc92fdb66df69381df3e109edeee49f0492e40836c60d76f788f93bdd50b3d448c246042", @ANYRES64=r2, @ANYRES8=r0], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9d) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f00000000c0)=0xfff7bdff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a0104000000000000000000000000080014"], 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000ed0f000304000300"/20, @ANYRES8=r1, @ANYBLOB="00000000088a0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4064825}, 0x8000) executing program 1: r0 = syz_usbip_server_init(0x1) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000280)={0x6, 0x0, '\x00', {0x0, @reserved}}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000100)={r0, &(0x7f0000000000)='+-%\x00', 0x80001, &(0x7f0000000040)={@_ha_fsid={[0x4, 0x5]}, {0x2, 0x7, 0x8, 0x8000000000000000}}, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x1}) splice(r5, &(0x7f0000000140)=0x9, r0, &(0x7f0000000180)=0x1, 0x10b, 0x1) write$usbip_server(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02010000", @ANYRESHEX=r0, @ANYBLOB, @ANYRES16=r0], 0xff2f) executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x2, 0xfe, {0x0, 0x37, 0x2, 0x10, 0x2, 0x64, 0x0, 0xf7}}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000844000001"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000020008185a9bd70000300000002000000000000031b000000080017004e204e21"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) close(0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000100000000000000000207000005"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000000) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = memfd_secret(0x80000) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22ffe4) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$poke(0x5, r7, &(0x7f0000000200), 0x0) r8 = gettid() r9 = getpid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r11) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000011000000040000000200000000000000", @ANYRES32=r11, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000130303d900"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r12}, &(0x7f0000000040), &(0x7f0000000140)=r11}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="184a00"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x14, '\x00', r10, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[r2, r2, r1, r1, r12], &(0x7f0000000380)=[{0x5, 0x2, 0xf, 0x8}], 0x10, 0x2}, 0x94) rt_tgsigqueueinfo(r9, r8, 0x1f, &(0x7f0000000080)={0x1000d, 0x23, 0x2}) executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x27, 0x1, 0xfffffffe) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3) r5 = fanotify_init(0x0, 0x80000) fanotify_mark(r5, 0x60e, 0x48000030, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x10000) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2ac5ad70e16cf9ab}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x40041) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket(0x23, 0x80805, 0x0) listen(r7, 0x0) accept$unix(r7, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, 0x0) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000440)={0x0, 0x3, 0x8, 0x100007f, 0x12, "bbb40b347996fc9be9ede69ac6de50806c0008"}) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c63616368653d72656164616865a552ae35"]) executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x8000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000002c0)=[{0x800000000}, {0x1000000002, 0x6, 0x7}], 0x2, 0xbff, 0x1e, 0x0, 0xc, 0x21}) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800451f0058006700008411"], 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x3a, 0x80002c, 0x1, 0xe, 0x2003, 0x3, 0x1, 0xfb, 0x1}) executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) ppoll(&(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) executing program 1: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) listen(r3, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) fstat(0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(r4, 0x0, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='squashfs\x00', 0x218483, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f00009cc000/0x4000)=nil, 0x4000, 0x2, 0x100010, r1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000002850000008600000018110000", @ANYRES32=r7, @ANYRES8=r6], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) mount$afs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xa00804, &(0x7f0000000000)=ANY=[@ANYBLOB="666c6f636b3d6f70656e6166732c003c058be23b579c481a48e29e1031c7d05ab397bdcd9910a83b5154253ab73a37ff08619027355b50a9a388cdd9252e6d8237b033430c19805fc538e3b59d9029cd009de779c051c7790339cb802660e0a44ff3d0f3d8c688566f577fcf6c9b131893148abeb4dc9dba1e"]) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) executing program 34: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) listen(r3, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) fstat(0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(r4, 0x0, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='squashfs\x00', 0x218483, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f00009cc000/0x4000)=nil, 0x4000, 0x2, 0x100010, r1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000002850000008600000018110000", @ANYRES32=r7, @ANYRES8=r6], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) mount$afs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xa00804, &(0x7f0000000000)=ANY=[@ANYBLOB="666c6f636b3d6f70656e6166732c003c058be23b579c481a48e29e1031c7d05ab397bdcd9910a83b5154253ab73a37ff08619027355b50a9a388cdd9252e6d8237b033430c19805fc538e3b59d9029cd009de779c051c7790339cb802660e0a44ff3d0f3d8c688566f577fcf6c9b131893148abeb4dc9dba1e"]) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003a00290200a00000fadbdf2502"], 0x14}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)={0x40, r5, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9ee}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0xffff}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40008}, 0x20044804) r7 = dup2(r0, r0) r8 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r8, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) recvmmsg(r8, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f00000001c0)={0x0, r8, 0x7, 0x100000000, 0x4}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r11, 0x5396, &(0x7f00000000c0)={0x3ff}) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0xa37f0f0492d077cf, 0x0, 0x0, {0x2, 0x80, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000500}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4014) executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x14b041, 0x2) r1 = open(&(0x7f0000000140)='./file0\x00', 0x20800, 0x718bb647156ec3b7) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x101002, 0x40) r3 = openat(r2, &(0x7f0000000340)='./file2\x00', 0x0, 0x0) flock(r3, 0x5) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000100000001dcdf250100000008000100", @ANYRES32=r6, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400049b08000600", @ANYRES32=r4], 0x5c}, 0x1, 0x400000000000000}, 0x40810) executing program 6: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r0, &(0x7f0000006800)="10", 0x1) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@float={0xb, 0x0, 0x0, 0x10, 0x10}, @var={0x2, 0x0, 0x0, 0xe, 0x2}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x4}]}]}, {0x0, [0x30, 0x2e, 0x2e, 0x2e, 0xcf]}}, &(0x7f00000005c0)=""/117, 0x4f, 0x75, 0x0, 0x5, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000009a0e000000000000ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186a000002000000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000185600000a00000000000000000000005025800000000000180020000100010000000000da530000182b0000c03a08b33db48530ab28288b4ee25f5ded3a69ff74ffa1f67484e7f6c693634b76db43d901ca3c30a4154c8e1164d02d42c8ae9602af2cdaf186f1a178945c2594cadb494246c6630aae5e8996c5f08012ef48d2d6", @ANYRES32=r2, @ANYBLOB="00000000ae000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x81, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000680)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x3, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000740)=[{0x0, 0x1, 0x1, 0x2}, {0x5, 0x4, 0x1, 0x2}, {0x1, 0x3, 0x8, 0x8}, {0x4, 0x4, 0x2, 0x8}, {0x5, 0x4, 0x9, 0x5362a4a45a330a35}], 0x10, 0x7}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) executing program 6: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e949e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x28a5291, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xee61}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000010}, 0x14) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r4, 0x8100587e, &(0x7f0000000340)) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1401000023000100000000000400feff010100800c000100020000000000000014000c"], 0x114}], 0x1}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xd}, &(0x7f0000000140)=0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e24, @rand_addr=0x64010102}, 0x3, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)='dummy0\x00', 0x0, 0x6, 0x1}) executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001800010000000000000000000a80000000030008000000001400070000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xdd) keyctl$set_timeout(0xf, r2, 0x80000001) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20010000100007000000000000000000ff020000000000000000000000000001e00000010000000000000000000000004e200000000000000000000029000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000032b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000fbffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000020000000000000000000400fdffffffe80a000000000000000000000200020034000000000000000c0015005a073500070000002400090005000000000000000100000000000080b4000000000000000500000000000000"], 0x120}}, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@mcast2, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0xa0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x0, 0x0, 0x60000}, {0x0, 0x200000, 0xa, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) executing program 6: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) (async) r0 = io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x24c8a1, 0x1000, 0x8, 0xd1}) (async) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x4000, &(0x7f0000000180)='\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) executing program 35: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) (async) r0 = io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x24c8a1, 0x1000, 0x8, 0xd1}) (async) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x4000, &(0x7f0000000180)='\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x100000001, 0x40022000003}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f00000000c0)=0x1, 0x1c, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x10000000000000, r4}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000140)={0x54000, 0x100000}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = open$dir(&(0x7f0000000040)='./file0\x00', 0x80, 0x80) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x3, &(0x7f0000000340)=0x0) io_submit(r11, 0x1, &(0x7f0000000a00)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, r10, &(0x7f0000000380)="06497c803872fa4674b8b246d8a47b1c3ad26e707fe06047e134cd091f5578900ed12e9d66a18fbb15da63783a4229231c7519308a1ffba50da612640632c1802f0e5f2f81281ea9", 0x48, 0x6fe9}]) munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r13, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r12, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) io_cancel(r11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r9, &(0x7f0000000240)="1eb6eea3bb1140ae0563f52eaff6a5ce4fb55305a857896d4127711301c44ed351ecfebc0726c0b2cb2d423f108ae91560a71909bb50f1b505", 0x39, 0x1, 0x0, 0x1}, &(0x7f00000002c0)) close_range(r8, r9, 0x0) executing program 7: r0 = userfaultfd(0x80801) syz_emit_ethernet(0x76, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x9, 0x6, '\x00', 0x8000, 0x0, 0x0, @empty, @private2, [@hopopts={0x89}], "98efd03a7e60b623"}}}}}}}, 0x0) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@mpol={'mpol', 0x3d, {'prefer'}}}]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x8000) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000130001010000000000009e5a07000000", @ANYRES32=r4, @ANYBLOB="18040100000000000c001a800800058004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) executing program 7: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000007c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x400c0d4) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x4000, 0x1e8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="58295dea", 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_flash={0x33, 0x3, './file0/../file0/file0\x00'}}) r7 = socket(0x18, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x2, 0xff, 0x1, 0x2}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x90}) ioctl(r8, 0x8b32, &(0x7f0000000040)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') r10 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000740)=ANY=[@ANYRESOCT=r4, @ANYRES16], 0x0) syz_usb_control_io$rtl8150(r10, 0x0, 0x0) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) read$FUSE(r11, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r11, 0x40015b19, &(0x7f0000000340)={0x2, 0x2, 0x80000001, 0x100080ff, 0x8009, 0x2}) readv(r12, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1) preadv(r9, &(0x7f0000000700)=[{&(0x7f0000000640)=""/160, 0xa0}], 0x5a, 0xf8, 0x9) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r0, 0x4, r0}, 0x10) executing program 7: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x42, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x8d1, &(0x7f0000000080)={0xa, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) listen(r0, 0x1) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) r3 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0x3000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x300}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000059000/0x4000)=nil, 0x4000}}) syz_clone(0x40080020, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050029bd7000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="08000500060000000a00e800080211000000000055e226614a3fada188b437a9d88d9b4aa0782d2b1a2492c29b8b1a588953467dfff9d1fdfe72a65020d986b7335c01e12c5a4ad8af818dfb64e510d26b85e07c076a7e98ac0ae368b8372d815dfd60e0e4afc3ca564b2bc28f8facacf8c89e911231530779dc104a84290945e937e071339de151bddc02fc66c1cdc88533f2422bec8631882b18a47c85874c"], 0x30}, 0x1, 0x0, 0x0, 0x200008d5}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, r8, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1a}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x583}]}, 0x30}}, 0x8010) mount$9p_unix(&(0x7f0000000180)='./control\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x800000, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d75cd91782c7065726d69745f646972656374696f2c666f776e65723e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) rmdir(&(0x7f0000000280)='./control\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff07"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffffffff, 0xdb7, 0x8, 0x7, 0x9}, 0xd, 0xeb, [{0x3, 0xc, 0x88, 0xfffffffa, 0x9, 0x40}]}, [{0x2, 0x8, 0xfff, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51b, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0xa3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10000, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x2, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x81a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x1}, {0x600000, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0xa4, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0x8, 0x8, 0x7, 0x3, 0x4000}, {0x401, 0x81, 0x8, 0x6, 0xffff, 0x59}, {0x1, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0xc, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7fff, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7f, 0x6, 0x1, 0x7fff}, {0x188, 0x2, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0x80f469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x7, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x4, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0x2a, 0x63a8, 0x6, 0x288a6aae, 0x1}, {0xc52, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0x9, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1816, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x5, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x8, 0xf9, 0x877, 0x7c}, {0xd732, 0x6, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffffffff, 0x80000001, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x8, 0x6, 0x9, 0xfffffff8, 0x3}, {0x6, 0xa5cb, 0x100, 0x9, 0x400, 0x7}, {0xfffffffa, 0x4, 0x6, 0x4756, 0x4002b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xd9b, 0x4, 0x9, 0x9}, {0xff, 0x8, 0x2, 0x0, 0x930, 0xc3c}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x1ff, 0x5, 0x7, 0x6, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x7}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x3}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0xfb5, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0x7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x3, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x8000, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x7fff, 0x3}, {0xbd9, 0x6, 0xb, 0xfffffffc, 0x0, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x8}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0xb, 0x9, 0x101, 0xb99, 0x2e7, 0x8}, {0x3, 0x8001, 0x10001, 0x6, 0x54f7, 0x6}, {0x1, 0x5, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x6}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x7, 0x3}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0x585, 0x4, 0x2}, {0x9, 0x200, 0x1, 0x8702, 0xffff8a6e, 0x9}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x5}, {0xe, 0x6, 0x0, 0x9, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x7}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x100, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x3, 0x7}, {0xa, 0x9, 0x100, 0x4, 0x5, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x6, 0x5}, {0x6, 0xfffffff7, 0x6, 0xef, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbb, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x5, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x4, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x4, 0x9d2}, {0x4, 0x0, 0x17c, 0x3ff, 0xfffffffc, 0xff}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x6, 0xffd9}, {0x7ff, 0x7ff, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x9, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffff, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x3, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x7}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) r13 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1[\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\x00\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0\xber\xa6\xec\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\x13]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xcd\xf0\xad\x97uh\xb2\xb8\x17S~R\x19\xa9\xc3x\xb8l\xed\xbdz#6\x9f\x94\xba[xC\xed\x12}f\x0f\xc5', 0x3) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x1}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4d0}]}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x4002, @local, 0x6}, 0x1c) executing program 7: getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0) executing program 36: getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xffffffff}, 0x10}, 0x94) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x199482) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x505e8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xfffffffa}]}, 0x3c}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xfcff}, {}, {0xc, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x4bfb, &(0x7f00000010c0)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000080)={0x51, 0x1, 0x0, "d0206704b4f84e565c6f0f30bd9ca8ac00"}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r10}, 0x10, &(0x7f00000005c0)={&(0x7f0000000240)=@canfd={{0x2, 0x1}, 0x30, 0x2, 0x0, 0x0, "03d008ced46b0ef2e45c84cbf6fdefd67051bf01c01c72841ae286f513f346036079ee288044b6865ee41936b3f27a566c89d00131f3e2f2a0dff832b79a13c7"}, 0x48}}, 0x4000000) write(r7, &(0x7f0000000000)="2e000300010000", 0x7) socket(0x840000000002, 0x3, 0xff) close(0x3) executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12", 0x8}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000001d14"], 0x10}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) write$P9_RSTATu(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x230) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x4005}) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000a22000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) read$msr(r4, &(0x7f0000000180)=""/43, 0x2b) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300)) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12", 0x8}], 0x1}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000001d14"], 0x10}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) (async) write$P9_RSTATu(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x230) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x4005}) (async) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) madvise(&(0x7f0000a22000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (async) read$msr(r4, &(0x7f0000000180)=""/43, 0x2b) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) executing program 8: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) (async) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000004bfe090004000000"], 0x44}}, 0x4004810) unshare(0x8000000) r2 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_icreq_pdu(r2, &(0x7f00000001c0)={{0x0, 0x7, 0x80, 0x80}, 0x0, 0x0, 0x2, 0x2}, 0xffffffffffffff7e, 0x0, 0x0, 0x0) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x1000, 0x1800}], 0x1, 0x0) unshare(0x2c040000) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)) ioprio_set$uid(0x3, 0x0, 0x2007) unshare(0x2040400) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x4) r4 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x400000000, 0x444801) ioctl$SNDRV_PCM_IOCTL_RESUME(r7, 0x4147, 0x0) readv(r6, &(0x7f00000012c0)=[{&(0x7f0000002c40)=""/4081, 0xff1}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0x20, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x4048840) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xc8902, 0x0) write$binfmt_misc(r8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012b27c0000000000006467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$binfmt_misc(r5, &(0x7f0000000380)="937b3a2d9c746228cfcf3a6e76c3e5e2d41c580c39916f247e6beee68db50d833bd65b34744b1e58e34c84cb76b1b8c8645fae7987543fdef685a13854114604b4cb841f37c4750083982e6d571a2bcb64e5fa1980249a6e6854993866676b7cf62e4ac3cc8c9913eeb7615c21412fa77a94c1438f3900383b0fc9900672fcd2d7bf1fa5ee302c3ff96ac0f1bb8a4c5247daf15811a79cba8418490548a425282087f9063a76afa73601105b9e101cf561c162643993135a6025b2a7c2ebd87a30b7181c82c1de03b96de39b", 0xcc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) executing program 8: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) (async) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x7fffffff, 0x25e8b50810e9476b) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r5, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000004140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x2d, 0x4}}, 0x50) syz_fuse_handle_req(r8, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c7132fd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116b489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664020000001b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e3933e879144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x8, {0x4, 0x1, 0x8000000000, 0x9, 0xebd, 0x0, {0x5, 0x0, 0x4, 0x0, 0x20000, 0x20000, 0x3, 0x0, 0x0, 0x4000, 0x0, r10, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r12 = syz_clone(0x10000, &(0x7f0000000880)="3f220ae57ac62540d657f204c076b77d3cae8d01838d282e783bb633774c", 0x1e, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="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") (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001940)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000001a40)=0xe8) (async) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r14, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r14, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r14, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x7, 0x7, 0xfffffffe, 0x122, 0x6000, 0x10000, 0x0, r15, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getpgid(0xffffffffffffffff) (async) stat(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000001c80)={&(0x7f0000000040), 0xc, &(0x7f00000005c0)=[{&(0x7f0000000080)={0xa4, 0x24, 0x20, 0x70bd25, 0x25dfdbfe, "", [@generic="606c5f881338c06f594ff0c7fdd16ec8e76499f783632f75a6b24a2bef4071129dc90720570e1412a4675bed3590d054951bb1c3d95a01be6a66926f39be27ed4735310bfd9a9e6bb6403cffb01b912f5bf3ce1c59c542b37faf70cdb8d6fd3fb2a8ecd0b2372c983351eaa889d82c12531c68bd6fffb28895e86659f61613422e419d11289de4ea0395", @typed={0x8, 0x155, 0x0, 0x0, @uid=r13}]}, 0xa4}, {&(0x7f0000000140)={0x98, 0x17, 0x100, 0x70bd29, 0x25dfdbfc, "", [@nested={0x8, 0xfc, 0x0, 0x1, [@nested={0x4, 0xc4}]}, @generic="356e3afdc99835c82e0da54454a69348811dc283f7552ee02064d2b79adf27b12728ea8ee216c5e1aa2c88b35addb8cfdfc6c7dee77ea38b36fe9024b214efd9755bd54fc9847641f8ba955aa2e56e1493be45be7e2cfe7cdd487ec968e6c6df34ff48aff484ceed51b58305ae7eba8c83d9115556a24fc43642bdcd0bf7fd"]}, 0x98}, {&(0x7f0000001cc0)={0x204, 0x25, 0x47b95c7ab8ea2b82, 0x70bd26, 0x25dfdbfb, "", [@generic="e7604186d78b48d1b9a7b5dc97bf5671f3bf00175df94985e57c06db415b3e9ee1b4b9792684c314fbab5e1a446b1f47c071a29950e68c6f7e9d6acec5a00ee38f58eb3f58358d783fc9fb9238b986c789c5cb9427f2caeeeee3e0dd40d00fb952159ca9edd7821714528dbe46bce33ab137af8c9ff281ab36f86e33fba728d918101f5be808aa0cb475544ad81d65883c3ac61a08df825af0509570d284ddf361182c9241db0d2e1fb5db6b867d3576048b9746480b25c03082afe44732832a3bbc6b7245e8aced1684d4d6c75dcf2bd89998", @nested={0x120, 0x131, 0x0, 0x1, [@generic="c35e675f25b160f383b5d383f4884e97ae1d561e30bd77104c615955031343211611f5938ccfb4a1125b386f04bb764cb96ff33e6e55997cf3a4bfee3885302cda0735cc1902d6c760dcf41e3b2dc8889170aadf4e58e4dcc5ff13abc7f0499f5fee641a37e54ccf95fc3d3773680e7749fbb3428f17d88b867720c8a128a48cd5ef84f9c47e1dbddb3048e4faf31f6e12acca7ab38094f06ceb79045050230528fcbb12e75ce4e3e2f8916f6098b975a72e85779e0b91a34f8c398262e5d1afda5620a7458f263bf89c5f4ccf27ca5c5bbd5a8a7227f5763f94e1f6a97a517a", @nested={0x3a, 0xfe, 0x0, 0x1, [@generic="975b92a3cfaa7bab9302c30efc2d7bf88bc0a365858198e374c6fea407d0205ce2ba7e5c3de9623d062e0fb8d35ecc73c188b7b44f15"]}]}]}, 0x204}], 0x3, &(0x7f0000001b40)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r1, r0, r0, r2]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r4, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, 0xffffffffffffffff}}}], 0x120, 0x10}, 0xc0) (async) r18 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r18, @ANYBLOB="0100042000000000000001020200090001"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x4000005}, 0x0) executing program 3: syz_open_dev$dri(&(0x7f0000000300), 0x40100002, 0x189002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) socket(0x11, 0x3, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="75016a009cdc14"], 0xdd12}], 0x1, 0x0, 0x0, 0x8887}, 0x4048820) socket$kcm(0x2, 0x200000000000001, 0x106) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) (async) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r2, 0x1, 0x9, &(0x7f0000000800), 0x4) syz_80211_inject_frame(&(0x7f0000000f40)=@device_b, &(0x7f0000000f80)=@ctrl_frame=@ack={{}, {0x6}}, 0xa) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, &(0x7f0000001fc0)={0x48, 0x3, r5, 0x0, 0x7, 0x1000, &(0x7f0000000fc0)="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"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x100000000000002f) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000101, 0x0, 0x1}]}) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendfile(r3, r4, 0x0, 0xffffffff004) executing program 8: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'macvlan0\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="000022f00000000000000180c200000e88a800008100000208004534005c000000000011907800000000e0000001000017c1004890780300000001000000c5009b0727402b59c52bb5ab2dc2ac9e97c848c11dab8921fcf88afea078dd44ba61387fdaa1e9b063878a1023eb"], 0x76) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') (async) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r4, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x6a7, 0x20000, 0x80ffffff}]}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000200)="1c0000001a009b8a070000003b9b701f400004000000eb3f7a7f1de2", 0x1c) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x803}, 0x20004005) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x58, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "340d89594e"}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}]]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x58, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "340d89594e"}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}]]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) chdir(&(0x7f0000000180)='./file0/../file0\x00') (async) chdir(&(0x7f0000000180)='./file0/../file0\x00') mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000000), 0x2100800, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) executing program 8: r0 = socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a8000081"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) executing program 8: r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) linkat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x1000) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000300)={0x9a0000, 0x2, 0x3, r2, 0x0, &(0x7f00000002c0)={0x990971, 0x4, '\x00', @value=0xffff}}) ioctl$HIDIOCSREPORT(r2, 0x400c4808, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000001c0)={0x980914, 0x8081, @value=0x20000007}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000040)) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f00000003c0)="00ea1c7c000700", 0x7, r4) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000200)="18d84dd060adf0ecb903a75c071e27617f0a635f54415b7308dd12f52c4deae6e97ec624d9b5c1aa1cefeaca7f17f3449ae4121aaf5f556b7038f72c4184fda4b1ab972db011833ea79d88fa3af496365aace5860bdf0deab5d079567afd2945186a22d0be375cc077b2db0ee318b129b8fc95109de62e738b6bdfeb44fdc0c5fc8d7ac51a0449ae612fb67eb596b168432ba6d965232a3662703628218d6e8819974f38e510b5018d109f10bfcc3a08d79789", 0xb3, r4) executing program 37: r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) linkat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x1000) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000300)={0x9a0000, 0x2, 0x3, r2, 0x0, &(0x7f00000002c0)={0x990971, 0x4, '\x00', @value=0xffff}}) ioctl$HIDIOCSREPORT(r2, 0x400c4808, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000001c0)={0x980914, 0x8081, @value=0x20000007}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000040)) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f00000003c0)="00ea1c7c000700", 0x7, r4) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000200)="18d84dd060adf0ecb903a75c071e27617f0a635f54415b7308dd12f52c4deae6e97ec624d9b5c1aa1cefeaca7f17f3449ae4121aaf5f556b7038f72c4184fda4b1ab972db011833ea79d88fa3af496365aace5860bdf0deab5d079567afd2945186a22d0be375cc077b2db0ee318b129b8fc95109de62e738b6bdfeb44fdc0c5fc8d7ac51a0449ae612fb67eb596b168432ba6d965232a3662703628218d6e8819974f38e510b5018d109f10bfcc3a08d79789", 0xb3, r4) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x0, 0x7}, 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) write$UHID_INPUT(r1, &(0x7f0000001140)={0x8, {"f02f3f6567a2871fd09caba20aa1f2bfb99dab752edd27333a653c03aa11be0649c498de08ac4fd38d8e60e87ede0fe99f8379480a923e4e08191ec13d3c492e3a2f8446bb772af1d1255055551d4085146c6c366556a71bbbfe751cd88229d18d4d7a191633ff93fa709d9827faf9572755d033e2d1ae595b6af29b5ba59c9faaeadd51a865d2a823243f0050391e05c54a18fa411223cf6a2982898a3329dd3b641f6a1d3d606a37195c94f1f125b8bf127b5e0458f216e3c75a6265e0bdd77a510f2e3f961306d1414063e3d5a6dc97d0cac0801e2c048761364c444aa84a1aeb909fa6d28eb65c6d755ad91c688a2271a62cd96c99573b3f06666ffcb80cbe988ad64da2fcee4d701fc9ef1944cc6e978f2fb28ed98d7b2e10e448d900b98017b8574fa6454641ba8c4f0a8cbb337024e756efbf4466ebee6ba72dec44136183570d922b8efba1951a77adfa5379902b397c5c6647f24fd1464902ebf08e9753d6a707b3b6d589c862ca091f3503a5569a8b6aea88c883b8ea35f49fd8feb16bc8a6756d55d67886611219c419869a7d151ff1b914201a9c49cacdb5f573158a16fbf8bcaa182a3ddd344928a820f29d61c12e2afc730ad5379473ebff817795949c31b1d6dcbb2a258bb18f8789756b4401f041b90bf7d3079ee9d1d10330217db90bab415073de7043d33cbb7fe2b71bf6c3dd80ee876964ea98539f50c9898f5c90526314419393e645e4dbb6dbc5ea4a41e343589d74bcd0c68e98a17a36e0015e38738c6b560231b7e008816503130de7447819a33e2bf88ff3b9c215040c62ceb1ed6c27f0dcdbac8015827b978d24fd0a32118ae2d23e88042544a9cf90a01fe486178ffb7350ebf5aba92c43c904852ee7f03ac5cc0ddbc8257ec73e34a238babe1557e4a06814048978812ab4d239b4bc5eef96479f4e62f253b51fc4d0961caae6466bf19fe80e3a09df82c17c51a0d766169f59b5b772fa356e6db678f42dbef7e3a76d5e8f6c4226d647c8776ddf0a3247aec581314d2e327453bdec67c3e9dd2f36d358d807d6974e491cbecb2f7bab79f668fb77fd19f7e3022138332447b808e4fe56dcbe0b5f6244e794b5836847dc9cf5f9c603bb5507ebf32ae055e91599ded89fa66d6a307245f6611f8a3dfbeea1a3467c5f2a226cf5a3badf75fbd48619990515f87edb33bb31e6cf680929ac2d564cd7658cd31b066edac7faf88081a9abc258ccd193db38fe432ff97102469fdfbc2aecaf2bc0e49b18aaca7529aac714d69997fb96a2af9424627c21aa03c28bcd555817eafbd93746fdc7af5df40a0ef59aa2dc827eee9c2037de0ff9b78cb5f48bd89cd25db62ac8300775602f786a63d5ec76a08c08f821627cf641afcedc61fe676af4919eee3ee4c3b583b8a9c0de454ad3c9af8972aea67ce404797901a10dcd7aec226444147a7647a5e8572bb1231f1d0c9445c34f633097518d3f797241db3f82f4f6e018458c5f23710128a6884e8d31c04cede46b9a60e1e8a17dc17177709b52effe020d60dbb0da5fe5778238df0dda88ec66976064823eeb043158b4484764c318c238337d4abc3f149c30b31b68990550afbd0a5396f43e7a7251f06e4ccabc3a5d7ba286dc5948d1969c326d142fd4f1835d22e31968d6c0a4ca5259119baf1163d64fe9489ae09d374e6bda938288fd355030d8393fc64896fabfe685510f8ebb04bdf69ef42bdda1ea3681c81626bbaff718f8af26fb85452bfb6a3edfc1ab31db21914d255037f16588dfec1e467127f2a121a51a00480f41389e89e8745a09ca51622b6f6b19e9af48d75a6ee3e196b452dc5d45420de2241e558b794abdb77d21287bf9fa9e08de840115cabd6d4df850bea6d2368359f4b78101847e3954a855789018bcfa55c9480ebfe46eadca32880c55a6425a5c749c2fc20ffcc01f8adf186d673d41e0ef6314aa8b4c57ce45a17a59e6b238db9fec0823548c2f3105a720ec75cddd20dfbb21e091c11e59e8b99e747efd8f4df6c755da0ad28fd0f858f76a3201dcd59c482e8dcccc96e1ccdf789576f12c759ddb3ff599f062c42f49b15ae3eb89a063cc53c2be5053beb576c03c3ed4e8078d996241acb13f65796d41a3773bd11fdd27920ded74e50dadfdcb9510b01e8c497d72dbc5568c6feea2ff15af28f6e2b21dbb1d77849491e7d94b1ab82560a5c24c1b351198ac119d2ab30cd6b0a5e3ce9abfe193726b20347463d749d65b9d70497893b4b8fb5211add377509215c9a4c780308bf72ce0d08d59f20a195e082343343123288328417a2ef5acd1f37e7c91a8c307d24c24502231a5ace0af83bc2fe609a16c649c5aa5c4eb5b0e59c1292c1dc97041719bcc6688098ef28e4f98505773cf90c32bbac36a78d463741285d5d43062f63927305ddb35563733348ae58f9350e58ece144a2935d58a8d5d28b943d8fbeaa020cf82dfa5985e5dda91d1181e7ef8adcf603b5219850f6a853afbad92169e349c885c86aa7a38df9c7237382dbcffd7bc5d97466575ade86cf72410f563c38bdda0c7dc3fdcf8bff0a298a30d2d0640994fdd78404695c64adc4315315ccc47a42996d9d9075cf6d0de39d99ea33fa34741c6c2882881c7c125503697d926dfeef33253ed7898a25601425169a4e500f73133b8c95d24030d50fb9ea21504bf387a1ed87438bab4179cd21c220ec58aca46789d2a9f4be98e07be44b0c60fba5ced184c9622df684d79aa2ea147a99519f044f6a1c589475797a70f3be27d5bf6b4c71811bb2ec0e8aeb497e42c2315c30648ca4273971823989f901bdfa7b3d46f8ea410e70e662d4930dd97652b1ba5c7ef6f5573767f3d96b3b2aadf9c529688ffafd116155d614c90d5b764a56f2df480c7b9ab560d7ce4a0c405fa52e0a49bd52dbc57a2238648361aaae5c687bb265121c02a669922bdf55b625d80c4f50f101ab6142e9d53e43f85c1e29b32c0116b395114d97bd3f77046c612894c51440d5bd239460d103e982bfbed6695ce90f34802166e7b5474bc60c8ee3977e8d17d4d70eebec9c55a6b30af3bc1165d622d2aae24dd9d82b25cb4b0947ae5be3eaa50e700fae95ad87f51f969c261cb0ac0909c2938a80c15fadbb999748a66a6493601bb24916a9bccd8336465a59c70e2bdc5e3aeac3d7956789fb6784866e637ed7723221bd4527ea8318844440d79347aff1f40d08f5a66f94dd9d6c6e80b50f8fe4702c5178ded26813aa3c80d59f27884358b27e23621c038ad9dcc9f8bd0b51df0df8a9862743414ea8821f4eec40b0247e4ff4b3f8c0f159486e6563d06f7ba1e88402bf4d514d95a0b4f25316229a0c67fb3d74f91d19b601738ba1d9815b389f475ed0a2f9e03c5ea45a9e88a73d18022b305354f8e8fbe794335956d3225fad55f1eed18ca8dcf2fd2c6c549bd9406b409a6096f9d8c7c82653ff33c07320a1bad7cbc8bfa57ef38c1278401337868c8bc0faa0e162b1f48b155fe5dae0835cb8ea94f6663809f996bbc995f139426bf32e2663a6fed37239d20bb4857f57f97c6490f9679876540428fde83618dc30db12292972e6e4042a03126c5cb9dde878d493a880841f76ff0b62c02f2be878f595dbe9c2909ff95997cd4720433b2f573d597ce06ed5bc361d3e8561229b409032237f28f14bc9d5c918392d5f211ad12487c1c247440b02bae46ad5b6a309dc5d7dea680f376ada1d725e13340b523e0006824493541cf442c3be451c10997715a8dcf349856a58ee07f1547ca73a3a8fb3c4ff9735546346986b72d5c8b94f81c13487a270d9425e2d6e000d2c2a308ede58e317f27ae4276aa2d8d1c0b85eea5ec02520ce03c8a0634e0d36cbf76d9faa7d60a0491b5164248465fc477b01f0366b02f52ba17813d39e7d00153ef858c4d96eaaaaf4e80ff4ee6f67cd21d1a79a5c3470e014bff81392f6b6288ac6789a2e4919831a20daaf2b661f5d58794a3431642a1b581d597006304ade318faf52a97d08d6ea532095e9137e7e25f32ec2c106ebc65a32a470ad6ce364bd0dd56a1df24175801abd6c6fe92f432e13d6caf766afd4b079837ff3faba26cf6b552c50528ba963ebafbca9d6568cbdc061722285cf7d30e6fd0fdf10142a1942fd4cec2e31f20789a7da58a188fae72eee7874c658ef93b9d72707e714be4ccbfecf22821d5335cba56440080c652767b577fb62a91975f69600fc0e016108173f9d58a0617f625e57291a7b1538e727c0e4a3565c97ed4eaacaf7b6b5a99d6ce0c1b303dff818dde4787f77bd6b55c968efbea22662c148d743b551801978099d605a01b3646c37284826ca7d32a44bc1298b90fb0e0e2f70b07a0bf96c16431e409a697e13b213d6ef613f82a6c15fa6030998508b10cc5ee51b686b77ea8a94183a697d3fda83309cb6c639144fcf270edd04e645af832d29b929b717cc02a78f4b8b7616c3bbdc43af1fe3231c65474efee0e285030ba8f6dced1175e3fb29ee52815b8bb35e157260f1ab64ba4b766c65ed6a0bd7d091e0f7a7c293dc0bb6b04abc0a63e25e9e41fcbe8a2e9a9a39d93721b9782d434df37784136ea3277e37bc8ec6b60dc8ca4446181eaae82db01c80a235cbd84066588d97124f7366eb85e43a9ba10b23e7163dcd7f7ef92f3e25496584b93a66fb42887c93e7abe497b1d2c6a4a146f8b38a1c9712487852686d957acfb73d1caa76456d9674a043f63e9a3bda065f724405267643647e167989439f951f8bc5e7756c6144b1af1a148f61a443456320c14d4483259d498224f05cab4981efd2a6c3836cfec3eab8695547f687f0667a32589fd8871f811646d8f365a6de341d2bd283f9ee14a2bbb7e0bbf7c7ccd83391920a5b6b377912bdfae54e57b5ce67cec2ef446658629fa5846ea762ea16854d01da26faf0b7a2c6be16ea90badd65de823ca6e55989efc68a2bc2db2d63dcfff7d9de10d13f04a9a0cd8c0c07acfac899545a4227fdd56aac3ac2943d45801abefa1682097e61ef605c3d1a3f6ad25aeefd528bcc3ae7fe50a766b8ba84dfdb4b5a94e1bb4f615c83247bd01aa7ecf9af982e082a5fa7ffb11df6fa22159435c4f15aa68d9c61289994f6c3c7550a3d3bbbdc2fe0d16ee83c8d2387aded604e66ed19dcaa7b07f9c3319817148e4a64869ec49c9d96e6e27ef2001fb5c9181add9e00afa30fabe1f4e642f4861fe73aac5489349d529f66d142618958e21b0c8d120690af6448beb1890c72d8993718bcfa75c345c20d3af854627e3248fef475992858a627999e828944fd027d43bef63b813ec7035f3212399d015466b9b97d921fca01bec13eb57b1e57de290cc3dce4eb43f4cc68e2fc221907cf55b27d299affcefc636441d089a4ce6c1de7711266ccba5e1535122a2c56a10c9df91447ad8781266674c1258260eee60dd2d352cf7df384e2cda91911eb31ede372214fc7a6d8e0581fb4706343b2c2728becc35c13aa19f487f70cd43097cefb3c207b093b5b19100f94319211dcb214e8b2c6d380f1889f12c9dc99d6396e0d41c4811db11d04f00f4477f9b1c74cc2638e503b24754fe6f5ea8c20c049540853fc5122a7fdb2a3cc18ba70d781152ed99068fe66b83fc978d82065cc41d6095a845d3010031cd7e70d8793adf45e04efb287e287ec436e90eee6790145638caf9c4eceb290cfed4a382577d06b4561929c3d6780347cbd76b1eabd32eb3011caaece285012cd178a63d83a89dec62714855c6e0158219c18f8b077ec8ed", 0x1000}}, 0x1006) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x1000000}]}]}}, 0x0, 0x42}, 0x20) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYRESOCT=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x289}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) executing program 38: r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x1000000}]}]}}, 0x0, 0x42}, 0x20) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYRESOCT=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x289}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) executing program 5: r0 = socket$netlink(0x10, 0x3, 0x12) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000012000100000800000000000010000000a9f15a0499d3"], 0x30}], 0x1, 0x0, 0x0, 0x4000}, 0x80) executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4(r0, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0x80, 0x800) iopl(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000014c0)=0xfffffffffffffffd) syz_io_uring_setup(0x5bed, &(0x7f0000000100)={0x0, 0x1, 0x4000, 0x2, 0x321}, 0xfffffffffffffffe, 0x0, &(0x7f0000000000)) executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r3) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x5a}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x4c}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r6, 0x25, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x8080) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r9 = syz_usb_connect$cdc_ecm(0x0, 0x80, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x1, 0x1, 0xd, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x7, 0x24, 0x6, 0x0, 0x0, 'xb'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x5, 0x4, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x5, 0x5, 0x6}, @mdlm_detail={0xf, 0x24, 0x13, 0x8, "ea9ec5a6137102581beb28"}, @country_functional={0x6, 0x24, 0x7, 0x10, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x4, 0x4}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x6, 0x4, 0x9, 0x10, 0xfc}, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="050f2d115ad5fb03000a00807f03000a1003020d0008da00000a1003000300050b070007100204ca050003100b"], 0x2, [{0xbe, &(0x7f0000000700)=ANY=[@ANYBLOB="be03d060e2efc71cc4a7d97ab323eb0d1f69da3ddd7cd54eb0705941a0803a9817b11270ad47f35a373751709a2c507d8309000000d257b3f4c1fade53f53cbcae0266922944b2d7dd74af6609ad16b0c789ef327b8446c3fb7a6e7423faff7b76aec494c123937d271d97898919bc3484161419f9d848fe6f79834aeb9d15d06f312407f45b7727fc5a3ce5c5f9c1e992a49f083f4ba7f97f6a04f58971b74719e14bb81ce93b7f35cafca8ac7707f31b10d4940d18bccd18994df51611", @ANYRES16=r5, @ANYRES64=0x0]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xfcff}}]}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bind$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r11, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r10, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x1, 0x7e4c}, 0x8) r12 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x0) ioctl$DRM_IOCTL_GET_CAP(r12, 0xc010640c, &(0x7f0000000000)={0x11}) syz_usb_disconnect(r9) close(r2) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000000000001a", @ANYRES32=r8, @ANYBLOB="46160600203000001c00128009000100626f6e64000000000c0002800800070081000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x480) executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000000)=0x1) r2 = socket$inet6(0xa, 0x3, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xb, 0xfff1}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xb0, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x33672d71e6d70e8b) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x7, 0x80000001, 0xb762, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0xffff, 0x7, 0xfffffffd, 0x2, 0x101, 0x9, 0xfffffffc, 0x4, 0x81000, 0x1, 0x9, 0xc, 0x20001200, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x3, 0x7, 0xfffffff7, 0x1, 0x180, 0x5f09973, 0x9, 0x40, 0x5, 0x8, 0xfffffffe, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0xff, 0x1, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x7, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x4, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x9, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x6ba, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x5, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x1, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x48001009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x6, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x8, 0xc, 0x401003, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x6) executing program 0: r0 = mq_open(&(0x7f00000002c0)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_ext={0x1c, 0x10, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x80}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x3a, 0x1000, &(0x7f0000000840)=""/4096, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001880)={0x4, 0x1, 0xbe, 0x4}, 0x10, 0x1bcac, 0xffffffffffffffff, 0x3, &(0x7f0000001b80), &(0x7f0000001bc0)=[{0x5, 0x3, 0x10, 0xa}, {0x5, 0x5, 0x2, 0x9}, {0x1, 0x1, 0xc, 0xc}], 0x10, 0x1}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1cb1, 0x1c080, 0xa, 0x20002fb}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(r1, 0x2219, 0x7721, 0x3c, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r3, @ANYBLOB="00022bbd7000ffdbdf250e000000940004800900010073797a31000000003c0007800800040003000000080003000f00000008000300040000000800040058020000080002000000008008000200000000000800010014000000040007804400078008000400810000000800010015000000080003007400000008000400ffff000008000300400000000800040080000000080001001600000008000200020000000c00068008000600040000001400098008000100080000000800010004000000b9e58e87ac1b64b5c83465a3ceb577aa6a6f6ef9ab15a6e4299ddd01f65788baa84928476ed289dd03587ffe06194ab1d54788303540b612733c4c922ddb00fa449733774c4d46e091f24e42f7901b840ccfcbbc34cefee7b582c33681cecde147e56ac5a74eb3d485f70dddf0b1f499f0426f61f53b67597a59bd008b467b50b3254df82c068803cc26718584bd2a3b390107fd8e6066aa481d5c7d3c3a42afbd3a294d1c7a8ab7c9ed6b254084b767c4600569fa8af1b3495beee4c051ddcd07f57c20b67e9509ec2dd50a3e11a2dda6225baf8a6794049d2cc45699e72709bf48d0a56702b1f1d63b98cd85292fcf9f26ca118aa3b223"], 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0xd58738708526330e) syz_open_dev$usbmon(&(0x7f0000000080), 0x10000, 0x200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x8, 0x10000, 0x4, 0x4, 0x6, 0x5, 0x7, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={[0x6]}, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a85a056f5d759ded130e04d528539f3d328973747a75df8a69ea917deb7d6193b3e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x5a, 0x2, 0x0, 0x0}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f00000003c0)="e3ef7f670000ec6783b42415449400"/27, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x4, 0x2) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, &(0x7f0000000000)=0x1) close(r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x700, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x106a, 0x0, 0x0, 0x4, 0x0, @broadcast, @remote}}}}) executing program 9: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d40)={&(0x7f0000002bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x5, [{0x4, 0x1, 0x3}, {0x0, 0x1, 0x1}]}]}, {0x0, [0x5f, 0x0, 0x2e, 0x2e]}}, 0x0, 0x42, 0x0, 0x1, 0xfffffc00}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1, 0xfffffffc}, 0x80, 0x0}, 0x1) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1, 0xfffffffc}, 0x80, 0x0}, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000280)='netem\x00', 0x0) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r0, &(0x7f00000003c0)="e6", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}]}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x602, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x88, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x114}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) (fail_nth: 8) executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002251000000a45b455118a19501806eb39e3ce0b0"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000100)={0x3, 0x100, 0x8, 0x7, 0xb, 0x81}) write$binfmt_script(r0, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000597000/0x3000)=nil, 0x3000, 0x9, 0x28011, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1) executing program 0: bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f009, 0x7fffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='attr/current\x00') read$eventfd(r1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r1, &(0x7f0000000040)="f186adf96e03985115df2a81b04083b5157ef43039d6b8c6e4ff81b08492dbe63fbf59fc8154fa3a195605ee7bd316b470637359b7c443fa9019c9097973353aea63c91acda298f2e735ac25197688339a0c1352dd631a8d2e49f4", &(0x7f0000000200)=""/117}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) recvfrom(r1, &(0x7f0000000640)=""/67, 0x43, 0x2, &(0x7f0000000740)=@ethernet={0x1}, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x132, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvmmsg(r3, &(0x7f0000009600)=[{{0x0, 0x0, 0x0}, 0x5e}], 0x1, 0x2022, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6bad}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7fffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0xce}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}]}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xf}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa0}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket(0x2b, 0x1, 0x1) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x5) r9 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c0012800b0001006970766c616e00000c000280060002000100000008000500", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x3, r3}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030001000100"/28], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000010301"], 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0400, 0x0) ioctl$CDROMREADTOCHDR(r4, 0x5305, &(0x7f0000000040)={0x6, 0x7}) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x4, 0x2, 0x4, 0x1}}, 0x26) executing program 0: r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@float={0xb, 0x0, 0x0, 0x10, 0x10}, @var={0x2, 0x0, 0x0, 0xe, 0x2}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x4}]}]}, {0x0, [0x30, 0x2e, 0x2e, 0x2e, 0xcf]}}, &(0x7f00000005c0)=""/117, 0x4f, 0x75, 0x0, 0x5, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000009a0e000000000000ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186a000002000000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000185600000a00000000000000000000005025800000000000180020000100010000000000da530000182b0000c03a08b33db48530ab28288b4ee25f5ded3a69ff74ffa1f67484e7f6c693634b76db43d901ca3c30a4154c8e1164d02d42c8ae9602af2cdaf186f1a178945c2594cadb494246c6630aae5e8996c5f08012ef48d2d6", @ANYRES32=r3, @ANYBLOB="00000000ae000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x81, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000000680)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x3, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000740)=[{0x0, 0x1, 0x1, 0x2}, {0x5, 0x4, 0x1, 0x2}, {0x1, 0x3, 0x8, 0x8}, {0x4, 0x4, 0x2, 0x8}, {0x5, 0x4, 0x9, 0x5362a4a45a330a35}], 0x10, 0x7}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) executing program 9: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={0x0, 0x0, r1, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000080)={r2, 0x1, 0x6, 0x4, &(0x7f0000000380)=[{0xbc3, 0x8d, 0x10d7, 0x776}, {0x4, 0x200, 0x2, 0x7}, {0x3, 0x80, 0x10, 0x52be}, {0x8, 0xeab, 0x10, 0x5}]}) executing program 9: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x481d5) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}}, 0x0) executing program 9: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0xfffffffd}, 0x1c) (async, rerun: 64) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r2, @in={{0x2, 0x4e23, @empty}}, 0x8e2e, 0x5}, 0x90) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r6 = syz_usb_connect$uac1(0x6, 0xf6, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x201, 0xb, 0x1, 0xbc, 0x8, 0x3}, 0x14, &(0x7f0000000500)={0x5, 0xf, 0x14, 0x3, [@ptm_cap={0x3}, @generic={0x9, 0x10, 0x2, "9a69319d4365"}, @ptm_cap={0x3}]}}) syz_usb_disconnect(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r9, 0x29, 0x33, 0x0, &(0x7f0000000240)) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="546bf000b6db6085115213c2db04c4b64650258ee402e44a108955eedf7774dd790286073950d1033630c8a7755c55f204a6644465dae71b79ef67b7ade20733a5ac99547d5c08e1f728a52d4e0ec124e098109aa0d94c9c288a05066b9cb612d6398d94b340ac4ea677a35a58af1cb0071a25d5bedd91623e1b8fdbc4ffe88df76b9eccf41438eaf0c917", @ANYRES16=r1, @ANYBLOB="01002bbd7000feffffff1e0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008003e00000000000c008f0000000000000000000c0090000300000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044010) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x58, r6, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x3c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x6000001}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0xfc, 0x1, 0x7fff8000}]}) r11 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r11, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r12}], 0x1, 0x0, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @empty}, 0x1c) listen(r9, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x14, 0x6, 0xfe, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x2000, 0x0, 0x7}}}}}}}, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x2, &(0x7f0000001c80)=""/4035, &(0x7f0000000280)=0xfffffffffffffff2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r13}, 0x10) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) executing program 4: r0 = socket(0x28, 0x5, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x38a9b}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r4, 0x18b, 0x8}, &(0x7f0000000240)=0x8) recvfrom$unix(r3, &(0x7f0000000380)=""/263, 0x107, 0x100, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001800010000000000000000000a9e"], 0x64}}, 0x0) executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000ac0)={0xa, 0x4e24, 0x3, @mcast1, 0x7}, 0x1c) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x3c}}, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000300)=0x60006, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYBLOB="ef00000000000000140012"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_DELSETELEM={0x64, 0xe, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x204, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5b098549}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x50000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000900)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r4}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r6, &(0x7f0000000140)=""/106, 0x6a, 0x1000007) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f00000021c0)=0x47, 0x4) recvmmsg(r7, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x22, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r8, 0x89e1, &(0x7f0000006ec0)={'nr0\x00', 0x1, 0x9}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYBLOB="061c0000", @ANYRESDEC=0x0, @ANYBLOB=':+00000000000000000000=']) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffd, 0x200, 0x0, 0x10, 0x2}, 0x93, 0x0, 0x6, 0xd, 0x4b3938df, 0x0, 0x1, 0xa, 0x5, 0xc, {0x80000000, 0x81, 0x4e0, 0x0, 0x4, 0x45}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r5, r6, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r7, &(0x7f0000000100)=""/134, 0x86) getdents64(r7, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x10, 0x0, 0x4000000000200}, 0x0, 0x0, 0x0, 0x0}) getdents64(r7, &(0x7f0000000640)=""/193, 0xc1) syz_fuse_handle_req(r0, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x30, 0x0, 0x8, [{0x1, 0x0, 0x1, 0xfffffe01, '['}]}, 0x0, 0x0, 0x0, 0x0}) executing program 9: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x481d5) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}}, 0x0) executing program 9: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) (async) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (async) r15 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r15, 0x6, 0x0, 0x0, 0x0) r16 = fsmount(r15, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r16, &(0x7f0000000140)='./file0\x00') syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') (async) r17 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') execveat$binfmt(r16, r17, 0x0, 0x0, 0x0) r18 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0xffffffff, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, r14, r16, r18], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-openat$cgroup_ro-write$uinput_user_dev-write$uinput_user_dev-mmap-bpf$MAP_UPDATE_ELEM_TAIL_CALL-fsopen-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-syz_create_resource$binfmt-syz_create_resource$binfmt-execveat$binfmt-bpf$BPF_MAP_GET_FD_BY_ID-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) (async) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (async) r15 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r15, 0x6, 0x0, 0x0, 0x0) r16 = fsmount(r15, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r16, &(0x7f0000000140)='./file0\x00') syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') (async) r17 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') execveat$binfmt(r16, r17, 0x0, 0x0, 0x0) r18 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0xffffffff, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, r14, r16, r18], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-out-of-bounds Read in link_path_walk single: successfully extracted reproducer found reproducer with 40 syscalls minimizing guilty program testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-openat$cgroup_ro-write$uinput_user_dev-write$uinput_user_dev-mmap-bpf$MAP_UPDATE_ELEM_TAIL_CALL-fsopen-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-syz_create_resource$binfmt-syz_create_resource$binfmt-execveat$binfmt-bpf$BPF_MAP_GET_FD_BY_ID detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r2 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) (async) write$uinput_user_dev(r5, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (async) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000140)='./file0\x00') syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') (async) r8 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') execveat$binfmt(r7, r8, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0xffffffff, 0x8}, 0xc) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-openat$cgroup_ro-write$uinput_user_dev-write$uinput_user_dev-mmap-bpf$MAP_UPDATE_ELEM_TAIL_CALL-fsopen-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-syz_create_resource$binfmt-syz_create_resource$binfmt-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) (async) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (async) r15 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r15, 0x6, 0x0, 0x0, 0x0) r16 = fsmount(r15, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r16, &(0x7f0000000140)='./file0\x00') syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') (async) r17 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') execveat$binfmt(r16, r17, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, r14, r16, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in current_time testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-openat$cgroup_ro-write$uinput_user_dev-write$uinput_user_dev-mmap-bpf$MAP_UPDATE_ELEM_TAIL_CALL-fsopen-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-syz_create_resource$binfmt-syz_create_resource$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) (async) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (async) r15 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r15, 0x6, 0x0, 0x0, 0x0) r16 = fsmount(r15, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r16, &(0x7f0000000140)='./file0\x00') syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') (async) syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, r14, r16, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-openat$cgroup_ro-write$uinput_user_dev-write$uinput_user_dev-mmap-bpf$MAP_UPDATE_ELEM_TAIL_CALL-fsopen-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-syz_create_resource$binfmt-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) (async) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (async) r15 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r15, 0x6, 0x0, 0x0, 0x0) r16 = fsmount(r15, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r16, &(0x7f0000000140)='./file0\x00') syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') (async) execveat$binfmt(r16, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, r14, r16, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in current_time testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-openat$cgroup_ro-write$uinput_user_dev-write$uinput_user_dev-mmap-bpf$MAP_UPDATE_ELEM_TAIL_CALL-fsopen-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) (async) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (async) r15 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r15, 0x6, 0x0, 0x0, 0x0) r16 = fsmount(r15, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r16, &(0x7f0000000140)='./file0\x00') execveat$binfmt(r16, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, r14, r16, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-out-of-bounds Read in link_path_walk testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-openat$cgroup_ro-write$uinput_user_dev-write$uinput_user_dev-mmap-bpf$MAP_UPDATE_ELEM_TAIL_CALL-fsopen-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) (async) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (async) r15 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r15, 0x6, 0x0, 0x0, 0x0) r16 = fsmount(r15, 0x0, 0x0) execveat$binfmt(r16, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, r14, r16, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in atime_needs_update testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-openat$cgroup_ro-write$uinput_user_dev-write$uinput_user_dev-mmap-bpf$MAP_UPDATE_ELEM_TAIL_CALL-fsopen-fsopen-fsconfig$FSCONFIG_CMD_CREATE-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) (async) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (async) r15 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r15, 0x6, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, r14, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program did not crash testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-openat$cgroup_ro-write$uinput_user_dev-write$uinput_user_dev-mmap-bpf$MAP_UPDATE_ELEM_TAIL_CALL-fsopen-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) (async) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (async) r15 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r16 = fsmount(r15, 0x0, 0x0) execveat$binfmt(r16, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, r14, r16, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in pick_link testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-openat$cgroup_ro-write$uinput_user_dev-write$uinput_user_dev-mmap-bpf$MAP_UPDATE_ELEM_TAIL_CALL-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) (async) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (async) r15 = fsmount(0xffffffffffffffff, 0x0, 0x0) execveat$binfmt(r15, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, r14, r15, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-openat$cgroup_ro-write$uinput_user_dev-write$uinput_user_dev-mmap-bpf$MAP_UPDATE_ELEM_TAIL_CALL-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) (async) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) r15 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r16 = fsmount(r15, 0x0, 0x0) execveat$binfmt(r16, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, r14, r16, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in current_time testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-openat$cgroup_ro-write$uinput_user_dev-write$uinput_user_dev-mmap-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) (async) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) r14 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r15 = fsmount(r14, 0x0, 0x0) execveat$binfmt(r15, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, 0xffffffffffffffff, r15, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in current_time testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-openat$cgroup_ro-write$uinput_user_dev-write$uinput_user_dev-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) (async) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) r14 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r15 = fsmount(r14, 0x0, 0x0) execveat$binfmt(r15, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, 0xffffffffffffffff, r15, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in atime_needs_update testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-openat$cgroup_ro-write$uinput_user_dev-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r13, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) (async) r14 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r15 = fsmount(r14, 0x0, 0x0) execveat$binfmt(r15, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, 0xffffffffffffffff, r15, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-out-of-bounds Read in link_path_walk testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r14 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r15 = fsmount(r14, 0x0, 0x0) execveat$binfmt(r15, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, 0xffffffffffffffff, r15, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in pick_link testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r13 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r14 = fsmount(r13, 0x0, 0x0) execveat$binfmt(r14, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, 0xffffffffffffffff, 0xffffffffffffffff, r14, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in security_inode_follow_link testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) r13 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r14 = fsmount(r13, 0x0, 0x0) execveat$binfmt(r14, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, 0xffffffffffffffff, 0xffffffffffffffff, r14, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r12 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r13 = fsmount(r12, 0x0, 0x0) execveat$binfmt(r13, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r13, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in pick_link testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r12 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r13 = fsmount(r12, 0x0, 0x0) execveat$binfmt(r13, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r13, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program did not crash testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r6 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000140)='./file0\x00') unlinkat(r7, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r7, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r8, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r10 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r11 = fsmount(r10, 0x0, 0x0) execveat$binfmt(r11, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r3, 0x1c, r4, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r5, 0x1, &(0x7f00000009c0)=[r7, r8, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r11, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program did not crash testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r11 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r12 = fsmount(r11, 0x0, 0x0) execveat$binfmt(r12, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, 0xffffffffffffffff, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_CREATE-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r12 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r13 = fsmount(r12, 0x0, 0x0) execveat$binfmt(r13, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, r9, r10, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r13, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r11 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r12 = fsmount(r11, 0x0, 0x0) execveat$binfmt(r12, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, 0xffffffffffffffff, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-out-of-bounds Read in link_path_walk testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r11 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r12 = fsmount(r11, 0x0, 0x0) execveat$binfmt(r12, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, 0xffffffffffffffff, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r11 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r12 = fsmount(r11, 0x0, 0x0) execveat$binfmt(r12, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, 0xffffffffffffffff, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program did not crash testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r11 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r12 = fsmount(r11, 0x0, 0x0) execveat$binfmt(r12, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, 0xffffffffffffffff, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r10 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r11 = fsmount(r10, 0x0, 0x0) execveat$binfmt(r11, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, r8, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r11, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program did not crash testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r11 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r12 = fsmount(r11, 0x0, 0x0) execveat$binfmt(r12, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, 0xffffffffffffffff, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r11 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r12 = fsmount(r11, 0x0, 0x0) execveat$binfmt(r12, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r8, 0xffffffffffffffff, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$OBJ_GET_PROG-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000140)='./file0\x00') unlinkat(r7, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r7, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r10 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r11 = fsmount(r10, 0x0, 0x0) execveat$binfmt(r11, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, r6, 0x1, &(0x7f00000009c0)=[r7, 0xffffffffffffffff, r8, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r11, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program did not crash testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) r6 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000140)='./file0\x00') unlinkat(r7, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r7, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r10 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r11 = fsmount(r10, 0x0, 0x0) execveat$binfmt(r11, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r7, 0xffffffffffffffff, r8, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r11, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-out-of-bounds Read in link_path_walk testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-bpf$BPF_BTF_LOAD-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0xc, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x6}], "06"}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000500)=""/147, 0x8c, 0x93, 0x0, 0x8e, 0x10000}, 0x28) (async) r5 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') unlinkat(r6, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r6, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r9 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r10 = fsmount(r9, 0x0, 0x0) execveat$binfmt(r10, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r6, 0xffffffffffffffff, r7, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in pick_link testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) r5 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') unlinkat(r6, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r6, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r9 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r10 = fsmount(r9, 0x0, 0x0) execveat$binfmt(r10, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', r4, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r6, 0xffffffffffffffff, r7, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-out-of-bounds Read in link_path_walk testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) r4 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') unlinkat(r5, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r5, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r8 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r9 = fsmount(r8, 0x0, 0x0) execveat$binfmt(r9, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r5, 0xffffffffffffffff, r6, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in link_path_walk testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r4 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') unlinkat(r5, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r5, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r8 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r9 = fsmount(r8, 0x0, 0x0) execveat$binfmt(r9, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r5, 0xffffffffffffffff, r6, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) r3 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') unlinkat(r4, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r4, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r8 = fsmount(r7, 0x0, 0x0) execveat$binfmt(r8, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r4, 0xffffffffffffffff, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in current_time testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-ioctl$SIOCSIFHWADDR-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) r2 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) execveat$binfmt(r7, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r3, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-dup-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = dup(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) r3 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') unlinkat(r4, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r4, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r8 = fsmount(r7, 0x0, 0x0) execveat$binfmt(r8, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r4, 0xffffffffffffffff, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) r2 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) execveat$binfmt(r7, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r3, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in pick_link testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) execveat$binfmt(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) r2 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) execveat$binfmt(r7, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r3, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) r2 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) execveat$binfmt(r7, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r3, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program did not crash testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) r2 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) execveat$binfmt(r7, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r3, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program did not crash testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) r2 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) execveat$binfmt(r7, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r3, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program did not crash testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) r2 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) execveat$binfmt(r7, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r3, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program did not crash testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) r2 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) execveat$binfmt(r7, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r3, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in selinux_inode_follow_link testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x2, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x80000000, 0x7f}}) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) execveat$binfmt(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in pick_link testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) execveat$binfmt(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) execveat$binfmt(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in pick_link testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) execveat$binfmt(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program did not crash testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) (async) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) execveat$binfmt(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program did not crash testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) execveat$binfmt(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(0x0, r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) execveat$binfmt(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program did not crash testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, 0x0) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) execveat$binfmt(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program did not crash testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, 0x0, 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) execveat$binfmt(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program did not crash testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) execveat$binfmt(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) execveat$binfmt(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program did not crash testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) execveat$binfmt(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in pick_link testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) execveat$binfmt(r5, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-out-of-bounds Read in link_path_walk testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) (async) r0 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') unlinkat(r1, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r1, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) execveat$binfmt(r4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={0x0, 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) execveat$binfmt(r5, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in atime_needs_update testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={0x0, 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) execveat$binfmt(r5, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in atime_needs_update testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={0x0, 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) execveat$binfmt(r5, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) minimization failed with failed to copy syz-executor to VM: scp failed: failed to run ["scp" "-P" "11613" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "-O" "/syzkaller/syzkaller/current/bin/linux_amd64/syz-executor" "root@localhost:/syz-executor"]: exit status 1 extracting C reproducer testing compiled C program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD program crashed: KASAN: slab-use-after-free Read in security_inode_follow_link simplifying C reproducer testing compiled C program (duration=2m23.810401791s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD program did not crash testing compiled C program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD program crashed: KASAN: slab-use-after-free Read in pick_link testing compiled C program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD program crashed: KASAN: slab-out-of-bounds Read in link_path_walk testing compiled C program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD program did not crash testing compiled C program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD testing compiled C program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD program crashed: KASAN: slab-use-after-free Read in pick_link testing compiled C program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD program crashed: KASAN: slab-use-after-free Read in security_inode_follow_link testing compiled C program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD program crashed: KASAN: slab-use-after-free Read in pick_link testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={0x0, 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) execveat$binfmt(r5, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in current_time validation run: crashed=true testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={0x0, 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) execveat$binfmt(r5, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in current_time validation run: crashed=true testing program (duration=2m23.810401791s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-syz_open_procfs$namespace-ioctl$SIOCSIFHWADDR-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-symlinkat-unlinkat-unlinkat-bpf$MAP_LOOKUP_ELEM-bpf$MAP_UPDATE_CONST_STR-bpf$OBJ_GET_MAP-bpf$MAP_CREATE_CONST_STR-openat$cgroup_ro-fsopen-fsmount-execveat$binfmt-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={0x0, 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) execveat$binfmt(r5, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@tail_call, @alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29}, @snprintf, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @tail_call, @generic={0xe8, 0x2, 0x0, 0x5, 0x1ce}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x1, 0x45}, 0x10, 0xbf70, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x8, 0x7}], 0x10, 0x2}, 0x94) program crashed: KASAN: slab-use-after-free Read in security_inode_follow_link validation run: crashed=true reproducing took 2h2m34.707203064s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in security_inode_follow_link+0x277/0x280 security/security.c:1819 Read of size 4 at addr ffff8880393e0004 by task syz.0.594/8610 CPU: 3 UID: 0 PID: 8610 Comm: syz.0.594 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0x13d/0x4b0 mm/kasan/report.c:482 kasan_report+0xdf/0x1d0 mm/kasan/report.c:595 security_inode_follow_link+0x277/0x280 security/security.c:1819 pick_link+0x433/0x13c0 fs/namei.c:2049 step_into_slowpath+0x9ba/0xf90 fs/namei.c:2123 step_into fs/namei.c:2148 [inline] walk_component fs/namei.c:2284 [inline] link_path_walk+0xf28/0x1cc0 fs/namei.c:2652 path_parentat fs/namei.c:2856 [inline] __filename_parentat+0x213/0x740 fs/namei.c:2880 filename_parentat fs/namei.c:2898 [inline] filename_unlinkat+0xf7/0x730 fs/namei.c:5537 __do_sys_unlinkat fs/namei.c:5597 [inline] __se_sys_unlinkat fs/namei.c:5589 [inline] __x64_sys_unlinkat+0xc0/0x130 fs/namei.c:5589 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f60b0f9ce59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f60b1dc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 RAX: ffffffffffffffda RBX: 00007f60b1215fa0 RCX: 00007f60b0f9ce59 RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 RBP: 00007f60b1032d6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f60b1216038 R14: 00007f60b1215fa0 R15: 00007ffddfc81a28 Allocated by task 8610: kasan_save_stack+0x30/0x50 mm/kasan/common.c:57 kasan_save_track+0x14/0x30 mm/kasan/common.c:78 unpoison_slab_object mm/kasan/common.c:340 [inline] __kasan_slab_alloc+0x89/0x90 mm/kasan/common.c:366 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4570 [inline] slab_alloc_node mm/slub.c:4899 [inline] kmem_cache_alloc_lru_noprof+0x246/0x6e0 mm/slub.c:4918 alloc_inode+0x183/0x250 fs/inode.c:347 new_inode+0x22/0x1c0 fs/inode.c:1179 bpf_get_inode kernel/bpf/inode.c:117 [inline] bpf_get_inode kernel/bpf/inode.c:102 [inline] bpf_symlink+0x69/0x240 kernel/bpf/inode.c:391 vfs_symlink fs/namei.c:5643 [inline] vfs_symlink+0x178/0x4d0 fs/namei.c:5622 filename_symlinkat+0x2a6/0x560 fs/namei.c:5668 __do_sys_symlinkat fs/namei.c:5688 [inline] __se_sys_symlinkat fs/namei.c:5683 [inline] __x64_sys_symlinkat+0x9c/0xe0 fs/namei.c:5683 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 8611: kasan_save_stack+0x30/0x50 mm/kasan/common.c:57 kasan_save_track+0x14/0x30 mm/kasan/common.c:78 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2689 [inline] slab_free mm/slub.c:6251 [inline] kmem_cache_free+0x127/0x6c0 mm/slub.c:6378 destroy_inode+0xcb/0x1c0 fs/inode.c:394 evict+0x599/0xad0 fs/inode.c:865 iput_final fs/inode.c:1960 [inline] iput.part.0+0x605/0xf50 fs/inode.c:2009 iput+0x35/0x40 fs/inode.c:1975 filename_unlinkat+0x466/0x730 fs/namei.c:5572 __do_sys_unlinkat fs/namei.c:5597 [inline] __se_sys_unlinkat fs/namei.c:5589 [inline] __x64_sys_unlinkat+0xc0/0x130 fs/namei.c:5589 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f The buggy address belongs to the object at ffff8880393e0000 which belongs to the cache inode_cache of size 1088 The buggy address is located 4 bytes inside of freed 1088-byte region [ffff8880393e0000, ffff8880393e0440) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x393e0 head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 memcg:ffff88803ce9f201 flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000040 ffff888100090000 dead000000000100 dead000000000122 raw: 0000000000000000 00000008001a001a 00000000f5000000 ffff88803ce9f201 head: 00fff00000000040 ffff888100090000 dead000000000100 dead000000000122 head: 0000000000000000 00000008001a001a 00000000f5000000 ffff88803ce9f201 head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5753, tgid 5753 (syz-execprog), ts 103858448509, free_ts 0 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1853 prep_new_page mm/page_alloc.c:1861 [inline] get_page_from_freelist+0x11a6/0x3410 mm/page_alloc.c:3941 __alloc_frozen_pages_noprof+0x27c/0x2bc0 mm/page_alloc.c:5221 alloc_slab_page mm/slub.c:3278 [inline] allocate_slab mm/slub.c:3467 [inline] new_slab+0xa6/0x6c0 mm/slub.c:3525 refill_objects+0x277/0x420 mm/slub.c:7272 refill_sheaf mm/slub.c:2816 [inline] __pcs_replace_empty_main+0x375/0x650 mm/slub.c:4652 alloc_from_pcs mm/slub.c:4750 [inline] slab_alloc_node mm/slub.c:4884 [inline] kmem_cache_alloc_lru_noprof+0x485/0x6e0 mm/slub.c:4918 alloc_inode+0x183/0x250 fs/inode.c:347 iget_locked+0x1d9/0x6d0 fs/inode.c:1474 kernfs_get_inode+0x46/0x470 fs/kernfs/inode.c:252 kernfs_iop_lookup+0x1a7/0x2d0 fs/kernfs/dir.c:1274 lookup_open.isra.0+0x631/0x11b0 fs/namei.c:4484 open_last_lookups fs/namei.c:4611 [inline] path_openat+0xa98/0x31a0 fs/namei.c:4855 do_file_open+0x20e/0x430 fs/namei.c:4887 do_sys_openat2+0x10d/0x1e0 fs/open.c:1364 do_sys_open fs/open.c:1370 [inline] __do_sys_openat fs/open.c:1386 [inline] __se_sys_openat fs/open.c:1381 [inline] __x64_sys_openat+0x12d/0x210 fs/open.c:1381 page_owner free stack trace missing Memory state around the buggy address: ffff8880393dff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff8880393dff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffff8880393e0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8880393e0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8880393e0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in security_inode_follow_link+0x277/0x280 security/security.c:1819 Read of size 4 at addr ffff8880393e0004 by task syz.0.594/8610 CPU: 3 UID: 0 PID: 8610 Comm: syz.0.594 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0x13d/0x4b0 mm/kasan/report.c:482 kasan_report+0xdf/0x1d0 mm/kasan/report.c:595 security_inode_follow_link+0x277/0x280 security/security.c:1819 pick_link+0x433/0x13c0 fs/namei.c:2049 step_into_slowpath+0x9ba/0xf90 fs/namei.c:2123 step_into fs/namei.c:2148 [inline] walk_component fs/namei.c:2284 [inline] link_path_walk+0xf28/0x1cc0 fs/namei.c:2652 path_parentat fs/namei.c:2856 [inline] __filename_parentat+0x213/0x740 fs/namei.c:2880 filename_parentat fs/namei.c:2898 [inline] filename_unlinkat+0xf7/0x730 fs/namei.c:5537 __do_sys_unlinkat fs/namei.c:5597 [inline] __se_sys_unlinkat fs/namei.c:5589 [inline] __x64_sys_unlinkat+0xc0/0x130 fs/namei.c:5589 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f60b0f9ce59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f60b1dc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 RAX: ffffffffffffffda RBX: 00007f60b1215fa0 RCX: 00007f60b0f9ce59 RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 RBP: 00007f60b1032d6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f60b1216038 R14: 00007f60b1215fa0 R15: 00007ffddfc81a28 Allocated by task 8610: kasan_save_stack+0x30/0x50 mm/kasan/common.c:57 kasan_save_track+0x14/0x30 mm/kasan/common.c:78 unpoison_slab_object mm/kasan/common.c:340 [inline] __kasan_slab_alloc+0x89/0x90 mm/kasan/common.c:366 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4570 [inline] slab_alloc_node mm/slub.c:4899 [inline] kmem_cache_alloc_lru_noprof+0x246/0x6e0 mm/slub.c:4918 alloc_inode+0x183/0x250 fs/inode.c:347 new_inode+0x22/0x1c0 fs/inode.c:1179 bpf_get_inode kernel/bpf/inode.c:117 [inline] bpf_get_inode kernel/bpf/inode.c:102 [inline] bpf_symlink+0x69/0x240 kernel/bpf/inode.c:391 vfs_symlink fs/namei.c:5643 [inline] vfs_symlink+0x178/0x4d0 fs/namei.c:5622 filename_symlinkat+0x2a6/0x560 fs/namei.c:5668 __do_sys_symlinkat fs/namei.c:5688 [inline] __se_sys_symlinkat fs/namei.c:5683 [inline] __x64_sys_symlinkat+0x9c/0xe0 fs/namei.c:5683 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 8611: kasan_save_stack+0x30/0x50 mm/kasan/common.c:57 kasan_save_track+0x14/0x30 mm/kasan/common.c:78 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2689 [inline] slab_free mm/slub.c:6251 [inline] kmem_cache_free+0x127/0x6c0 mm/slub.c:6378 destroy_inode+0xcb/0x1c0 fs/inode.c:394 evict+0x599/0xad0 fs/inode.c:865 iput_final fs/inode.c:1960 [inline] iput.part.0+0x605/0xf50 fs/inode.c:2009 iput+0x35/0x40 fs/inode.c:1975 filename_unlinkat+0x466/0x730 fs/namei.c:5572 __do_sys_unlinkat fs/namei.c:5597 [inline] __se_sys_unlinkat fs/namei.c:5589 [inline] __x64_sys_unlinkat+0xc0/0x130 fs/namei.c:5589 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f The buggy address belongs to the object at ffff8880393e0000 which belongs to the cache inode_cache of size 1088 The buggy address is located 4 bytes inside of freed 1088-byte region [ffff8880393e0000, ffff8880393e0440) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x393e0 head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 memcg:ffff88803ce9f201 flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000040 ffff888100090000 dead000000000100 dead000000000122 raw: 0000000000000000 00000008001a001a 00000000f5000000 ffff88803ce9f201 head: 00fff00000000040 ffff888100090000 dead000000000100 dead000000000122 head: 0000000000000000 00000008001a001a 00000000f5000000 ffff88803ce9f201 head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5753, tgid 5753 (syz-execprog), ts 103858448509, free_ts 0 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1853 prep_new_page mm/page_alloc.c:1861 [inline] get_page_from_freelist+0x11a6/0x3410 mm/page_alloc.c:3941 __alloc_frozen_pages_noprof+0x27c/0x2bc0 mm/page_alloc.c:5221 alloc_slab_page mm/slub.c:3278 [inline] allocate_slab mm/slub.c:3467 [inline] new_slab+0xa6/0x6c0 mm/slub.c:3525 refill_objects+0x277/0x420 mm/slub.c:7272 refill_sheaf mm/slub.c:2816 [inline] __pcs_replace_empty_main+0x375/0x650 mm/slub.c:4652 alloc_from_pcs mm/slub.c:4750 [inline] slab_alloc_node mm/slub.c:4884 [inline] kmem_cache_alloc_lru_noprof+0x485/0x6e0 mm/slub.c:4918 alloc_inode+0x183/0x250 fs/inode.c:347 iget_locked+0x1d9/0x6d0 fs/inode.c:1474 kernfs_get_inode+0x46/0x470 fs/kernfs/inode.c:252 kernfs_iop_lookup+0x1a7/0x2d0 fs/kernfs/dir.c:1274 lookup_open.isra.0+0x631/0x11b0 fs/namei.c:4484 open_last_lookups fs/namei.c:4611 [inline] path_openat+0xa98/0x31a0 fs/namei.c:4855 do_file_open+0x20e/0x430 fs/namei.c:4887 do_sys_openat2+0x10d/0x1e0 fs/open.c:1364 do_sys_open fs/open.c:1370 [inline] __do_sys_openat fs/open.c:1386 [inline] __se_sys_openat fs/open.c:1381 [inline] __x64_sys_openat+0x12d/0x210 fs/open.c:1381 page_owner free stack trace missing Memory state around the buggy address: ffff8880393dff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff8880393dff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffff8880393e0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8880393e0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8880393e0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ==================================================================